Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/40df0d8c-78eb-39e8-80b9-dfebb173d0bb.roa
File:                     40df0d8c-78eb-39e8-80b9-dfebb173d0bb.roa (raw, json)
Hash identifier:          kl3WPuD2lq8Em3DS7v+JlQh2aY0lKzQ7A0NVYLzpWqo=
Subject key identifier:   07:0C:6B:3C:04:2A:BE:E9:F4:A5:00:18:82:A7:2F:93:8C:A6:3D:C2
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584B25FC368D5DE6B60453D82C80
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/40df0d8c-78eb-39e8-80b9-dfebb173d0bb.roa
Signing time:             Wed 10 Sep 2025 13:00:41 +0000
ROA not before:           Wed 10 Sep 2025 13:00:41 +0000
ROA not after:            Tue 09 Dec 2025 14:00:41 +0000
asID:                     271
IP address blocks:        209.87.24.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:25:fc:36:8d:5d:e6:b6:04:53:d8:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Sep 10 13:00:41 2025 GMT
            Not After : Dec  9 14:00:41 2025 GMT
        Subject: CN=cdea91ec-2a6d-413b-ad5f-e26dbbb551cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:58:ef:64:e4:59:44:69:b7:31:ec:53:4e:e8:
                    e9:ce:9f:c5:32:cc:fe:4d:bb:c1:da:5b:f3:a2:32:
                    a3:e0:3f:8d:e9:fd:c4:38:94:4a:61:8f:70:63:88:
                    78:0e:d7:42:08:76:3f:cc:3d:a5:4b:2a:e4:cc:bb:
                    b8:60:a2:c3:7b:7b:f2:e4:67:8a:c4:c2:3a:a2:66:
                    3a:96:51:1d:d9:ee:8c:ce:5d:52:d4:2a:80:a2:e0:
                    ed:c4:15:7b:0c:3e:58:a8:2f:bb:86:90:c0:b3:f7:
                    64:20:d7:0d:52:1f:36:d3:0f:14:d8:6f:a9:94:61:
                    a8:e9:6f:26:ce:0e:f8:f7:88:25:30:f6:dd:21:0a:
                    78:fe:05:c0:25:76:4f:fd:97:49:e9:2e:c8:57:ed:
                    f0:bf:49:8e:0b:72:52:96:61:80:81:16:50:5d:4e:
                    45:68:c7:09:2a:83:47:1a:81:6a:0a:b0:98:48:14:
                    80:82:e1:7c:02:de:48:18:46:6a:a9:da:4f:fe:12:
                    1b:d5:73:de:5d:a1:72:f6:cb:91:42:eb:c8:ec:2d:
                    b7:83:2e:27:61:81:96:6b:b2:58:22:5e:91:fe:2e:
                    52:1d:8d:9c:f4:3a:9e:55:73:53:6d:66:8f:05:03:
                    fe:c5:2f:31:cb:eb:76:55:e3:43:10:95:dc:43:fd:
                    a3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:0C:6B:3C:04:2A:BE:E9:F4:A5:00:18:82:A7:2F:93:8C:A6:3D:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/40df0d8c-78eb-39e8-80b9-dfebb173d0bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.24.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:59:93:82:1e:70:d9:5b:2c:95:3f:f3:45:d8:d9:2d:b9:3a:
         d2:0f:67:96:91:76:a6:d2:cf:df:21:ab:50:bc:9e:ce:cb:15:
         e9:ac:35:b9:22:31:f3:55:6e:b7:d2:eb:3c:66:77:fc:1c:ce:
         f0:b1:a3:42:9d:2f:55:1f:c0:68:be:9d:7d:14:48:76:b7:6d:
         8c:74:44:78:91:c2:5a:9e:77:69:f8:c6:61:b1:37:2e:00:a3:
         7b:40:dc:94:03:21:07:89:bc:70:8a:ec:60:d6:91:c1:35:d9:
         ae:f9:e0:ec:c5:32:2d:1c:c4:23:f5:24:84:04:3c:d9:55:4d:
         96:fd:5a:df:49:61:16:c5:d6:c5:0d:8c:eb:18:b9:59:2d:da:
         01:37:34:74:cb:f1:8e:84:2e:5a:ec:6d:1d:95:16:4e:92:3c:
         e9:b9:d6:1a:f4:4d:d8:55:92:fd:b9:b4:8e:9c:af:77:e5:42:
         f4:cc:00:a6:77:a3:12:99:cb:6d:5e:d3:50:11:28:d2:60:9e:
         61:49:39:75:8d:95:b9:3b:c3:bb:59:bf:3c:c9:ff:86:51:fd:
         59:c0:a5:46:84:0f:37:72:8d:ca:d4:ee:ae:95:f6:84:3d:95:
         44:a4:ac:97:d0:27:a2:7e:9a:41:6c:4d:1b:b2:8c:57:89:e8:
         80:2e:76:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:45:59 2025 by rpki-client