Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/44f4d94e-6d2b-3fc6-90f2-5d4925f83f9a.roa
File:                     44f4d94e-6d2b-3fc6-90f2-5d4925f83f9a.roa (raw, json)
Hash identifier:          7v6YEBDNTAedFPfHfW89eJC3OzMHEqzEy+YhSczTF/A=
Subject key identifier:   C5:76:B9:2B:77:5D:EA:DB:8C:3C:CC:76:F2:56:8B:22:46:4D:49:B8
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584B21CC2851D1828584EA11E280
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/44f4d94e-6d2b-3fc6-90f2-5d4925f83f9a.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     11105
IP address blocks:        209.87.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:28:51:d1:82:85:84:ea:11:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=4b61195e-de50-4cd1-aff4-caae914aef69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9d:2d:c7:15:92:0c:d0:e8:96:62:03:dd:ba:
                    b3:2b:b4:20:10:bc:66:15:3e:ca:86:c8:16:88:d1:
                    04:04:62:c8:9a:72:20:23:90:38:6c:68:e8:f6:8d:
                    14:67:f0:0a:00:46:40:40:1b:f1:47:89:b3:5b:ef:
                    0b:3d:59:2d:c2:98:5e:55:2c:7a:6a:1c:e4:d6:f1:
                    65:31:93:9c:5a:d0:0a:a4:8c:a7:1f:d1:6a:67:d9:
                    15:ab:49:cd:67:ca:91:58:32:3b:49:9e:ca:62:0f:
                    2f:51:bf:46:0e:69:ed:9c:42:ca:af:7a:ce:72:61:
                    79:7d:ad:1d:ab:ef:5b:5d:48:53:aa:71:a4:a1:9e:
                    3a:86:42:37:63:ec:49:32:fb:11:fc:50:4b:70:59:
                    c9:49:21:a6:2c:e1:0e:45:fe:06:fa:a4:fb:e8:8c:
                    bb:df:a0:14:c6:0a:4c:b9:a4:16:5c:f8:62:ef:47:
                    88:1e:a8:3c:a2:59:92:79:d9:c7:36:a3:f4:90:72:
                    9f:67:fc:a4:a0:69:55:2f:55:f0:0f:9a:0e:5c:d9:
                    e3:68:33:09:3c:af:72:9a:1b:a8:ac:00:4d:b4:24:
                    e1:fe:1e:03:1e:fb:30:4f:16:97:18:b7:9b:51:8c:
                    0d:bc:99:45:e5:4a:4f:bf:e9:67:aa:91:5b:34:85:
                    28:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:76:B9:2B:77:5D:EA:DB:8C:3C:CC:76:F2:56:8B:22:46:4D:49:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/44f4d94e-6d2b-3fc6-90f2-5d4925f83f9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:be:13:cc:f0:a4:37:27:d0:e7:1e:28:04:77:c1:b3:c1:15:
         33:c2:8c:a8:58:ef:d2:78:cc:4a:44:0c:8b:59:da:0e:60:1f:
         49:d5:81:7a:79:9e:49:ba:9d:33:be:7f:9a:23:21:c7:cf:cc:
         6a:55:ed:c3:86:e4:09:a8:a5:ff:ea:f1:60:61:ef:15:e4:8b:
         80:d7:c2:6e:45:05:3d:77:25:54:8c:ef:1b:49:0a:ee:f8:5d:
         16:f7:6a:2d:66:b5:9d:5c:76:f2:2e:b7:18:0a:89:9e:79:5b:
         15:2f:7a:3f:2f:f6:25:d6:87:8f:db:82:72:8a:76:43:6d:96:
         93:77:e4:1a:22:2f:1e:e2:62:ff:a9:49:e5:fc:d6:72:9d:cf:
         ae:b2:e6:22:83:71:b6:fd:75:61:09:64:a1:f5:9d:12:6a:45:
         17:0d:91:cc:61:22:99:e9:12:24:fb:a5:1f:d3:3e:ed:a5:88:
         c4:53:ac:d7:b0:10:1b:88:77:dc:fd:35:a9:45:50:b8:38:a9:
         9a:c9:b9:13:b6:b6:f8:1b:ab:56:7d:43:33:63:d7:75:08:f5:
         6e:b3:64:58:90:27:c3:ed:a3:b0:d3:cc:7f:cf:58:d1:4f:a2:
         f0:5f:bf:73:db:3d:0d:37:29:d0:08:d8:db:c6:9f:59:ae:2a:
         b3:30:1d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:05:32 2025 by rpki-client