Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ad6035c1-9f8b-31a5-9b02-cd843a613f19.roa
File:                     ad6035c1-9f8b-31a5-9b02-cd843a613f19.roa (raw, json)
Hash identifier:          sLt98b8LgNFn9drig54pAn6SNrGIibaNudQrvPCa6AI=
Subject key identifier:   90:E6:88:9B:27:A2:D1:BE:39:66:BD:6B:A8:34:8A:C1:D2:DF:6E:2B
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584B3FF8B57447E2B74F5FC3C600
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ad6035c1-9f8b-31a5-9b02-cd843a613f19.roa
Signing time:             Fri 19 Sep 2025 20:24:45 +0000
ROA not before:           Fri 19 Sep 2025 20:24:45 +0000
ROA not after:            Thu 18 Dec 2025 21:24:45 +0000
asID:                     393249
IP address blocks:        207.23.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3f:f8:b5:74:47:e2:b7:4f:5f:c3:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Sep 19 20:24:45 2025 GMT
            Not After : Dec 18 21:24:45 2025 GMT
        Subject: CN=c9caae04-a170-44f0-96a2-de861e475817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:81:8e:6c:3e:15:7a:28:63:49:d2:70:96:28:
                    04:f3:21:59:c7:d6:1b:52:d6:9d:ed:ed:03:2d:9d:
                    aa:80:4c:01:1d:5e:e8:06:65:41:27:fb:91:f8:18:
                    1d:3d:37:8b:4d:ff:a7:9d:b3:3e:85:27:3a:14:75:
                    cb:b0:3f:db:46:a2:65:b6:ca:45:f9:ab:72:ab:ff:
                    e8:77:63:a2:01:ea:26:e4:6c:e6:70:79:08:e1:5d:
                    d4:66:ad:b9:a0:43:20:86:12:01:d1:70:9d:b3:b8:
                    f2:b8:55:e4:f8:01:2f:7e:72:7e:b6:89:d6:0a:c7:
                    40:16:81:fd:b0:8e:52:52:8c:66:d0:df:cb:d1:ea:
                    ad:ba:f5:8b:7f:89:83:0c:e7:04:03:d8:80:20:9c:
                    af:96:da:a2:35:20:11:92:d7:8f:ae:80:20:2d:7e:
                    97:8e:b4:4c:af:6a:1e:16:fb:5b:20:1a:df:25:63:
                    61:1d:5d:d0:7c:fa:1f:c0:8f:e3:ef:b4:dd:b7:30:
                    ab:4e:7d:5f:57:6a:63:db:f2:35:87:57:17:49:b7:
                    2e:b4:ef:1d:93:87:8b:09:84:22:26:ab:7c:d1:95:
                    de:af:79:bc:b3:65:ac:9e:d3:15:5f:27:7e:5d:83:
                    d3:8f:19:c1:35:f6:93:9c:d8:d7:a1:59:e5:04:23:
                    af:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E6:88:9B:27:A2:D1:BE:39:66:BD:6B:A8:34:8A:C1:D2:DF:6E:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ad6035c1-9f8b-31a5-9b02-cd843a613f19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.23.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:47:12:e7:eb:81:60:27:46:e4:aa:bf:00:d6:83:a9:db:0d:
         5e:a1:0e:b1:f7:f6:f1:01:2f:d9:a3:0b:57:90:5f:20:4f:dd:
         d3:aa:75:1b:85:08:64:4f:ea:f5:f1:78:16:c6:f7:a7:1c:c5:
         b1:b9:20:76:d5:40:96:ef:2b:ea:cc:d0:24:f0:ca:6d:8a:51:
         2d:0d:1c:f8:71:26:81:eb:e7:59:bc:1b:8e:43:9d:c6:75:e1:
         c0:d9:f3:e5:a9:d5:ef:e5:10:ae:5a:62:15:d0:3e:22:4d:fa:
         b0:e2:0a:b0:7a:ef:d1:dc:9b:b2:e0:8b:f1:ff:a7:d1:7d:24:
         32:61:b5:92:02:d0:71:bf:64:db:96:14:b0:7d:72:eb:32:ce:
         bb:de:00:f8:6d:7d:31:9b:e6:28:d4:cf:2e:8c:dd:c7:46:15:
         5c:4f:51:34:46:27:86:ae:40:a1:1c:e2:1f:30:f2:61:d6:25:
         35:39:92:e4:aa:22:cc:50:bd:da:4b:81:e8:da:43:64:93:48:
         47:9d:d7:1d:44:90:9c:79:c4:3b:1a:12:01:e2:85:66:37:c1:
         0a:96:4e:ae:a0:ba:d4:ee:1c:d8:80:75:72:3a:7c:10:08:c3:
         64:31:99:83:8a:af:06:db:b6:7d:20:b1:fd:e4:d5:43:7d:5a:
         a0:d9:da:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 10:55:44 2025 by rpki-client