Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/f9e7b551-a922-3180-8623-a545b2098eea.roa
File:                     f9e7b551-a922-3180-8623-a545b2098eea.roa (raw, json)
Hash identifier:          h3gcjMpJsh5ENGfxl4Nhgpu9+khjU3bDxkAif4CE7gk=
Subject key identifier:   B4:3E:B7:BC:26:11:1B:4C:45:25:69:61:E5:6A:19:E8:0E:25:12:C2
Certificate issuer:       /CN=213412d0-2e00-4f54-95bc-e72555790689
Certificate serial:       010D0C9F4328584B3DBA25064FFC48B5D7795500
Authority key identifier: D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/f9e7b551-a922-3180-8623-a545b2098eea.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     40509
IP address blocks:        109.105.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:ba:25:06:4f:fc:48:b5:d7:79:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=213412d0-2e00-4f54-95bc-e72555790689
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=bc8414af-95bd-45b8-ae6f-2aca9e12986f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:20:c6:13:2d:c5:ff:2b:0e:6f:19:5a:e4:2e:
                    3b:28:56:dd:5e:04:57:83:f7:a1:7e:ab:f6:78:ec:
                    f7:5a:42:93:47:57:f6:a0:78:47:f7:b3:47:a0:aa:
                    c8:8c:2f:d5:3b:73:e3:2a:db:24:f3:4b:4a:24:06:
                    56:16:2d:1a:14:39:6c:3b:7f:22:5b:0b:52:4d:ce:
                    1b:a6:0e:00:2e:1d:16:f1:d4:6b:ed:99:77:1f:74:
                    b2:93:61:00:7e:e9:47:5f:e4:1d:1d:9b:32:6c:a5:
                    af:ff:50:3b:5c:62:f6:28:d3:77:3a:1d:89:1f:6c:
                    8b:91:f1:b9:f9:e8:d6:ed:25:1e:3a:f5:c1:24:50:
                    c1:a1:ce:15:d3:c2:4b:d4:3a:00:43:ba:30:38:de:
                    ee:0e:76:7c:b3:b1:8f:bd:14:98:53:2a:18:68:54:
                    d9:18:69:4f:13:a5:5f:20:c7:ae:49:2a:2a:86:64:
                    f9:fa:0d:cd:03:62:f0:d6:bf:02:d4:2e:59:cb:57:
                    38:65:77:f0:c6:c9:de:ba:26:28:c7:25:56:a8:57:
                    16:90:4c:b9:29:03:b2:f7:53:6c:db:0e:d6:b3:84:
                    69:8f:a3:6d:65:a3:4e:2e:d9:e3:2a:bf:c2:13:d3:
                    97:14:22:a3:40:85:3e:fa:1a:4d:9a:5c:a1:a4:af:
                    27:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:3E:B7:BC:26:11:1B:4C:45:25:69:61:E5:6A:19:E8:0E:25:12:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/f9e7b551-a922-3180-8623-a545b2098eea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl

            X509v3 Authority Key Identifier:
                keyid:D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.105.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:a6:f9:67:e7:31:f3:89:f9:a1:dc:ca:57:46:d6:07:99:c3:
         4b:e7:27:bb:8f:fa:5a:88:eb:12:15:d9:2a:33:9a:94:f8:a2:
         f5:08:e8:fb:ec:ba:ff:a5:4b:e1:f4:84:84:77:3a:f7:50:d4:
         15:1d:97:0f:59:1c:f1:8e:66:78:09:bf:02:a8:c1:de:a0:0a:
         8a:27:0f:0b:3f:3c:d1:05:b7:c4:7e:de:b9:78:b3:98:ff:24:
         0a:34:b5:f7:9d:d9:c9:06:e3:59:18:1a:1a:2f:58:2e:11:30:
         0c:60:bc:1f:71:bd:6b:41:3a:1a:6c:06:31:f9:ba:5d:5e:cb:
         68:9d:27:87:10:bd:5c:e0:1e:07:c2:2c:1a:42:62:ce:45:08:
         13:4e:fc:bd:f7:7b:19:8e:52:d6:6a:73:77:49:25:94:d4:30:
         db:b5:62:d3:51:47:1b:68:e4:fc:07:9c:54:2b:57:61:0e:62:
         c5:3b:8f:a1:20:92:eb:96:57:6a:cb:64:28:98:2c:d3:5b:d2:
         9f:c7:23:c3:2a:5e:6f:1c:7c:70:c7:7a:36:04:13:d7:01:df:
         cd:1b:c4:c6:2a:b3:e9:20:2f:e1:d0:47:d5:16:e6:97:2e:16:
         79:91:55:65:94:51:f8:ab:0e:0b:6e:7e:3a:14:dc:e0:a8:53:
         46:61:2f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:04:27 2025 by rpki-client