Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/efe9fd20-4d24-3686-aa49-f25771fa77fb.roa
File:                     efe9fd20-4d24-3686-aa49-f25771fa77fb.roa (raw, json)
Hash identifier:          KYhU/pwelMzeZE1hXJ1DzffLs7MzP7hFDWrXsDcMLN8=
Subject key identifier:   12:42:BA:C7:0A:E9:0C:C7:D2:81:C2:C8:35:80:7A:C5:66:B0:4C:FA
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F4328584A5FC5D43F5B9DE7D0BDB94B00
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/efe9fd20-4d24-3686-aa49-f25771fa77fb.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     7262
IP address blocks:        209.9.216.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:c5:d4:3f:5b:9d:e7:d0:bd:b9:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=0360099a-c84d-465e-8afd-2353ad69687c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ff:08:64:8b:13:1d:de:cd:19:79:2e:3d:3a:
                    87:bf:b5:98:43:35:c2:14:83:9f:16:30:90:1a:2f:
                    06:df:61:85:26:19:80:98:17:5c:b6:37:be:d8:36:
                    c2:1f:aa:b5:e2:7a:d3:54:7d:c4:9c:15:90:46:f8:
                    c5:09:a3:d7:fa:82:15:8a:6e:b8:79:c8:c2:ce:7d:
                    e5:84:44:52:ed:56:75:e9:f0:aa:59:5d:a5:be:a8:
                    3a:33:84:fb:eb:4d:a7:ee:11:d7:49:35:7d:07:db:
                    cd:f4:da:a8:55:10:61:27:9d:41:4a:bf:5c:61:79:
                    b3:29:f6:5b:9f:37:2b:c6:f7:4b:11:fd:60:a0:90:
                    7e:ff:84:0b:75:f4:26:de:ee:53:f2:fc:47:5e:57:
                    37:bf:2a:67:b8:40:9f:1d:34:a3:63:f1:ff:05:0d:
                    15:03:5d:67:60:e5:bf:95:5c:2c:76:e6:15:e1:46:
                    9d:e3:b3:79:af:eb:de:df:fa:57:e6:ac:a1:ae:51:
                    61:84:6f:11:cd:28:2c:48:80:68:8d:2f:50:59:83:
                    24:45:26:0e:c6:9d:ce:45:86:a5:93:46:8e:19:7b:
                    3c:02:ed:69:9d:44:a0:7f:6e:7c:cf:7e:98:b2:79:
                    5b:07:d4:65:71:7a:2e:7c:0c:6d:4c:5d:0b:4a:89:
                    30:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:42:BA:C7:0A:E9:0C:C7:D2:81:C2:C8:35:80:7A:C5:66:B0:4C:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/efe9fd20-4d24-3686-aa49-f25771fa77fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.9.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:0c:a0:57:da:83:89:a8:13:d1:f4:83:d4:83:64:d1:cc:bc:
         de:59:e9:39:bc:15:20:58:de:eb:dc:ce:fb:61:81:dc:c2:e6:
         5e:77:b9:8c:dc:72:0f:57:9b:21:76:af:32:2f:71:53:91:14:
         21:1a:16:d1:05:3a:ea:12:24:61:d4:ee:b9:80:6a:ef:f2:85:
         e5:87:2a:7f:91:44:95:ee:02:b4:e7:b7:32:ea:8b:4d:c3:cf:
         50:9f:bf:92:55:2f:b2:38:78:50:b3:78:2b:09:f6:4c:c5:bc:
         d9:05:45:7a:40:01:3e:d9:1c:3a:bd:4e:5f:ba:2b:e9:61:3f:
         04:5b:b0:c1:6d:a0:fd:fa:88:7d:25:5f:e8:1f:5d:bf:00:a6:
         5b:cb:ba:68:52:f3:fa:9f:6f:d9:ba:b5:47:f2:5b:74:63:12:
         2b:1a:1d:27:8d:d8:18:2f:fb:b3:69:66:bd:68:ed:85:97:58:
         50:e6:bd:7d:b0:bf:5e:b7:b9:d7:b0:10:97:3e:5f:2c:43:60:
         f4:23:35:29:8d:18:f1:3c:9a:79:51:ae:50:ee:7f:b6:d0:9a:
         6c:37:77:ab:55:0f:37:29:10:d5:f2:2c:4f:65:f4:2a:a1:b0:
         92:59:e0:03:d0:55:0f:c4:37:cf:12:1b:8c:46:e6:7e:7a:20:
         45:a8:07:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:56:22 2025 by rpki-client