Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c8860dc8-c926-3e5f-b8eb-d8c41b2fa0e4.roa
File:                     c8860dc8-c926-3e5f-b8eb-d8c41b2fa0e4.roa (raw, json)
Hash identifier:          2ET8oEaLTwMXNYAUfMpPmaEX+IV3fCx1d1/RYQKf7EA=
Subject key identifier:   CB:F4:28:DF:6F:71:55:6E:3E:CB:F9:C6:0C:5E:B0:80:15:57:51:41
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A6C55DC742F9B37A9AE897EE0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c8860dc8-c926-3e5f-b8eb-d8c41b2fa0e4.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     32787
IP address blocks:        209.200.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:dc:74:2f:9b:37:a9:ae:89:7e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=e424e0eb-f159-4338-8e64-db76942cfad0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:02:fd:38:c4:89:6f:30:16:60:83:06:67:b4:
                    d4:1e:44:96:e3:ba:b4:e8:6f:45:69:de:6b:37:90:
                    81:51:18:20:b5:8d:3f:1a:fb:f5:03:a0:46:d5:ce:
                    fd:bb:58:44:3a:29:3f:8c:b0:2a:ec:10:5e:4a:1e:
                    fe:6e:d2:21:d9:6e:9e:6f:1c:6c:8b:ce:e3:1d:b3:
                    a5:f3:6c:51:e8:b5:22:30:6c:33:c4:7e:37:6f:7a:
                    73:8f:76:8d:08:c2:0c:c0:43:4a:52:94:8b:87:01:
                    09:a3:8c:1d:4c:a5:a4:e6:a6:db:e1:37:43:69:69:
                    48:ec:13:51:9a:a2:fb:71:a6:64:dc:6d:bf:40:85:
                    8d:24:c7:e9:e8:3f:80:18:06:51:71:9d:0d:36:54:
                    3b:78:95:1c:05:ff:ad:47:1a:d6:8b:a2:8f:74:06:
                    99:20:19:fb:94:6f:6b:73:38:97:50:c9:ba:84:a3:
                    71:e6:75:b4:94:19:ec:f5:0a:4d:52:c6:76:2e:d2:
                    cc:95:38:c1:c8:fa:40:29:66:ff:53:98:c5:b4:79:
                    00:28:96:ac:4e:f6:ba:ab:8f:37:f6:9d:3a:74:2d:
                    0a:69:d7:f5:5c:bd:f4:1a:cd:87:9e:81:31:aa:3b:
                    43:21:55:48:35:c7:8d:36:2d:3c:dd:aa:ee:1d:20:
                    6f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F4:28:DF:6F:71:55:6E:3E:CB:F9:C6:0C:5E:B0:80:15:57:51:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c8860dc8-c926-3e5f-b8eb-d8c41b2fa0e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:69:d9:c5:32:91:ca:08:a1:5a:11:ed:ce:8b:a8:c4:2c:9e:
         84:e6:c8:34:f0:3d:83:2b:9d:03:1a:38:48:92:28:55:6e:c0:
         1a:e6:7f:13:8c:a8:43:78:80:48:1a:44:8e:e5:85:a2:60:89:
         1e:fd:05:ac:20:52:7f:92:2e:4f:e3:dc:c9:53:9a:06:86:15:
         f1:4f:ba:af:84:2c:4b:f7:e1:6b:0e:77:f8:f4:d9:9d:87:0a:
         6a:5b:a1:5d:f0:45:a3:71:ca:b9:16:23:b3:0f:7f:6f:7e:86:
         13:11:44:30:d7:d3:82:4b:e7:51:01:f3:d3:1f:a0:78:f8:52:
         18:2a:f2:1d:b7:fb:8e:1f:18:bf:37:4c:e2:b3:e8:c5:57:07:
         8a:3e:68:26:8b:cc:65:27:1c:40:c6:0f:01:fe:31:9a:fe:49:
         98:96:99:8d:f9:b1:cf:e5:4b:d0:0e:cf:ee:c2:61:55:0a:a7:
         9f:bf:73:5e:87:8c:8a:65:9a:60:7d:15:76:27:1e:33:38:48:
         7f:4f:39:3d:69:d3:22:75:23:4e:70:11:00:a6:29:2e:4d:e0:
         96:6c:47:d0:4b:c6:3a:a1:b4:cb:49:9c:2f:18:b3:72:e0:db:
         25:55:22:63:91:b2:1f:1f:72:99:21:4d:c7:be:29:a6:cb:ef:
         d6:65:60:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:22:57 2025 by rpki-client