Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b0b73ac7-5708-395a-bf74-65b25c103c59.roa
File:                     b0b73ac7-5708-395a-bf74-65b25c103c59.roa (raw, json)
Hash identifier:          N5urUXoLkeMGFfq+jNCuvG4SL4zfmKl4g0MLqt9558U=
Subject key identifier:   BE:87:D6:F2:35:A0:E5:CF:9A:0B:53:E7:7F:A8:F0:29:F0:2F:B4:4A
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584B64CE0A456FD7D3DEDBB9DA00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b0b73ac7-5708-395a-bf74-65b25c103c59.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     15169
IP address blocks:        216.239.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:0a:45:6f:d7:d3:de:db:b9:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=691265d2-d37c-4e6b-9788-386d27ffe3ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f9:7c:0b:00:1b:37:58:02:45:f7:58:a3:20:
                    50:56:b0:48:ee:26:b2:fa:e4:8c:55:45:58:29:4a:
                    38:1d:7c:85:e0:63:90:62:f0:59:e8:a7:47:04:b0:
                    e3:9a:18:6d:7c:aa:15:a2:f8:32:aa:0a:6f:d4:18:
                    e9:f2:ba:19:6c:3e:ab:2d:78:b5:d5:f3:f2:d5:27:
                    e4:41:1b:20:82:9a:c4:77:f0:d2:1c:4a:96:ae:c6:
                    13:82:be:e2:88:4f:e7:6a:36:0b:6f:37:70:62:c2:
                    a3:7a:c2:d6:db:6a:10:7b:0d:64:9e:c7:41:c7:6c:
                    f6:27:09:dd:ed:a1:52:43:67:ed:da:a8:df:0c:08:
                    5b:18:61:97:31:22:cc:18:c8:97:fa:cb:8d:e1:08:
                    0e:79:a8:e5:ea:6c:ea:b6:f8:00:c5:fc:fb:bf:a7:
                    8e:4f:ac:06:5f:a5:75:6d:a5:76:b0:aa:fe:15:85:
                    ed:33:97:e3:41:ac:35:c7:7d:15:7f:7c:4e:6a:42:
                    72:e8:d2:09:26:61:94:b0:5d:ba:44:d1:b4:25:65:
                    26:74:3b:35:d5:52:0b:24:d9:2d:11:5e:2e:19:08:
                    32:3d:15:cb:9d:5a:b7:6e:cb:47:dd:36:ba:7e:80:
                    7a:e5:ec:8e:9d:a5:12:6a:15:bc:30:32:5e:ef:e2:
                    dd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:87:D6:F2:35:A0:E5:CF:9A:0B:53:E7:7F:A8:F0:29:F0:2F:B4:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b0b73ac7-5708-395a-bf74-65b25c103c59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.239.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:e5:06:64:db:1a:84:46:ad:52:d5:04:b3:89:01:98:9b:d5:
         41:00:3c:86:7a:04:7b:6a:2e:04:18:0a:97:a0:8d:25:5a:87:
         1a:f3:9f:e1:75:97:74:d2:55:c1:24:9b:a9:ff:d6:2b:5f:80:
         22:cc:5a:c3:2d:d6:33:b2:67:2d:37:0e:76:27:69:87:1d:c3:
         37:30:ef:a8:1c:00:d1:be:ae:b4:16:bb:22:26:c2:5f:51:8c:
         ae:2f:f1:fa:dc:47:a5:50:80:75:b9:06:f8:09:1e:56:f7:7d:
         67:9b:b6:18:20:53:84:cb:3a:98:62:34:06:11:d7:b3:77:1b:
         8f:41:bf:cd:f2:35:f2:a9:7f:26:95:94:ce:07:2a:54:c4:08:
         cb:35:5d:45:03:02:93:cd:82:63:53:52:55:56:47:ab:bd:59:
         48:90:35:a8:83:79:e6:79:6a:18:34:c9:bd:fe:a3:ff:af:85:
         e7:69:e4:8e:ee:a1:82:11:a5:a2:59:5e:87:32:31:c8:65:be:
         11:9b:46:16:a2:0f:0f:13:1a:a0:ff:d3:3d:d1:bf:c3:b0:a9:
         5c:1f:98:cc:0d:b7:91:ff:49:28:24:18:47:85:dd:39:27:2b:
         2b:e4:bb:50:2e:25:1d:d3:e3:4e:28:53:ac:29:1f:7e:10:fd:
         e8:af:26:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 08:44:57 2025 by rpki-client