Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c7313024-d995-390f-b297-2842a85faa60.roa
File:                     c7313024-d995-390f-b297-2842a85faa60.roa (raw, json)
Hash identifier:          PMAQtTMJHq8y2GTSLQaJ6Ei05QK/GcU/IIO90q7lla8=
Subject key identifier:   16:83:2C:79:AE:17:30:AB:F8:46:32:EE:0B:CB:01:17:BF:CE:41:DB
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584B64CE0876FC1872B5E08EF1E2
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c7313024-d995-390f-b297-2842a85faa60.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     15169
IP address blocks:        209.85.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:08:76:fc:18:72:b5:e0:8e:f1:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=adf33222-9358-4ae7-afc9-4a51f9425214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d6:cf:d8:3b:6f:a7:4a:22:c3:5f:7d:b7:76:
                    a1:27:71:c2:64:9f:aa:57:8a:19:f6:14:4d:b5:ac:
                    3e:a9:49:ba:b3:fa:29:30:4a:3b:3a:64:1a:47:68:
                    8e:73:7e:17:38:85:58:89:08:80:28:ba:87:04:02:
                    55:a9:37:c4:96:6d:58:73:0d:20:b7:33:5c:77:84:
                    41:a2:fb:8c:86:17:cc:7a:49:2d:46:0d:8a:f7:5f:
                    61:97:29:47:53:c6:14:66:d5:72:9e:a7:bd:c6:84:
                    22:c2:8c:56:63:84:45:27:49:ca:8e:5e:d5:78:97:
                    b1:9c:d5:4a:bd:f9:df:eb:9a:6c:fb:b2:34:b1:0d:
                    1d:a9:a2:a9:e8:ab:2a:b4:c3:93:8d:85:63:12:b4:
                    83:90:81:a3:c3:55:0f:d8:de:38:24:48:ea:01:1d:
                    6a:1f:32:a9:53:cb:5f:18:ed:5c:37:f1:aa:eb:29:
                    70:3b:d8:f8:2d:6f:0c:36:46:1d:ce:67:51:e4:35:
                    1d:66:7d:ce:95:ec:0a:be:a8:82:4f:1d:0b:d5:f9:
                    8e:f3:44:14:8c:1f:ce:6c:15:4f:b0:1b:39:99:af:
                    f6:d1:ef:99:60:a9:f5:4f:a4:91:92:2e:7d:1c:46:
                    80:a7:21:e4:3a:a2:db:fc:82:7c:78:f3:e4:ae:69:
                    ce:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:83:2C:79:AE:17:30:AB:F8:46:32:EE:0B:CB:01:17:BF:CE:41:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c7313024-d995-390f-b297-2842a85faa60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.85.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:c0:5b:11:83:7f:9d:54:fa:64:35:aa:dc:fc:43:dc:e3:ac:
         7b:e3:09:a7:6a:06:5e:ac:f5:8e:06:51:2b:d7:02:de:d4:2d:
         95:64:10:6e:95:6a:c1:dd:a6:70:fc:dc:7e:66:ef:41:b8:47:
         c3:56:4d:35:e5:a7:79:f1:c4:7c:32:d1:0d:c3:52:11:7d:c6:
         19:32:ce:d0:ea:54:cd:de:18:3d:4d:eb:84:e7:ff:5b:d1:a2:
         70:a3:77:3c:ff:90:3d:50:8d:13:d4:e9:4f:70:cc:fe:2a:b9:
         10:fb:57:5e:5e:27:cd:8d:21:6a:02:b5:6e:81:ce:d5:a0:8e:
         07:6d:56:ac:f0:8e:16:f1:ce:2d:f9:28:7a:db:63:7f:68:0a:
         80:ae:ee:30:f5:bb:3d:d1:9b:10:a2:06:cb:22:41:de:3b:65:
         10:44:5d:c1:4a:b9:b5:1d:d3:ad:b3:0c:e4:0b:1e:e5:bf:02:
         fd:f4:08:93:86:31:09:8d:b9:d2:e8:4f:88:b6:1d:a8:b8:b5:
         d1:86:90:a4:eb:68:8d:f6:f8:a8:55:ca:23:e2:3c:00:f9:2b:
         9f:23:33:2f:f9:7b:17:07:cb:19:7f:f3:9d:03:12:00:68:a1:
         3c:01:d3:90:a3:d9:8d:0e:54:12:89:a3:0d:27:09:f2:8a:4c:
         fa:8b:89:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 08:45:03 2025 by rpki-client