Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e9565d4e-da01-3502-bc53-1e53859784c4.roa
File:                     e9565d4e-da01-3502-bc53-1e53859784c4.roa (raw, json)
Hash identifier:          NnQRKYfMyWVj+PxL6E1We8lEIOzp8F0Ol5WT5awjSPU=
Subject key identifier:   E1:AD:D7:5F:AD:AA:3C:17:31:0D:31:44:A0:B6:C2:7E:61:90:B2:D9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B4AFD45F9013B93F581BBD480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e9565d4e-da01-3502-bc53-1e53859784c4.roa
Signing time:             Tue 23 Sep 2025 19:07:50 +0000
ROA not before:           Tue 23 Sep 2025 19:07:50 +0000
ROA not after:            Mon 22 Dec 2025 20:07:50 +0000
asID:                     54903
IP address blocks:        208.242.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4a:fd:45:f9:01:3b:93:f5:81:bb:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 23 19:07:50 2025 GMT
            Not After : Dec 22 20:07:50 2025 GMT
        Subject: CN=45fcb27e-81fe-4f1f-ac98-78b0010981b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:25:4e:41:b4:7a:1d:79:f5:1f:0b:86:3d:be:
                    79:b9:10:1c:20:2d:d5:18:d7:48:da:00:79:ab:17:
                    b4:47:e4:4d:93:f1:0e:ed:7a:71:7d:37:e8:1a:07:
                    c6:b8:37:61:24:b3:f0:89:eb:39:b0:72:18:92:47:
                    9d:18:43:7f:80:d8:69:c9:11:af:17:4a:a0:c2:e6:
                    e7:36:0f:5a:4c:58:3c:50:27:ce:fb:e9:3b:fb:8e:
                    23:d0:13:26:c2:be:05:8f:a7:ad:31:68:8c:24:fa:
                    d2:a5:09:86:c5:b6:9f:3e:ed:b0:07:b9:ef:e4:d8:
                    b8:23:09:c6:91:b6:49:9f:bc:1d:90:da:38:e5:38:
                    aa:8b:c4:a8:1e:ae:b7:7c:c4:e5:3e:37:a5:51:a3:
                    42:0d:98:e9:2a:75:c2:2c:38:51:1a:9d:ad:08:1b:
                    ee:24:68:d8:fa:e2:3c:4d:4c:60:45:0e:ea:e8:da:
                    7e:d6:eb:78:bd:1f:18:16:74:d2:c7:3e:ce:67:f5:
                    7f:b5:71:62:a7:f0:f6:98:9a:e9:f1:63:14:bc:11:
                    74:ca:8f:18:c6:cf:83:a6:ef:fe:4e:ed:67:80:74:
                    28:e9:1c:24:57:c9:de:68:f5:9d:b2:99:aa:dc:73:
                    05:5c:69:44:cf:d6:be:37:75:bb:6d:25:e0:43:63:
                    93:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:AD:D7:5F:AD:AA:3C:17:31:0D:31:44:A0:B6:C2:7E:61:90:B2:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e9565d4e-da01-3502-bc53-1e53859784c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.242.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:68:88:7f:79:ef:52:6d:65:9f:50:8f:c1:e2:01:cb:80:af:
         23:2e:99:3c:a7:47:0f:00:e0:d4:7a:a0:4d:d0:3f:37:88:3c:
         ea:ac:62:67:05:d0:33:21:95:f9:52:e2:14:fc:aa:a5:ef:d0:
         58:8a:4a:ae:10:84:d0:2f:1f:6f:10:2c:05:0c:32:37:c8:ad:
         44:d6:67:7f:29:e0:2d:1e:97:dc:bf:d0:b8:5c:f8:7c:83:53:
         6b:b5:cb:68:26:c3:86:8c:6f:4c:a1:97:eb:9d:a2:ef:f7:3b:
         40:bf:cf:61:06:39:2a:03:d0:bd:27:d5:1d:90:27:eb:41:87:
         e5:49:85:1c:c7:bf:14:99:4a:16:6f:33:79:6b:31:8a:1b:68:
         a8:a7:fc:f5:29:10:de:f2:38:43:85:5b:7d:d1:e0:ca:88:e6:
         eb:fc:26:f0:54:4e:f6:47:4c:d2:e2:2f:c2:a9:24:53:83:8c:
         79:ec:4d:97:d4:e1:2d:97:91:48:e7:55:ea:80:c3:f6:c6:dc:
         2d:f0:eb:0b:f4:72:51:d5:dd:87:fc:20:7e:18:f5:c4:c0:1b:
         97:36:6d:9d:7a:6a:f8:58:63:7c:f9:e5:13:89:fc:77:63:6f:
         1e:98:26:53:b2:2d:b4:bb:21:33:f6:d5:5c:c1:06:b0:f7:96:
         c5:d8:2f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:47:23 2025 by rpki-client