Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/9ca52f4c-c003-3bfb-b996-868e3106071f.roa
File:                     9ca52f4c-c003-3bfb-b996-868e3106071f.roa (raw, json)
Hash identifier:          R0GXinfEfIsdum6JxNv/Wwp4v5mslcJ8yXcC4oEUZCs=
Subject key identifier:   A3:34:FD:23:F5:4C:09:5F:B6:7D:1F:30:43:EA:89:FE:C3:46:38:04
Certificate issuer:       /CN=e286fd28-0939-48b9-86ba-cbe791497d15
Certificate serial:       010D0C9F4328584AFC1BF64527DFCD1D51407E80
Authority key identifier: 1A:A4:9C:18:83:7A:8A:F6:9B:C9:28:DF:33:44:30:F2:DD:71:0E:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/9ca52f4c-c003-3bfb-b996-868e3106071f.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        207.2.117.0/24 maxlen: 24
                          207.2.118.0/24 maxlen: 24
                          207.2.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1b:f6:45:27:df:cd:1d:51:40:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e286fd28-0939-48b9-86ba-cbe791497d15
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=01560739-aa43-461f-9693-d18bf483ee3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:52:cb:8f:c5:60:0e:f7:4e:a8:4b:03:08:2e:
                    06:e1:47:8f:cb:3f:08:eb:72:34:5c:a9:80:33:f0:
                    2b:cb:ed:74:36:4d:04:0b:18:63:77:06:be:c1:4d:
                    0a:42:45:f7:1c:9e:8f:56:0a:72:6d:22:41:54:4d:
                    d1:ae:12:f4:1a:d7:85:91:ec:ab:8a:fe:af:aa:fe:
                    8e:be:ab:43:78:76:40:dc:74:ac:3b:b4:21:fa:f6:
                    39:5c:4f:2b:70:97:a0:a5:00:dd:af:e0:5c:e8:7a:
                    6f:23:6a:97:6d:28:53:ca:ba:e6:15:3e:5f:d4:0b:
                    25:1f:80:2c:ab:8f:29:00:98:69:7d:b0:4b:fd:38:
                    8e:61:eb:c1:e3:36:69:6e:da:af:7b:c5:d0:96:16:
                    2c:64:64:e8:76:b0:49:80:e5:50:a6:e9:93:cc:40:
                    c1:21:c4:f3:31:a4:f0:f0:04:3e:ee:34:c7:9e:b0:
                    53:e0:db:dc:32:58:ba:36:25:ca:69:b3:cf:d1:d9:
                    9d:f9:86:84:8f:41:44:d2:d5:0c:0a:fa:dd:27:55:
                    35:f7:5f:fe:47:7e:c5:c8:09:ce:fb:cb:46:dd:4d:
                    a7:cb:fb:df:4f:79:94:91:38:ae:30:0a:db:c2:2d:
                    33:e1:a4:9e:5a:f6:4f:cc:c3:79:10:10:d9:e9:83:
                    17:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:34:FD:23:F5:4C:09:5F:B6:7D:1F:30:43:EA:89:FE:C3:46:38:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/9ca52f4c-c003-3bfb-b996-868e3106071f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.crl

            X509v3 Authority Key Identifier:
                keyid:1A:A4:9C:18:83:7A:8A:F6:9B:C9:28:DF:33:44:30:F2:DD:71:0E:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.2.117.0-207.2.119.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:5a:fb:8a:a5:5c:48:64:4b:45:8b:f5:d1:8b:f5:6e:15:a2:
         a2:ca:d0:9a:6f:91:b1:9d:6e:be:3c:06:f6:6f:26:a6:c4:c8:
         e4:a3:fe:7c:04:8e:85:b6:a2:34:51:3f:9c:96:08:bf:de:22:
         b6:f8:29:a8:25:1e:3a:0d:1c:b8:9b:80:f2:1d:19:4a:1a:84:
         70:7f:95:61:57:6d:a9:07:45:5d:fa:83:be:3a:de:8a:1c:b0:
         ae:b1:fa:34:e8:cc:d0:d4:01:db:c7:bf:2d:03:bb:ab:c2:96:
         90:e6:f9:f9:74:64:61:e7:48:2c:d8:ae:1b:89:8c:61:c5:83:
         2c:95:60:26:d8:c8:ec:51:12:10:f8:ca:d7:81:7c:5b:7a:8e:
         63:2e:85:66:c0:7c:f6:5e:53:30:78:5c:f6:56:1f:35:f6:e6:
         52:0b:a7:34:7f:7e:8d:47:25:ec:16:38:72:98:06:87:35:5d:
         90:e3:da:a3:87:d1:7e:e8:bc:eb:4d:52:76:91:d2:7d:8d:4a:
         fb:44:01:4c:94:4f:50:79:90:8f:ae:36:f0:f8:13:fe:17:41:
         b9:71:a2:df:2f:ae:95:bd:d6:17:a4:a2:a9:b0:43:e4:3d:d7:
         f5:8c:6d:47:d3:04:63:e0:6f:32:ce:02:d0:ad:66:cc:a0:6f:
         9d:f5:da:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:33:48 2025 by rpki-client