Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e498d95b-9c81-4838-b64f-90f2065c0ea8/31347143-825e-3c67-a62b-d9398d3448d1.roa
File:                     31347143-825e-3c67-a62b-d9398d3448d1.roa (raw, json)
Hash identifier:          Iz575FcbgTktiy2TYgBvt1hT/pGc9kwI6Aaqx5939dk=
Subject key identifier:   BE:0E:A4:55:3F:C6:BA:2D:DF:95:A3:A5:6E:3D:96:0B:DE:8F:4A:A0
Certificate issuer:       /CN=e498d95b-9c81-4838-b64f-90f2065c0ea8
Certificate serial:       010D0C9F4328584B34B3A65743B02ECB8840C6C0
Authority key identifier: 79:38:10:DA:F7:43:D7:2D:3E:42:9A:47:03:6F:5C:88:07:BD:15:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e498d95b-9c81-4838-b64f-90f2065c0ea8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e498d95b-9c81-4838-b64f-90f2065c0ea8/31347143-825e-3c67-a62b-d9398d3448d1.roa
Signing time:             Mon 15 Sep 2025 19:31:42 +0000
ROA not before:           Mon 15 Sep 2025 19:31:42 +0000
ROA not after:            Sun 14 Dec 2025 20:31:42 +0000
asID:                     10587
IP address blocks:        209.151.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e498d95b-9c81-4838-b64f-90f2065c0ea8/e498d95b-9c81-4838-b64f-90f2065c0ea8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e498d95b-9c81-4838-b64f-90f2065c0ea8/e498d95b-9c81-4838-b64f-90f2065c0ea8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e498d95b-9c81-4838-b64f-90f2065c0ea8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:34:b3:a6:57:43:b0:2e:cb:88:40:c6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e498d95b-9c81-4838-b64f-90f2065c0ea8
        Validity
            Not Before: Sep 15 19:31:42 2025 GMT
            Not After : Dec 14 20:31:42 2025 GMT
        Subject: CN=e46f2d55-d1a9-412b-86ba-66292ad8451a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:5d:2d:13:bb:43:8d:78:b0:5d:96:02:7b:4b:
                    cb:a0:3b:f0:36:63:1d:8c:44:ec:f5:6d:ad:d2:bf:
                    fa:1f:52:d2:20:e3:c3:22:cc:b6:33:f5:eb:52:02:
                    89:b6:04:58:f4:90:85:80:0c:03:18:c0:18:81:5a:
                    1a:80:ce:53:3a:e7:c9:03:f4:c6:2a:5f:cc:9e:a3:
                    b2:40:2d:19:31:d0:c9:9b:0b:0d:42:d7:73:22:c1:
                    f2:c3:6f:6c:1a:c2:c5:f9:ec:d5:52:9e:6e:de:4c:
                    2d:f9:00:b7:21:19:e2:9d:12:59:bb:15:fc:df:8d:
                    bf:48:43:97:c2:cf:c1:22:cc:21:29:c2:04:dd:a4:
                    28:3d:0e:1d:fc:a1:3d:ff:b6:ad:90:56:b7:93:bf:
                    c5:39:45:cb:8c:e3:b6:ba:d1:f1:2d:75:ff:55:44:
                    bb:d6:59:13:be:b4:7b:a0:0c:40:2e:0b:4e:c1:f1:
                    97:d1:ce:7d:f4:36:08:fa:f6:8d:34:b6:7c:5d:37:
                    d9:90:d9:42:16:10:69:63:67:45:1c:0c:62:d0:6e:
                    1a:bf:83:de:62:29:15:e8:8c:5d:47:27:2c:f1:6c:
                    2d:24:df:20:8e:c8:da:01:1e:c7:2a:e9:be:6f:d7:
                    6d:dd:c6:6c:13:98:6f:92:ff:99:19:7d:6c:72:9a:
                    45:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:0E:A4:55:3F:C6:BA:2D:DF:95:A3:A5:6E:3D:96:0B:DE:8F:4A:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e498d95b-9c81-4838-b64f-90f2065c0ea8/31347143-825e-3c67-a62b-d9398d3448d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e498d95b-9c81-4838-b64f-90f2065c0ea8/e498d95b-9c81-4838-b64f-90f2065c0ea8.crl

            X509v3 Authority Key Identifier:
                keyid:79:38:10:DA:F7:43:D7:2D:3E:42:9A:47:03:6F:5C:88:07:BD:15:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e498d95b-9c81-4838-b64f-90f2065c0ea8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.151.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:12:2d:7f:c5:77:b6:4f:74:f6:26:ad:18:99:fe:28:82:76:
         2d:e6:f8:b2:a2:3c:88:86:fd:82:9e:31:e5:81:88:85:b9:4e:
         70:b6:a6:8b:1e:79:c5:9a:65:3c:46:e4:1d:81:2c:5d:e6:d8:
         20:18:26:0c:61:27:b1:35:de:67:c9:5c:37:3d:9b:d2:73:df:
         b1:31:64:bb:d5:90:d3:ec:4b:99:02:cb:7e:5f:d5:af:2e:d3:
         63:02:7f:9e:15:c3:af:51:d3:f5:c4:9d:ed:a7:75:8a:08:d6:
         43:25:7d:89:19:b9:60:4b:c3:f0:7e:d5:a0:95:b4:2b:5c:d9:
         64:30:f9:1f:60:fb:3a:38:b7:43:25:5c:c7:23:db:3b:88:74:
         51:28:ae:05:bd:a6:7e:d7:51:48:49:29:67:a3:d2:95:87:5f:
         a7:4d:a2:44:33:ff:88:67:18:8f:91:11:95:d7:f5:95:af:33:
         5f:a6:55:4e:b9:64:01:2a:ba:1f:5f:89:2b:10:07:a9:f1:45:
         5e:3d:a1:27:50:8a:2f:cd:b4:c3:7e:32:78:ff:33:e7:d2:d0:
         a4:88:3e:80:47:9c:8a:20:eb:c9:6c:86:36:4b:60:49:b9:44:
         87:f7:ad:ee:b3:a8:c4:3f:89:b5:4f:96:7b:1e:89:10:15:e4:
         3b:20:07:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 22:58:45 2025 by rpki-client