Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/19532b8c-5970-3db7-bd7b-480f7125deac.roa
File:                     19532b8c-5970-3db7-bd7b-480f7125deac.roa (raw, json)
Hash identifier:          ao/S5cieOPq1rTYJ7NegIcb4q4g1mXP1KCKFodMnQnQ=
Subject key identifier:   B6:C6:F7:AA:58:2C:4B:06:22:22:75:ED:32:F7:3B:76:4C:FF:1B:A9
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F4328584B01D858D3F35369E35D85A020
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/19532b8c-5970-3db7-bd7b-480f7125deac.roa
Signing time:             Thu 28 Aug 2025 14:19:25 +0000
ROA not before:           Thu 28 Aug 2025 14:19:25 +0000
ROA not after:            Wed 26 Nov 2025 15:19:25 +0000
asID:                     198949
IP address blocks:        209.59.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:01:d8:58:d3:f3:53:69:e3:5d:85:a0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Aug 28 14:19:25 2025 GMT
            Not After : Nov 26 15:19:25 2025 GMT
        Subject: CN=eb760504-419a-4881-8c6b-803588f1984f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d4:6d:18:dd:b1:3e:81:0b:09:d3:15:07:4b:
                    15:00:83:66:cb:98:f1:aa:71:7f:de:7e:89:06:41:
                    9f:bd:a7:81:b9:3c:08:0a:0e:44:c4:4a:fd:99:75:
                    a1:02:40:f9:84:ab:68:45:7c:19:59:23:be:12:e4:
                    09:e1:13:80:b4:43:bd:ba:0d:cd:a1:a0:b0:82:88:
                    7c:f7:8e:a5:2a:9f:ae:b0:85:00:db:6a:54:08:c4:
                    36:50:0c:c7:1a:92:0f:fa:15:ba:4f:e6:cc:b4:47:
                    3d:25:f2:37:5c:a5:57:c1:78:cb:b1:df:de:a8:f2:
                    4c:a1:cc:5b:e1:24:84:0f:56:be:35:3e:9f:d5:2d:
                    3e:6e:0b:9b:fc:86:e5:4f:95:6b:36:80:ac:9f:92:
                    22:a5:99:0c:58:ec:f7:a8:22:2d:13:f7:33:1e:c1:
                    23:a5:04:3e:25:bd:56:4d:13:25:b2:e6:72:12:3e:
                    d3:3a:66:d9:19:0e:16:75:42:02:a4:c0:20:b7:61:
                    51:35:df:fa:33:27:38:f0:4c:bf:e3:12:d3:82:2e:
                    f9:08:58:20:dc:43:64:a8:03:fd:bb:fd:d2:5c:67:
                    23:4e:57:e2:e9:1c:24:8b:7a:dd:2f:3d:81:d9:c4:
                    ee:67:ab:12:00:da:9f:1b:b1:0f:af:d4:78:b6:5c:
                    fa:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C6:F7:AA:58:2C:4B:06:22:22:75:ED:32:F7:3B:76:4C:FF:1B:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/19532b8c-5970-3db7-bd7b-480f7125deac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.59.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:05:fa:67:02:b7:c1:78:ac:52:97:c8:53:e4:a8:1d:12:28:
         b6:5e:a8:37:5e:00:e7:0a:2d:00:f6:ab:23:e6:c9:41:fd:a3:
         16:87:db:eb:71:2d:64:e3:1a:c1:62:fe:80:e9:d4:a1:f4:ad:
         85:8f:bc:9b:54:60:ea:07:a6:8b:b5:5d:35:dd:1e:23:71:1d:
         25:f6:63:79:7b:4d:f3:df:02:36:42:a7:4b:56:29:3b:e0:57:
         a9:78:42:c1:e8:4a:15:68:29:fb:83:96:0f:0d:db:fc:6b:db:
         c7:12:6c:c4:52:d0:79:a3:b2:ce:04:25:03:e9:8f:86:02:aa:
         d4:06:6a:a8:e5:15:6a:da:64:d2:87:9f:4a:a9:54:a4:36:ed:
         d5:84:dd:b0:b2:11:32:ca:10:9d:0d:b6:95:ce:01:47:b6:ef:
         fe:d1:1e:b6:3b:f5:d3:85:2d:78:4d:c6:3a:8f:60:04:ec:b3:
         01:c8:c7:64:51:83:17:39:c2:f9:9b:c6:f7:94:f5:d5:3a:87:
         44:c9:9c:79:b3:28:30:31:eb:dd:50:22:07:7d:d1:0b:ab:a4:
         00:6d:c3:21:87:50:09:7c:64:14:7a:fa:57:74:30:40:68:ce:
         53:89:db:a3:f9:4b:e0:33:07:1b:72:8b:63:77:9a:73:74:39:
         a9:bd:d5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 08:58:30 2025 by rpki-client