Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/454f86c6-ec6d-31f6-b62b-0a3bc736fd17.roa
File:                     454f86c6-ec6d-31f6-b62b-0a3bc736fd17.roa (raw, json)
Hash identifier:          YnvhqUsaGg4Uh7lfqqe3NkNRNz/t+B3L8dCnplC2RKA=
Subject key identifier:   51:9C:ED:89:EF:72:AD:EC:53:FC:AB:6E:9B:7D:A0:14:5B:DA:7C:88
Certificate issuer:       /CN=502018d6-5414-4889-b679-53ff6a9e5685
Certificate serial:       010D0C9F4328584A9FFB933B97F8647C419AE3C0
Authority key identifier: F9:6B:8B:EC:BC:84:86:DE:93:EB:7B:24:1E:D2:4A:30:CD:4C:4D:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/454f86c6-ec6d-31f6-b62b-0a3bc736fd17.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     28086
IP address blocks:        209.213.176.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/502018d6-5414-4889-b679-53ff6a9e5685.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/502018d6-5414-4889-b679-53ff6a9e5685.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:93:3b:97:f8:64:7c:41:9a:e3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=502018d6-5414-4889-b679-53ff6a9e5685
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=cccc94ff-82cc-432c-8813-55a67708f15a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1c:55:c7:bc:be:c3:d8:6f:84:7e:e9:a5:59:
                    cc:f1:4b:77:44:5c:60:25:1d:d1:f7:5f:78:77:df:
                    90:00:24:e2:d7:8c:26:38:1d:42:31:a4:50:c6:2f:
                    34:14:4d:db:1c:69:ce:18:2a:3b:9b:d4:41:fc:75:
                    bf:a4:68:ef:68:92:1e:7c:79:b5:cc:87:47:93:17:
                    35:01:b4:f1:6e:73:a8:ac:c7:56:aa:c8:96:86:1b:
                    99:f4:e4:13:87:5b:2f:33:84:3f:48:c6:d7:83:47:
                    a8:56:74:61:51:d5:18:5d:c5:d0:fa:aa:0a:ef:c0:
                    79:cd:29:f4:82:56:85:00:89:95:e7:28:23:b2:2b:
                    ef:02:e8:6b:6e:d2:a2:8a:6d:93:a8:e6:2e:a7:78:
                    ff:3f:52:1e:02:07:15:80:69:7c:d4:c5:84:3a:10:
                    89:a1:d0:39:95:52:f8:6d:35:0c:0a:e6:0f:c6:b8:
                    c7:2d:97:f0:9e:35:14:a2:15:35:e9:a8:20:8e:b2:
                    ef:0b:00:4d:73:58:f9:7a:8a:40:82:ce:85:af:f3:
                    15:35:63:a9:a1:16:47:c1:fd:57:08:bb:21:5a:37:
                    c6:04:f4:fd:62:af:73:11:36:87:d2:05:8c:78:7f:
                    ce:8c:dd:1b:fa:99:88:8a:28:f5:5b:b5:e8:85:23:
                    ab:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:9C:ED:89:EF:72:AD:EC:53:FC:AB:6E:9B:7D:A0:14:5B:DA:7C:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/454f86c6-ec6d-31f6-b62b-0a3bc736fd17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/502018d6-5414-4889-b679-53ff6a9e5685.crl

            X509v3 Authority Key Identifier:
                keyid:F9:6B:8B:EC:BC:84:86:DE:93:EB:7B:24:1E:D2:4A:30:CD:4C:4D:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.213.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:ed:6c:01:2f:a8:a1:c1:17:ef:95:d4:0b:eb:86:7b:59:05:
         59:cf:10:37:8c:a9:1e:ba:9c:ff:c9:c5:7d:48:51:50:6a:84:
         11:3a:d4:ad:69:ca:03:4b:6c:19:f3:eb:d4:05:c8:fe:95:f8:
         fd:59:e3:09:5b:9d:9e:4d:26:f7:59:ff:76:a3:c1:3f:fd:90:
         53:34:4b:ff:18:1a:da:ae:77:45:d9:d0:6a:3c:51:c0:c9:9f:
         8f:a4:6c:13:8f:3d:a4:7b:31:2b:b6:1a:24:cc:98:01:b4:79:
         e3:91:2a:32:3c:bd:25:df:84:1c:0f:d2:a8:cb:eb:6c:9a:be:
         1a:2a:36:37:d4:b1:87:16:01:8f:3d:c3:24:6b:ea:4a:82:02:
         43:c3:cb:de:d0:2c:11:c3:fb:88:c5:e9:8e:e2:c2:9d:35:09:
         46:e4:d9:c2:a8:47:9f:71:e4:4c:48:7b:18:6f:63:3f:b8:fc:
         7e:bd:72:44:6b:b4:be:7f:5a:4a:c6:8f:0b:3f:ca:a8:0c:d8:
         f3:d6:39:e0:92:90:c1:18:31:0a:68:e8:b9:8c:de:b0:91:54:
         a7:1d:d9:ed:db:b1:b3:de:e8:66:06:13:43:f9:84:cc:b8:92:
         f1:b3:8f:96:f6:af:6b:5f:4b:32:4c:d8:11:89:e3:07:09:88:
         5f:da:11:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:54:45 2025 by rpki-client