Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e070577b-23d5-30b5-bedf-c5093059263c.roa
File:                     e070577b-23d5-30b5-bedf-c5093059263c.roa (raw, json)
Hash identifier:          FlLLxiD/2rAzJ5OiKVJATdffNd/u0czTsOxvaBGDy4s=
Subject key identifier:   77:3D:49:A4:05:9E:C0:1B:FD:94:AB:15:24:AE:D5:18:4E:4F:C3:20
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AFC1C19DA1130EB0E490AF680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e070577b-23d5-30b5-bedf-c5093059263c.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     7342
IP address blocks:        209.131.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1c:19:da:11:30:eb:0e:49:0a:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=0d9a5cc3-fa93-4812-8c24-d1229daa768c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0d:51:50:cf:87:6f:84:93:03:64:4f:a4:1e:
                    29:b0:6d:c2:29:63:7b:42:3b:96:4d:87:3b:92:c1:
                    2d:42:da:c3:d9:9a:68:d3:fa:25:42:d5:85:7d:6f:
                    a4:1b:71:fc:1c:fd:c5:61:30:ad:ce:e7:fa:a4:c8:
                    73:d3:7b:7b:c0:cb:d5:3e:38:30:56:0b:dc:e5:97:
                    e8:5a:f1:9c:d7:53:6c:4f:0b:16:b7:c4:2f:1c:03:
                    79:d6:63:62:c1:03:be:c7:72:72:cd:4f:f6:e1:e1:
                    b4:d4:b4:e0:28:c7:37:fb:99:c0:60:42:5b:87:d1:
                    f0:57:d8:00:ec:d8:0b:1e:f3:ec:8a:ac:d7:73:7e:
                    a4:54:52:f7:9e:03:02:82:44:00:ba:e8:99:8d:1a:
                    05:f1:84:57:a3:22:66:f4:17:1c:da:72:9b:55:b1:
                    a3:d4:39:ba:30:77:37:8b:74:8d:af:6f:2e:b7:a3:
                    e4:fe:4f:3d:45:08:b2:0f:bd:d4:06:a9:c7:c8:22:
                    80:2f:4b:6b:ae:98:7d:ed:b3:da:29:68:04:86:04:
                    6a:38:80:53:cf:ac:84:59:ad:28:84:3c:63:a2:1b:
                    a3:61:33:d6:bf:a5:8b:d5:53:9e:70:dc:1f:c5:d6:
                    42:26:4e:26:f1:14:e7:18:db:42:cd:b8:81:88:8a:
                    a5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:3D:49:A4:05:9E:C0:1B:FD:94:AB:15:24:AE:D5:18:4E:4F:C3:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e070577b-23d5-30b5-bedf-c5093059263c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.131.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:19:a7:cb:79:0d:7c:79:d8:39:0d:d1:aa:c6:65:3c:0d:ef:
         41:1d:dc:31:19:87:b8:a8:c7:06:ac:c1:02:60:67:09:b4:2a:
         31:f1:66:32:1a:0b:4b:2b:ea:9d:22:4e:62:e8:30:89:23:8e:
         4a:ed:e7:48:33:8d:f7:32:72:3b:d8:0d:4f:d8:18:a3:de:8f:
         34:11:3b:50:1f:ea:99:61:45:c0:08:4b:81:82:15:6e:b7:84:
         e7:44:5d:98:1e:56:01:d9:80:03:dd:6b:31:0f:74:81:b6:16:
         89:16:2f:61:4d:72:78:c7:29:c9:9b:3b:2b:23:ec:c6:3f:6b:
         c7:dc:95:51:f8:c6:83:e4:fd:c2:58:a7:4f:d8:54:b6:9f:b4:
         71:ab:8a:95:f0:99:7d:84:f0:24:3f:5e:1d:d8:3d:04:d6:6f:
         16:87:34:86:89:41:88:de:1f:18:cc:43:ef:e8:58:db:96:80:
         34:30:a3:88:dc:33:cc:1b:41:02:1d:92:b3:af:74:e8:fd:de:
         e0:6d:76:23:fa:ae:18:71:66:bb:f9:48:5a:02:ff:2e:da:b7:
         8a:10:ff:a9:f1:24:e8:8e:b3:fd:4c:e5:f8:21:60:ad:7c:de:
         e9:1d:c4:00:29:5d:7f:41:f0:75:c4:db:a7:a6:c1:ba:62:95:
         a1:16:e2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:56:20 2025 by rpki-client