Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/09591a19-c6e3-3973-9499-51ef6efc847d.roa
File:                     09591a19-c6e3-3973-9499-51ef6efc847d.roa (raw, json)
Hash identifier:          Jf8N10CqA+eJxnYp8ZOr4pix//Expl+CqC+Iwpm/q/g=
Subject key identifier:   EF:E5:59:56:04:B7:BA:16:B5:74:70:71:73:1C:EC:4D:8B:6C:6D:45
Certificate issuer:       /CN=e89b44b0-a151-49f2-b4a6-d917e3c95e83
Certificate serial:       010D0C9F4328584B970CE8AD23F2AEB11AEA2600
Authority key identifier: 65:DE:38:46:E6:89:94:A2:11:8F:52:2F:F6:E4:DD:24:48:A6:04:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/09591a19-c6e3-3973-9499-51ef6efc847d.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     0
IP address blocks:        206.41.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/e89b44b0-a151-49f2-b4a6-d917e3c95e83.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/e89b44b0-a151-49f2-b4a6-d917e3c95e83.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0c:e8:ad:23:f2:ae:b1:1a:ea:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e89b44b0-a151-49f2-b4a6-d917e3c95e83
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=a4acd567-bc35-4d43-a223-cd5a88a7e274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2e:88:25:3a:5f:6a:ec:5c:1c:31:3c:93:b4:
                    11:fc:cc:25:53:6f:ea:aa:f9:36:3b:42:30:bd:75:
                    ed:8e:d5:54:49:32:f8:a3:b0:ca:b3:a0:26:cf:24:
                    b8:01:c5:97:f7:a1:66:54:92:6d:57:24:9b:33:6c:
                    3c:1c:57:32:47:92:a3:13:d0:02:d3:6d:2a:ca:02:
                    93:55:99:39:7e:af:ae:de:34:8f:a6:e8:73:41:5a:
                    2e:05:09:63:53:fb:94:da:23:af:ba:b1:e2:cc:3c:
                    eb:05:4e:95:30:41:f1:ac:32:f3:56:56:c1:74:2a:
                    be:90:75:47:81:aa:9e:0e:e3:48:57:72:72:cb:74:
                    8a:11:79:ac:0f:64:a7:55:4e:ab:a7:f1:c2:f7:be:
                    dd:d9:6f:07:69:89:b2:0e:a9:fc:6d:6d:0b:30:c6:
                    f3:1a:e2:18:59:a5:ea:23:e3:25:de:64:93:6e:08:
                    c4:e4:82:3c:83:4d:b4:9e:24:c3:4a:fd:e7:8e:4a:
                    0a:70:09:07:67:3f:45:24:96:18:aa:1c:03:18:e3:
                    b4:66:07:e9:21:a2:d0:85:8d:59:15:54:41:97:66:
                    42:65:af:e5:3c:c8:fb:ee:34:30:d9:24:ff:fd:db:
                    bb:ff:0c:54:9c:59:19:ac:84:af:32:d1:c0:fd:53:
                    21:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E5:59:56:04:B7:BA:16:B5:74:70:71:73:1C:EC:4D:8B:6C:6D:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/09591a19-c6e3-3973-9499-51ef6efc847d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/e89b44b0-a151-49f2-b4a6-d917e3c95e83.crl

            X509v3 Authority Key Identifier:
                keyid:65:DE:38:46:E6:89:94:A2:11:8F:52:2F:F6:E4:DD:24:48:A6:04:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.41.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:f7:c4:88:61:31:29:21:26:bb:5d:bf:83:14:cd:e5:3e:b0:
         a7:67:48:31:67:1c:36:89:33:66:69:63:18:e4:a5:53:77:6d:
         5f:4c:70:47:fe:94:51:0a:99:17:a8:ed:a5:31:b7:94:4e:68:
         5b:e8:23:e7:30:e6:2c:78:b1:92:74:8e:df:29:fc:d0:ad:b4:
         04:7b:93:4b:57:25:3a:dd:40:fc:e3:30:c3:2c:26:a1:18:cf:
         23:ee:59:87:4f:5f:6d:ef:ea:9a:93:f5:49:0c:6b:81:47:b9:
         b0:6d:50:7f:b1:8d:8b:9b:a0:8c:0e:9c:28:c5:80:a7:ae:bb:
         9e:2d:66:18:b4:7a:ac:2c:ad:b5:b3:56:4b:f3:53:14:b3:42:
         dd:f8:42:a5:23:bd:e9:ae:e5:52:4c:bf:09:44:ba:81:a4:70:
         3d:7f:1d:94:ad:4e:11:56:7f:88:c5:64:75:73:58:5d:30:85:
         f0:45:1d:ca:1e:34:d7:46:09:db:6e:8e:c5:27:26:c0:3e:37:
         ae:be:f5:b6:06:fd:83:0d:ce:cb:4d:c2:a1:ec:73:2e:ab:3f:
         09:13:55:3f:85:15:1d:63:c7:81:0d:4d:f1:a6:da:4d:81:07:
         a8:69:44:c6:c5:54:3c:9d:99:b7:95:23:6c:e9:fb:7c:b4:4c:
         62:e9:52:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 07:08:15 2025 by rpki-client