Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/7407f920-047b-3b8c-b97f-5f185a0c449e.roa
File:                     7407f920-047b-3b8c-b97f-5f185a0c449e.roa (raw, json)
Hash identifier:          V3F1ttEqQpfzy4bgfOl0xOwWfPhkx04aDOsLm5hZPjc=
Subject key identifier:   AC:68:B2:D6:41:17:E5:AE:70:23:20:CE:19:12:BE:9A:1A:94:CB:E8
Certificate issuer:       /CN=46b96165-9c22-47d1-962f-486840cec7fa
Certificate serial:       010D0C9F4328584B22F31B01C7C1D8F8884EF810
Authority key identifier: 7E:68:D8:AA:EB:33:0A:33:7C:88:D9:3E:FA:7D:E1:FC:34:A1:2F:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/7407f920-047b-3b8c-b97f-5f185a0c449e.roa
Signing time:             Tue 09 Sep 2025 10:55:01 +0000
ROA not before:           Tue 09 Sep 2025 10:55:01 +0000
ROA not after:            Mon 08 Dec 2025 11:55:01 +0000
asID:                     3320
IP address blocks:        209.205.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/46b96165-9c22-47d1-962f-486840cec7fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/46b96165-9c22-47d1-962f-486840cec7fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:22:f3:1b:01:c7:c1:d8:f8:88:4e:f8:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46b96165-9c22-47d1-962f-486840cec7fa
        Validity
            Not Before: Sep  9 10:55:01 2025 GMT
            Not After : Dec  8 11:55:01 2025 GMT
        Subject: CN=ac58da84-dbc7-4139-bc52-3c9f869f0ed1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f9:1d:b8:e0:f7:6c:56:31:ad:df:7f:c1:0d:
                    38:68:42:a3:b0:f0:48:55:22:cf:24:d3:0e:51:b1:
                    b9:e5:1f:b9:e9:f1:8d:5e:99:44:70:7d:4d:39:f7:
                    24:18:9a:37:b1:e0:77:8d:b2:7a:3c:12:0b:1e:e2:
                    78:cb:ac:70:19:82:d8:35:cf:aa:af:32:1d:5f:c9:
                    58:fd:2c:0b:04:80:40:81:d2:f2:c2:a1:32:19:57:
                    c0:74:18:af:5b:51:f3:0b:33:17:5d:e6:58:d5:07:
                    90:c2:cc:17:c6:e6:a1:47:35:aa:63:ab:da:13:f9:
                    d4:0f:cc:a7:00:61:42:25:1a:84:e7:10:82:d4:fd:
                    00:a5:63:4a:36:85:67:ce:e2:bb:aa:2b:81:4e:f8:
                    e9:a1:25:cb:86:a2:ea:8a:66:9d:d0:ba:e6:b2:13:
                    1e:b4:15:f3:5c:df:75:b1:e9:22:a5:90:e7:a1:5b:
                    7f:1b:14:5f:95:f3:35:84:2b:69:42:ea:d9:8d:76:
                    6b:00:72:c2:89:e2:8c:47:33:dd:50:da:c1:5c:b7:
                    56:1e:dc:e2:5b:45:be:35:46:8e:c9:45:62:f3:1c:
                    8e:30:51:1f:79:c0:1b:2f:a0:f4:7b:b6:65:d7:36:
                    71:16:71:cd:4b:00:d1:2f:3a:a7:d5:b5:f2:28:ad:
                    b5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:68:B2:D6:41:17:E5:AE:70:23:20:CE:19:12:BE:9A:1A:94:CB:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/7407f920-047b-3b8c-b97f-5f185a0c449e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/46b96165-9c22-47d1-962f-486840cec7fa.crl

            X509v3 Authority Key Identifier:
                keyid:7E:68:D8:AA:EB:33:0A:33:7C:88:D9:3E:FA:7D:E1:FC:34:A1:2F:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.205.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:cb:ca:13:11:ca:39:f5:11:06:28:e0:1c:2b:99:4d:4c:27:
         d3:32:fc:16:c3:80:bf:93:d5:1d:0e:8f:39:a1:13:c0:f8:ed:
         94:2c:fb:23:f9:5d:8a:b7:ed:63:dc:b1:79:15:8d:80:c4:8d:
         43:94:9d:ad:e0:c9:10:d5:ab:46:93:1b:e6:0c:99:cf:64:7f:
         be:db:9b:f4:0f:cb:30:01:e7:b6:9c:bc:48:97:25:5e:67:18:
         12:af:7f:11:26:62:98:e1:ee:a3:eb:16:a5:a8:da:ad:61:af:
         53:8e:9d:67:e2:73:d4:5e:2a:84:f8:ce:b4:4c:dc:14:8c:f1:
         5c:8a:3c:0b:c9:7d:9b:c8:da:63:8a:aa:7b:c0:6e:a7:64:71:
         fa:8c:e4:80:4c:f3:b8:c6:07:ff:4a:58:c2:50:9a:ca:c0:ec:
         69:51:8a:89:97:a8:aa:7c:73:76:b2:ee:ce:e6:80:a5:56:ab:
         59:c9:3b:31:0c:5d:8a:e0:4a:3f:7b:e2:ed:35:3c:23:f0:32:
         8e:10:ff:13:a6:4c:e3:80:c5:32:90:bd:fb:66:d1:ff:9e:91:
         5a:e0:be:f6:1d:59:e9:78:77:d8:d2:4e:d4:00:c4:01:ee:ff:
         b8:70:95:2d:18:0f:12:9c:b6:6f:b7:37:db:cd:42:6a:b6:dd:
         c7:41:7a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 09:32:23 2025 by rpki-client