Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/8e1cb1c0-cdef-3d1d-a97a-940c72317852.roa
File:                     8e1cb1c0-cdef-3d1d-a97a-940c72317852.roa (raw, json)
Hash identifier:          dBN0/U+lQ3ELUTUsJQfqtdJ+ksYdDG/CN/BZGbVX248=
Subject key identifier:   5E:D0:DD:09:9D:C8:7D:84:9C:EE:16:CD:92:BD:24:07:ED:6D:1E:DC
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F4328584B153C159031B3484638631540
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/8e1cb1c0-cdef-3d1d-a97a-940c72317852.roa
Signing time:             Thu 04 Sep 2025 13:00:41 +0000
ROA not before:           Thu 04 Sep 2025 13:00:41 +0000
ROA not after:            Wed 03 Dec 2025 14:00:41 +0000
asID:                     21949
IP address blocks:        173.243.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:15:3c:15:90:31:b3:48:46:38:63:15:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: Sep  4 13:00:41 2025 GMT
            Not After : Dec  3 14:00:41 2025 GMT
        Subject: CN=af1973e3-96fb-4414-9d8f-c982626c7c2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cd:ad:6c:d8:81:27:7c:70:23:27:ba:b7:39:
                    a9:b9:40:6e:ab:d7:24:42:15:f5:3a:a2:18:27:bc:
                    2e:a3:1a:22:13:ef:0c:7c:85:d6:4b:c3:2c:34:67:
                    d1:d9:a6:65:80:cb:a0:3a:68:66:db:86:0c:37:f4:
                    ec:1a:fe:67:4f:55:9e:aa:e0:71:fa:4c:8a:55:bb:
                    32:2c:d8:4b:02:0f:07:2f:bd:94:0a:bf:b1:c4:4b:
                    2b:c2:af:cf:12:a4:8e:ac:ad:40:f7:93:a1:9d:6f:
                    7d:a7:8d:04:0a:3b:e5:02:87:2b:00:98:70:da:b7:
                    a3:a5:cd:39:b9:58:11:da:bc:31:d1:2c:a6:0e:3e:
                    0b:8d:c3:85:ae:37:2c:8c:cd:d6:90:1c:8e:04:ce:
                    2b:87:a0:59:82:0b:a7:02:a0:ae:da:b3:bb:fd:fb:
                    0b:5b:fc:bc:21:61:b3:95:c3:94:67:da:7b:5f:86:
                    4d:bf:f5:9f:bb:2d:e3:88:f7:cb:87:77:3e:2c:5f:
                    54:b3:bf:7f:7f:fc:d1:75:ac:15:bb:bf:ca:8e:19:
                    22:bf:a1:95:6a:29:c6:10:3a:93:a8:df:90:fd:a8:
                    3b:b0:a9:e7:93:e4:47:b0:75:e2:31:f7:a8:bd:de:
                    f9:88:0e:cd:ac:02:d0:2e:7d:77:46:cc:b2:d8:85:
                    a6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:D0:DD:09:9D:C8:7D:84:9C:EE:16:CD:92:BD:24:07:ED:6D:1E:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/8e1cb1c0-cdef-3d1d-a97a-940c72317852.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.243.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:01:15:44:2f:86:83:e0:f5:de:d5:7f:3d:a8:97:5a:87:b1:
         20:9a:5c:36:b7:56:8d:c7:e6:4e:97:4d:1b:61:9d:2b:14:d2:
         50:6a:f7:b5:28:3e:9b:5c:b3:62:81:3a:9d:9f:89:98:af:f9:
         b3:40:c1:f9:44:05:cd:7a:a1:28:a7:4f:14:3b:8e:e3:90:d7:
         93:1f:82:db:3b:09:87:a9:a8:25:6f:5f:e8:d9:68:8a:7e:32:
         a0:f5:4c:ad:67:25:5c:60:4e:fb:7a:9d:1a:e6:65:cf:f8:5b:
         d1:4b:bf:ae:89:f9:88:b0:3b:97:84:9e:8d:52:1f:55:ce:8d:
         08:1b:d3:a3:7c:35:02:36:2f:f9:3d:e1:db:92:f2:3e:38:4b:
         21:d8:7d:bb:37:cf:68:8a:2f:51:f0:2e:8d:61:22:03:81:eb:
         47:16:06:53:5f:31:7f:94:cb:fa:8d:a6:cd:e8:88:28:e6:04:
         f2:57:3c:12:2a:61:c0:12:2c:cf:bb:96:bd:45:f8:61:eb:ca:
         46:38:91:21:b2:1f:44:86:de:39:9a:e6:92:a0:be:47:91:a7:
         78:71:48:3b:c2:93:79:47:dc:75:cb:d3:4a:be:d9:9e:07:20:
         56:df:b6:7e:50:7c:9d:3b:c9:92:d1:2e:46:ec:36:e1:4f:90:
         43:b4:2c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 17:08:26 2025 by rpki-client