Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9/0c0b966f-cc08-36fa-8094-773d54a45b9d.roa
File:                     0c0b966f-cc08-36fa-8094-773d54a45b9d.roa (raw, json)
Hash identifier:          9rgxR4eWkJkYtFtgEopGQmGthXj/5F5wJXYMTT1vuCk=
Subject key identifier:   0D:51:90:DE:84:7A:85:81:CD:EE:B2:C7:C2:38:0F:CD:7D:44:FA:AB
Certificate issuer:       /CN=6827a74b-021f-4aa4-a558-67d2d6c22fe9
Certificate serial:       010D0C9F4328584ADD666D13660AC46E61EC7B00
Authority key identifier: C1:DB:0E:88:F2:C5:17:32:F0:52:F7:C0:4E:43:82:BA:B4:44:56:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9/0c0b966f-cc08-36fa-8094-773d54a45b9d.roa
Signing time:             Fri 15 Aug 2025 13:00:41 +0000
ROA not before:           Fri 15 Aug 2025 13:00:41 +0000
ROA not after:            Thu 13 Nov 2025 14:00:41 +0000
asID:                     396982
IP address blocks:        209.209.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9/6827a74b-021f-4aa4-a558-67d2d6c22fe9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9/6827a74b-021f-4aa4-a558-67d2d6c22fe9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:dd:66:6d:13:66:0a:c4:6e:61:ec:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6827a74b-021f-4aa4-a558-67d2d6c22fe9
        Validity
            Not Before: Aug 15 13:00:41 2025 GMT
            Not After : Nov 13 14:00:41 2025 GMT
        Subject: CN=2b04da4b-1f12-4841-8c91-1103f45eaae0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b7:f4:0d:c5:07:33:ea:40:44:f2:b6:1a:a6:
                    9d:b8:26:68:2f:76:60:d5:37:38:69:5c:3d:58:a5:
                    f7:a3:57:33:f5:3a:c9:89:1f:61:2d:cd:e8:bc:c2:
                    9b:dc:6d:68:88:0e:be:1c:ac:9c:a7:93:8e:f9:2a:
                    c4:74:b2:06:93:b6:31:ee:6b:b4:3b:61:84:97:f5:
                    9c:71:38:84:5c:ba:12:62:70:74:2a:a7:a3:38:59:
                    bc:48:3d:89:78:39:16:c7:40:63:b7:62:10:21:06:
                    a5:60:fa:82:f5:7d:8b:e5:7a:e3:ff:4c:da:0e:e6:
                    e2:53:5c:0e:43:45:d9:0e:33:ed:b1:68:7c:69:23:
                    33:87:70:ed:64:c9:c3:17:29:c8:01:ee:43:bd:46:
                    07:b3:93:68:12:62:a2:2a:ab:f1:ec:ba:d1:c0:ab:
                    af:5a:96:7c:a5:78:72:69:e7:04:cd:99:6c:09:e7:
                    0c:af:63:cc:76:9e:ce:e8:5b:ab:8c:c3:e3:75:07:
                    15:25:b3:98:ee:39:7a:43:96:2f:9e:76:81:a9:ee:
                    61:9a:0a:57:af:68:92:08:ae:28:96:e9:e6:2b:e8:
                    15:a7:0f:29:6e:94:a8:32:69:2e:2b:14:42:20:b9:
                    87:f8:b0:c0:66:24:db:c1:db:2c:f5:81:d0:ab:6a:
                    6a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:51:90:DE:84:7A:85:81:CD:EE:B2:C7:C2:38:0F:CD:7D:44:FA:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9/0c0b966f-cc08-36fa-8094-773d54a45b9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9/6827a74b-021f-4aa4-a558-67d2d6c22fe9.crl

            X509v3 Authority Key Identifier:
                keyid:C1:DB:0E:88:F2:C5:17:32:F0:52:F7:C0:4E:43:82:BA:B4:44:56:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.209.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:c8:5f:fb:a4:dc:1f:6b:f9:c1:80:9f:56:85:57:8d:6d:1e:
         64:d5:a4:01:3f:a9:5b:cd:e1:37:ae:92:6a:13:64:e9:c9:52:
         5b:4c:1f:d3:d6:c7:61:25:3f:1d:16:e3:5a:95:8c:91:36:d2:
         26:8a:18:71:e2:af:90:eb:b6:c5:ee:f5:3e:a1:2d:75:18:2e:
         03:94:41:01:8d:ee:13:21:16:54:e5:77:80:d0:19:3e:5f:e9:
         4f:38:9d:8a:6a:ac:18:41:59:88:16:0c:17:72:46:9f:e1:14:
         3c:f8:9a:c7:5d:f0:98:9e:a6:b6:d5:9b:61:65:67:29:25:98:
         e6:b9:f7:1e:b5:74:29:ba:78:0f:6c:bd:4f:59:f1:d8:62:fa:
         0b:d4:57:f1:a7:84:69:88:0f:ef:c4:ab:6a:d6:e3:e6:84:d6:
         2c:21:57:08:a4:c5:a6:9f:ff:c7:41:f8:f7:99:06:95:76:f4:
         1c:e1:0d:70:e6:25:f6:2a:e6:48:9c:23:bc:ad:ed:0a:30:3d:
         9f:39:4c:21:6d:e6:0e:2e:2c:fc:95:95:7b:37:96:fc:4e:95:
         d3:29:c3:7a:aa:1d:9d:9b:55:d4:38:d2:05:f1:19:7e:26:08:
         b2:c0:97:d6:46:ed:87:a6:21:a2:55:c9:94:bb:7b:2a:42:fd:
         bc:63:50:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 08:35:21 2025 by rpki-client