Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/b6de8884-c5cc-3db5-9228-52ccfa87ab93.roa
File:                     b6de8884-c5cc-3db5-9228-52ccfa87ab93.roa (raw, json)
Hash identifier:          W3JyBv6mqd/QMA8ihztqw8yYu+OFBHoxmlG0pRHbx9o=
Subject key identifier:   B1:C5:CD:CE:CA:34:5D:AC:0D:47:99:8F:D9:3A:13:26:6E:C5:09:4A
Certificate issuer:       /CN=11f590b6-eb6e-4969-824b-0df247220283
Certificate serial:       010D0C9F4328584B13D6BC769B7B8D6F2089C358
Authority key identifier: 82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/b6de8884-c5cc-3db5-9228-52ccfa87ab93.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     395301
IP address blocks:        209.172.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:bc:76:9b:7b:8d:6f:20:89:c3:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11f590b6-eb6e-4969-824b-0df247220283
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=4b025897-02de-4fd6-bf3d-3725703a82a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:47:e2:da:58:09:14:d1:3e:80:cd:10:ac:b2:
                    9a:b6:f9:a8:14:e6:9f:79:b6:a2:7f:7b:b2:75:60:
                    d6:3f:fb:b7:ec:41:74:b2:83:a9:60:e7:9a:60:5b:
                    39:05:4b:b7:e1:c2:20:48:09:e7:37:29:94:6f:4b:
                    44:3f:ff:fe:4d:5c:01:38:9e:99:86:7b:5e:e8:90:
                    c9:c9:06:68:1f:14:9d:41:0d:ae:25:d1:ba:72:19:
                    b6:24:5c:05:ef:71:fe:22:ed:4f:df:51:70:00:d1:
                    ef:a2:1d:bd:ab:8d:7c:04:cd:6b:35:4a:15:57:95:
                    3a:e1:2e:aa:29:ec:7e:44:53:73:00:f2:fa:98:00:
                    84:86:75:c3:51:40:ac:23:76:d2:b2:69:b2:8c:6d:
                    fd:a1:cb:54:2c:3c:57:67:19:f0:da:0f:66:fa:77:
                    8a:5f:d0:c7:d0:1d:e1:6e:b1:fc:b5:32:04:ff:c1:
                    a2:cf:96:fc:a3:92:0b:99:bb:78:76:9c:f3:70:b6:
                    16:7e:f1:1b:7b:81:a1:8b:f6:8c:cc:09:df:fe:96:
                    84:91:1a:74:a7:0f:5e:12:16:ac:3b:83:6f:25:ad:
                    d0:50:91:43:3b:bf:16:fd:a9:07:fb:d0:e1:ff:9b:
                    aa:e9:2a:ed:e7:4a:5a:5f:4b:36:54:41:5e:9a:ba:
                    f7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:C5:CD:CE:CA:34:5D:AC:0D:47:99:8F:D9:3A:13:26:6E:C5:09:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/b6de8884-c5cc-3db5-9228-52ccfa87ab93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.crl

            X509v3 Authority Key Identifier:
                keyid:82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.172.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:2f:ca:d6:70:23:a9:74:b6:ab:82:8b:1d:f6:76:28:9b:45:
         a0:1e:03:27:94:5d:7e:3c:f2:55:ab:cb:5e:38:58:5c:59:c7:
         7a:ed:95:f9:05:63:5d:95:46:7f:9b:b1:a0:92:9f:52:ad:d9:
         3e:10:36:3f:1f:4b:3c:95:59:a2:88:ec:42:c5:be:e2:62:7b:
         70:40:b7:42:a6:53:cf:5d:c7:4e:7a:1b:37:22:fb:04:52:15:
         b8:8f:ce:e8:a2:65:b7:fb:dd:52:f6:d3:ba:ca:0c:18:3f:37:
         26:0e:f5:f1:d7:0a:23:72:c5:e3:b2:9b:a3:63:7a:01:e7:32:
         8a:fb:ef:f6:b0:1b:5c:dd:e9:99:e9:3c:49:65:2e:f1:27:b9:
         ad:00:44:72:a9:04:d8:a3:9b:0c:54:f8:69:b9:2a:05:f9:00:
         a9:20:be:56:5f:6c:6f:f3:52:e2:17:19:4c:33:8c:1f:8b:3e:
         fa:c9:83:af:15:25:a6:00:63:21:e1:f6:d1:b6:9f:2a:3c:3e:
         6a:f5:fe:7c:7b:f1:83:fa:b1:0f:44:a6:66:c3:c1:92:1d:c6:
         e9:46:45:05:3f:00:fd:1c:f2:91:2b:dc:de:e7:5a:a6:0c:d2:
         73:9e:43:fb:ba:1c:88:e8:f8:1f:25:ea:3c:ba:c7:e5:1c:ca:
         51:10:ab:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 14 11:29:12 2025 by rpki-client