Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/2491a6a9-96d1-3941-97a5-af9b2b440096.roa
File:                     2491a6a9-96d1-3941-97a5-af9b2b440096.roa (raw, json)
Hash identifier:          T9h0B4q4mCwaxWmMvyzCtTCgl4N7+m/ubGDvrc8G3EA=
Subject key identifier:   EA:81:8D:E5:0E:66:B3:EE:7C:2F:BD:0F:CF:67:29:F5:9C:F2:61:24
Certificate issuer:       /CN=69686900-f201-4b2c-a1c7-afb725abe47f
Certificate serial:       010D0C9F4328584B4AE5CF5D95FCD1B139933B00
Authority key identifier: 46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/2491a6a9-96d1-3941-97a5-af9b2b440096.roa
Signing time:             Tue 23 Sep 2025 18:20:33 +0000
ROA not before:           Tue 23 Sep 2025 18:20:33 +0000
ROA not after:            Mon 22 Dec 2025 19:20:33 +0000
asID:                     0
IP address blocks:        209.63.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4a:e5:cf:5d:95:fc:d1:b1:39:93:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69686900-f201-4b2c-a1c7-afb725abe47f
        Validity
            Not Before: Sep 23 18:20:33 2025 GMT
            Not After : Dec 22 19:20:33 2025 GMT
        Subject: CN=37a4a317-2e5a-4084-9298-b57eb7c14b56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ec:8a:2a:b7:4b:ef:0b:01:e3:a1:97:a9:6b:
                    15:a4:f2:5b:1a:cd:10:d5:ce:08:70:ef:44:3d:fb:
                    f8:a3:02:b9:92:32:b8:99:39:a7:48:cb:72:46:41:
                    d6:f1:6e:01:94:d8:0e:02:48:04:81:4e:50:ca:bf:
                    91:98:52:3a:70:12:c1:9c:7d:c3:c4:09:7c:6c:fd:
                    63:c3:1d:8e:9f:ae:fc:01:05:9a:4c:04:38:23:65:
                    93:d2:08:08:ec:44:72:cb:ef:2b:84:f6:01:1e:82:
                    f7:4a:4f:e8:af:5d:d6:50:6f:b9:47:19:e4:61:d2:
                    fb:7b:27:82:8f:37:e8:cf:c9:e4:7d:49:ce:07:51:
                    df:d4:69:52:f0:b0:fd:d3:f3:c7:10:ae:fa:2f:55:
                    f8:81:c9:98:e3:62:82:5e:af:98:18:a4:b8:32:73:
                    04:af:d4:71:c4:5f:b4:d2:de:38:e1:c8:07:8a:5a:
                    62:7d:a9:62:b0:f6:be:85:f8:4d:b6:35:ca:61:7b:
                    2e:59:f1:2f:f3:ba:f2:fc:3f:37:75:e6:1a:b3:36:
                    8c:ed:29:37:d2:29:17:5e:9b:a7:9a:06:f5:76:60:
                    25:48:bb:31:1a:45:8f:ee:81:cc:73:ae:c0:8e:1e:
                    0b:99:a1:25:08:b0:84:34:31:3a:8f:d8:f2:f2:b8:
                    4f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:81:8D:E5:0E:66:B3:EE:7C:2F:BD:0F:CF:67:29:F5:9C:F2:61:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/2491a6a9-96d1-3941-97a5-af9b2b440096.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl

            X509v3 Authority Key Identifier:
                keyid:46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.63.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:56:13:d9:ee:e6:20:ae:4f:cd:a6:16:8f:b0:1d:12:54:ae:
         c3:74:2a:f4:65:fb:c4:20:94:6d:6f:d5:55:2a:bb:64:b8:11:
         e7:e5:ae:24:7c:19:90:4b:c4:20:c1:db:72:27:88:92:ad:68:
         bb:0c:f5:b3:39:8f:d4:83:a3:1a:6d:92:32:64:e0:59:d9:de:
         24:89:10:40:30:f3:78:07:77:cd:19:9a:06:a5:e5:26:d0:51:
         15:f9:3a:0b:b8:8c:5d:68:e9:a9:ac:b7:8b:dd:13:52:69:2e:
         9a:23:ff:cd:e4:fc:e7:80:29:56:94:bf:b9:2b:d6:8c:a2:07:
         a5:eb:a5:82:01:5d:8b:5a:1b:1e:e1:ec:d1:a5:c5:a0:1a:97:
         f7:21:be:59:e4:81:e8:1b:0a:59:80:82:0e:71:aa:7b:df:49:
         b2:32:05:c5:14:73:62:ed:3f:fe:54:8d:9e:9c:fb:44:50:2e:
         32:cc:8e:e5:4e:c9:7c:e5:49:20:47:cb:bb:dc:9e:af:47:b5:
         e9:da:d4:56:aa:2a:45:a2:cc:69:76:39:5b:38:2b:25:45:1a:
         57:fe:88:e2:8f:ea:b3:6c:e7:e3:d0:87:46:90:aa:77:ba:f9:
         64:47:c2:c9:84:a3:aa:32:6f:47:e1:47:b6:16:73:ca:9c:73:
         79:08:3c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 13:57:45 2025 by rpki-client