Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/1245ef33-b3bd-3bf7-a265-92428306a2a0.roa
File:                     1245ef33-b3bd-3bf7-a265-92428306a2a0.roa (raw, json)
Hash identifier:          7NirUK3UCNzRge9WsqhfCIb29+7lfKDJp5Nb3wNRJTI=
Subject key identifier:   D9:8A:84:95:8B:2C:0B:2A:2C:4E:1E:49:EE:DB:1C:9F:D0:66:1B:C8
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584B0A11641BBECA8BD7C4ABE200
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/1245ef33-b3bd-3bf7-a265-92428306a2a0.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     399030
IP address blocks:        209.37.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:64:1b:be:ca:8b:d7:c4:ab:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=035e9586-741d-41b4-921c-eb35a3405b44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e5:5a:bd:88:cb:3d:f2:d4:25:f1:65:aa:ac:
                    c4:d3:86:88:31:36:76:eb:d7:28:15:92:9d:43:9c:
                    91:92:69:bc:99:e1:29:f3:9f:a4:a6:e5:7c:22:ed:
                    cd:3b:85:0e:89:2e:63:2b:6c:a2:67:0a:77:9f:c9:
                    69:5a:75:a4:37:e3:8b:47:74:9c:e5:7a:f6:48:56:
                    d3:00:ea:88:ba:04:31:4a:85:bd:0a:f9:82:5f:01:
                    07:ef:ae:3e:57:da:43:22:8e:47:ae:6e:2d:25:df:
                    4b:44:d3:80:e3:b3:f2:fb:1f:77:e0:92:e0:86:80:
                    cc:99:e6:0b:65:cf:86:fb:fe:6d:cf:e2:41:46:cd:
                    41:e7:dc:9e:19:7f:8f:2c:2e:78:e3:73:49:0b:3e:
                    80:e4:65:86:34:a1:50:34:33:08:5f:02:f6:1a:54:
                    64:74:5b:82:36:17:82:87:a2:b2:73:e6:4d:ad:07:
                    8a:1f:08:65:f4:0d:29:06:e3:f5:78:e1:c1:a7:ca:
                    07:8c:02:92:a5:5f:63:9e:96:bf:88:a8:38:b5:06:
                    8c:af:fa:64:c3:96:de:79:f1:5b:4e:c2:45:de:b5:
                    aa:94:b9:0f:cc:86:ea:a0:21:04:45:db:e5:31:7b:
                    a9:e8:04:f9:3d:98:0c:e9:45:41:e0:35:5b:b4:6f:
                    0a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:8A:84:95:8B:2C:0B:2A:2C:4E:1E:49:EE:DB:1C:9F:D0:66:1B:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/1245ef33-b3bd-3bf7-a265-92428306a2a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.37.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:91:d2:80:14:4c:53:84:ff:13:c4:75:a4:82:ba:0e:7e:6e:
         0d:4b:13:c7:a7:96:ce:40:db:13:2f:e4:fe:c4:a3:69:11:55:
         95:6a:2e:f9:fa:15:05:4e:86:c5:d7:df:38:fa:9e:c6:c9:ff:
         23:e8:c0:24:e5:cd:25:ef:91:44:5e:65:64:da:e6:32:c1:14:
         d2:d4:a8:e2:8d:fe:88:f6:10:26:21:c2:91:3e:a2:13:04:92:
         f0:74:48:86:87:8c:21:3f:49:2e:db:63:c8:78:a0:8d:ce:49:
         57:b1:1f:5e:85:3e:d6:5d:43:42:c6:a4:6f:e2:57:c2:dc:c4:
         8e:ff:53:14:cd:c8:ce:88:8a:cd:fe:70:2f:0c:54:26:5a:c1:
         6c:4b:78:f2:3b:ba:8a:43:06:34:30:29:d6:88:ad:3b:5f:f7:
         82:a7:57:fb:fe:bf:9a:20:f2:ec:f4:f7:fb:f6:ae:79:1a:fa:
         98:5d:46:33:f0:27:1d:c4:a2:44:22:df:37:bc:e0:9f:99:39:
         e6:a2:b8:c8:c8:c0:57:ea:59:0d:f5:77:a4:51:1f:1c:cc:7b:
         8c:34:01:ff:57:7a:05:d4:e9:3b:4b:0f:76:0f:87:88:9c:aa:
         8b:73:ad:52:2d:26:9a:19:4e:b1:13:dc:ce:0f:e6:60:31:7e:
         8a:16:df:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 00:33:45 2025 by rpki-client