Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/dca748a7-33a1-3825-aba7-e83549aaa4f0.roa
File:                     dca748a7-33a1-3825-aba7-e83549aaa4f0.roa (raw, json)
Hash identifier:          AoU6a1eic435/4djh4IRweThJya1yP9m9rOir/foG1M=
Subject key identifier:   05:50:3B:52:12:00:99:87:F6:B7:E2:90:7A:C9:B8:74:3C:08:CE:43
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584A6825E14CF9B243403A1F6670
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/dca748a7-33a1-3825-aba7-e83549aaa4f0.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     271
IP address blocks:        209.87.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:25:e1:4c:f9:b2:43:40:3a:1f:66:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=45a7e672-b2d3-4f71-af49-b8b35fa850de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c8:7e:90:87:e8:28:e3:25:94:2f:3d:36:ae:
                    b7:0c:bd:b9:b5:08:54:a0:2e:58:f4:c3:bd:79:cd:
                    27:da:90:b3:f1:77:38:5a:17:59:44:70:4a:32:c7:
                    8e:d3:42:dc:13:10:91:b9:bc:ba:90:1b:39:de:3d:
                    5f:ee:7d:11:36:b5:2d:c8:e9:e7:eb:0d:d0:b2:4a:
                    fe:17:16:12:5c:50:f8:50:2c:0f:ff:f7:bf:25:43:
                    6d:cd:b2:e7:86:d9:09:c1:4e:c6:d8:ae:e3:1a:62:
                    cc:cf:eb:82:9e:20:c3:0b:64:fa:40:26:dd:de:b5:
                    ef:30:94:24:4e:73:69:e3:a5:0f:d4:f2:9a:d7:11:
                    4e:bb:7f:9f:d1:3d:78:fa:3b:ce:11:1e:8e:a1:d3:
                    5a:97:a8:1f:10:b5:ad:94:28:9a:10:e7:b0:79:8f:
                    5e:18:5e:a6:af:a0:b1:d0:af:39:0d:7c:c4:75:38:
                    b1:c1:1b:57:2c:ee:11:c4:06:1f:08:e8:e2:87:60:
                    a0:e8:48:47:25:fd:3c:56:92:a3:0a:05:fc:ef:f2:
                    c6:70:24:8c:45:77:e5:ff:db:da:17:95:92:30:bd:
                    f2:bd:87:18:21:5a:38:da:b1:e6:dd:cb:1c:19:13:
                    6a:13:21:33:76:18:fb:c8:14:5b:fd:ef:d5:5d:b3:
                    01:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:50:3B:52:12:00:99:87:F6:B7:E2:90:7A:C9:B8:74:3C:08:CE:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/dca748a7-33a1-3825-aba7-e83549aaa4f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:b0:24:57:96:53:0e:3f:ff:23:6f:e8:cd:21:8c:1a:24:fd:
         c7:85:d6:36:b5:45:00:c9:73:54:af:f4:bf:97:5b:3f:4b:3f:
         f4:59:f9:dc:1f:af:29:85:52:33:0b:2a:91:ae:f1:ea:1f:54:
         9b:f0:47:d2:60:17:5a:68:36:c2:91:ed:2d:c4:22:62:0b:50:
         a4:b4:77:e0:93:ce:c3:66:a8:a2:be:33:9b:e3:83:e2:1f:62:
         60:a0:37:65:e0:c0:2e:ec:3d:c1:a9:0e:59:2f:a9:8f:59:26:
         7d:64:3b:06:e8:08:6f:96:7b:7a:11:11:0a:a2:2e:1a:6b:27:
         3a:29:a3:88:ab:5c:4e:36:2f:a4:04:a1:be:f0:07:ab:a2:e7:
         8b:b7:83:ef:07:a4:4b:aa:6e:c5:c8:8a:54:a7:90:66:8e:aa:
         6e:8b:f5:79:0d:f7:40:4c:8f:d5:87:4b:d1:6a:94:85:73:a6:
         7d:e6:d1:2d:56:13:20:a2:9b:78:36:8b:b8:6c:19:68:45:f4:
         b6:2f:55:94:4b:6e:9e:f2:16:26:2f:48:2e:29:dc:6e:0a:21:
         63:44:d9:0b:9f:55:72:2c:24:15:e0:b1:0a:02:44:b9:0f:6d:
         bc:2a:16:3f:27:99:9e:26:cb:d8:6c:36:f2:e0:f3:b1:30:fd:
         cc:3e:15:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 02:12:08 2025 by rpki-client