Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/459937a6-c7ab-3c46-86b9-565e3bd7bbf8.roa
File:                     459937a6-c7ab-3c46-86b9-565e3bd7bbf8.roa (raw, json)
Hash identifier:          jSJ6Wz9gwIIURSVd3Lz91holKAh1cuky4f7sDEzkZu8=
Subject key identifier:   B7:22:DD:B2:FD:E6:87:F1:7A:AB:01:37:D5:00:6F:CD:F7:AF:6A:FF
Certificate issuer:       /CN=949c3388-1f02-441c-9195-5c40d8fd63d2
Certificate serial:       010D0C9F4328584B1AD18F70862425FB0F809880
Authority key identifier: 68:2C:71:CE:90:9C:5F:87:15:0C:2C:E6:93:67:15:C7:A9:AF:10:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/459937a6-c7ab-3c46-86b9-565e3bd7bbf8.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        204.122.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/949c3388-1f02-441c-9195-5c40d8fd63d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/949c3388-1f02-441c-9195-5c40d8fd63d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:8f:70:86:24:25:fb:0f:80:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=949c3388-1f02-441c-9195-5c40d8fd63d2
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=c05884a5-2039-409c-b05e-07490dbf7f71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:54:37:38:2c:0e:10:3c:ee:d4:13:d4:61:e4:
                    1c:4c:b1:3d:35:25:58:8e:3f:83:f4:cc:f0:ec:fc:
                    9b:7a:13:67:d0:ca:03:6c:da:cd:56:c9:15:f3:0c:
                    7a:f5:20:d6:d9:42:dc:35:17:0f:a0:cd:4d:e8:6a:
                    dd:d6:10:1a:8a:d4:72:2f:7c:61:4f:90:ce:cc:c6:
                    ef:07:67:a7:94:8d:8e:56:d8:c0:a8:04:8e:0a:c2:
                    0e:9b:9d:dd:dd:ac:9f:c1:73:9b:9e:43:e9:12:2b:
                    f7:18:b9:b2:84:4e:98:9c:77:f2:19:37:34:b1:f3:
                    41:2c:4f:08:91:12:ee:00:9b:86:8d:3e:a8:15:00:
                    1b:5d:5f:e5:7b:98:7c:9b:fd:03:56:8f:70:6b:f2:
                    63:ad:5e:29:91:8b:61:a5:90:7d:76:b4:ee:1f:53:
                    ba:f9:fd:48:7a:87:8e:e9:a1:49:a0:eb:de:ea:76:
                    1b:7e:8a:a9:96:90:f2:4d:f1:b1:8b:d1:bb:5a:61:
                    b5:ac:6e:cf:34:2b:36:07:8a:60:27:fc:e4:54:61:
                    21:a5:40:50:80:5d:c3:a6:1e:00:56:f1:fc:79:e9:
                    d4:15:20:98:53:91:62:d3:7f:ae:9e:9e:e1:26:a1:
                    95:6c:60:d6:96:4e:8d:ed:82:06:e7:08:95:ea:77:
                    83:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:22:DD:B2:FD:E6:87:F1:7A:AB:01:37:D5:00:6F:CD:F7:AF:6A:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/459937a6-c7ab-3c46-86b9-565e3bd7bbf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/949c3388-1f02-441c-9195-5c40d8fd63d2.crl

            X509v3 Authority Key Identifier:
                keyid:68:2C:71:CE:90:9C:5F:87:15:0C:2C:E6:93:67:15:C7:A9:AF:10:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.122.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:9e:84:89:5d:d0:cf:74:b0:66:d2:72:4b:57:72:26:78:c6:
         cf:88:33:8f:79:40:d5:a1:7b:51:ae:3b:97:af:2e:e5:1b:af:
         8f:1c:e7:1f:a5:3d:dd:c9:13:d6:75:d3:84:81:8d:53:62:e1:
         1c:c5:cd:5d:a0:62:67:d0:41:1f:da:df:85:d0:d0:55:95:b5:
         62:34:35:10:28:39:39:c2:e2:24:86:6c:d4:dc:db:c5:86:a9:
         cf:45:41:41:92:23:d8:9f:46:d3:a7:a9:19:85:54:3d:82:47:
         ed:b1:6a:bd:16:43:4b:fb:28:e9:43:f8:d7:c3:a2:f7:c8:ec:
         cc:f0:ac:05:5f:1a:dc:09:ac:06:1e:ef:90:e7:e5:5b:2f:3d:
         2e:74:a3:a6:3a:c7:7d:52:fd:09:3d:df:a9:02:f5:13:b4:4b:
         15:a6:75:ec:6d:17:54:4d:ff:ee:c6:8c:4a:0d:b4:14:4a:d6:
         88:35:d0:d6:6f:09:f5:bf:76:21:08:f7:ed:a2:95:52:00:dc:
         38:cd:4a:2e:6a:73:c3:03:77:39:ff:6a:5c:41:98:84:ee:61:
         d1:0f:3b:a8:6e:7e:5a:ac:90:0f:e9:3f:f5:84:79:db:28:e6:
         b0:f6:91:42:06:0b:c7:ca:36:4b:85:46:d0:45:bc:a4:93:d4:
         5f:ea:48:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:53:22 2025 by rpki-client