Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/84674b29-ce04-35c0-8a3b-86ebf2b8ff5c.roa
File:                     84674b29-ce04-35c0-8a3b-86ebf2b8ff5c.roa (raw, json)
Hash identifier:          4SjY3V7Zg0MOZTRp9GFtlNGFc7ulA4HyMsqrVIYQfYs=
Subject key identifier:   B3:D4:CD:58:B2:EC:E0:90:79:A6:C8:C4:12:AC:E1:8F:21:5D:22:36
Certificate issuer:       /CN=8ad56193-8e33-4786-9a64-949338fc325a
Certificate serial:       010D0C9F4328584B27617C848409D619678B2100
Authority key identifier: 4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/84674b29-ce04-35c0-8a3b-86ebf2b8ff5c.roa
Signing time:             Thu 11 Sep 2025 01:00:33 +0000
ROA not before:           Thu 11 Sep 2025 01:00:33 +0000
ROA not after:            Wed 10 Dec 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        209.114.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:27:61:7c:84:84:09:d6:19:67:8b:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad56193-8e33-4786-9a64-949338fc325a
        Validity
            Not Before: Sep 11 01:00:33 2025 GMT
            Not After : Dec 10 02:00:33 2025 GMT
        Subject: CN=69b084ab-c2ef-4cfc-9e40-ceb8974bdebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:38:63:ef:5c:b8:6b:ef:b5:6b:a9:01:d9:81:
                    15:c5:c4:bb:aa:73:d0:d3:44:b7:7e:ad:70:9b:1d:
                    59:ba:32:c1:f7:5b:d4:4f:9e:47:6c:05:4d:cd:61:
                    20:21:49:94:05:58:3c:44:02:78:e7:6d:24:5d:22:
                    1b:b0:a3:11:6d:a4:e1:ab:e2:d0:17:22:3f:06:d8:
                    db:e0:5a:07:c6:82:10:21:1b:57:48:87:d4:0b:7a:
                    8d:0c:0b:18:16:cb:06:8a:ad:86:91:19:7b:bc:9d:
                    a2:ab:35:88:c6:6c:7e:3a:bb:60:3f:71:6e:6b:38:
                    4c:2a:9e:d1:93:34:43:7b:5b:cb:b3:70:6f:7e:1c:
                    93:30:7e:5d:c8:67:1a:77:d8:c0:fe:be:11:4d:1c:
                    4c:7a:52:86:c0:98:ad:dd:87:0f:b3:8c:2d:0e:4e:
                    29:93:67:ff:92:45:43:5c:7b:f7:fb:40:21:e7:ad:
                    66:03:1b:8f:2a:48:f4:8c:ca:d5:3e:74:03:61:29:
                    26:50:eb:28:28:c9:57:79:a7:c6:ed:66:07:fa:57:
                    c4:e1:ac:50:76:94:1d:66:81:28:22:98:35:6b:cf:
                    c8:e6:e0:8c:61:56:81:76:39:b1:6f:50:8c:5f:c7:
                    b3:37:16:ce:06:ba:b8:64:b1:9c:ca:75:0c:98:4d:
                    9a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D4:CD:58:B2:EC:E0:90:79:A6:C8:C4:12:AC:E1:8F:21:5D:22:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/84674b29-ce04-35c0-8a3b-86ebf2b8ff5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl

            X509v3 Authority Key Identifier:
                keyid:4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.114.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:cb:c3:12:fd:88:34:b8:79:a8:a2:df:5c:cb:e1:37:a0:65:
         b6:75:36:54:32:f4:ff:88:2d:08:48:8d:d7:b5:76:84:39:d6:
         62:67:ca:9e:ac:33:68:c7:cf:48:c5:47:f1:de:c3:c8:51:c7:
         ab:6c:70:db:3f:5e:0b:9c:ad:52:5b:46:f4:b9:b8:2f:e4:dd:
         1a:9a:41:81:33:d8:6d:87:7b:02:11:9d:75:f8:21:7d:b0:a0:
         e7:37:a6:1d:d1:69:78:36:33:63:2a:b4:9d:31:20:4d:ff:d6:
         db:c2:26:47:b9:f4:5a:ed:59:9d:ab:79:94:51:31:28:4a:2a:
         42:ac:86:de:c3:a9:3a:57:a9:7c:ce:e2:f2:a6:e7:4d:60:99:
         ca:7c:dc:77:65:f6:9b:05:c3:68:dc:75:63:f3:8e:1d:97:33:
         a5:35:ad:33:bb:c7:42:52:89:ad:c0:82:17:cc:19:82:71:a1:
         fc:a2:a7:91:b7:20:2b:a6:1f:72:f1:c5:89:f9:3e:63:f6:0b:
         4b:de:ed:48:d3:e6:c0:3d:1c:2b:c3:07:fd:51:7a:47:cd:69:
         ea:f8:3b:b6:2e:e9:33:19:6d:1c:a7:52:c0:20:fa:77:7e:87:
         c7:52:f9:bf:5d:66:c1:aa:07:03:d4:d0:e8:00:fa:10:04:1d:
         f3:93:9d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:08:57 2025 by rpki-client