Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/eda804af-913c-31a9-b634-136d0b578096.roa
File:                     eda804af-913c-31a9-b634-136d0b578096.roa (raw, json)
Hash identifier:          VNZpGGn7ju0aZzsXi9cAK1bOr39Y9KgAq4L+3WL1RNc=
Subject key identifier:   85:E2:A6:33:32:9B:F9:23:4A:7F:01:A0:02:00:E4:0F:13:A6:91:B5
Certificate issuer:       /CN=d862b5c6-40a1-4249-a26e-11938a702985
Certificate serial:       010D0C9F4328584B0CDC139A99D9A166872A54A0
Authority key identifier: 81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/eda804af-913c-31a9-b634-136d0b578096.roa
Signing time:             Mon 01 Sep 2025 13:00:40 +0000
ROA not before:           Mon 01 Sep 2025 13:00:40 +0000
ROA not after:            Sun 30 Nov 2025 14:00:40 +0000
asID:                     209
IP address blocks:        173.195.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0c:dc:13:9a:99:d9:a1:66:87:2a:54:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d862b5c6-40a1-4249-a26e-11938a702985
        Validity
            Not Before: Sep  1 13:00:40 2025 GMT
            Not After : Nov 30 14:00:40 2025 GMT
        Subject: CN=024f6429-b592-4129-afd5-bfd06d4df3a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:98:a7:f8:1b:07:d2:59:94:69:97:a6:85:f2:
                    e5:a5:ba:c7:29:ea:db:5c:87:a4:b2:53:bf:4d:4e:
                    2d:3c:85:9e:c7:18:45:59:a9:31:25:8f:e6:87:96:
                    6f:ae:e5:fc:5c:39:70:f7:1e:9d:6b:7c:05:5e:75:
                    71:aa:b9:40:17:ae:e8:9c:78:25:1c:81:98:05:1d:
                    6c:71:cc:1c:27:c5:36:ac:fd:19:bf:13:5e:9e:2a:
                    37:12:8c:06:5f:a1:75:d2:3a:c8:83:1b:59:65:92:
                    c1:86:6b:8e:e1:ae:3a:cf:70:e7:5e:9e:3f:6f:dc:
                    a5:05:74:0f:6b:9b:ee:2a:42:f2:12:17:71:e4:8f:
                    a1:fc:4b:2e:5c:ac:f8:3e:08:9f:34:bf:cc:23:96:
                    e0:db:32:4e:41:65:45:dd:88:8c:e1:ce:72:c8:c2:
                    79:1b:3c:24:3a:1e:59:e2:e2:bf:0b:69:b5:b8:9c:
                    c5:83:a1:91:f5:0a:c8:22:ca:99:c6:6d:1e:d2:68:
                    c0:6a:c3:fa:4b:c1:8a:99:52:df:1e:32:60:8d:e5:
                    53:16:d1:40:7c:8f:22:d2:05:08:5d:d0:52:b1:e0:
                    a4:d2:50:4a:ab:ad:4a:77:1d:35:e5:32:d2:07:b4:
                    13:c3:1e:03:66:b5:6a:ac:72:ab:82:d3:53:1d:8e:
                    e6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E2:A6:33:32:9B:F9:23:4A:7F:01:A0:02:00:E4:0F:13:A6:91:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/eda804af-913c-31a9-b634-136d0b578096.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.crl

            X509v3 Authority Key Identifier:
                keyid:81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.195.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:e9:2d:bb:c0:94:26:35:f1:b5:ce:60:32:39:18:e7:dd:96:
         64:ed:8e:ca:64:ed:cc:24:c3:96:e8:f1:69:9c:ec:a5:51:dd:
         15:c7:23:97:20:d9:0e:1b:7a:b2:c5:01:fe:dc:03:94:26:15:
         2c:f3:96:eb:03:82:6d:cd:fa:5a:40:5f:28:d5:0a:0b:34:0f:
         6c:1d:87:97:e7:83:f4:f9:9f:21:ef:84:6a:6e:f9:b5:65:9e:
         46:52:05:95:a7:98:8e:c2:02:93:34:2c:e2:ea:f7:e2:e9:89:
         44:23:66:90:68:c9:3f:1b:4a:40:40:ee:c3:ea:61:d6:43:52:
         3c:cc:dd:f8:01:79:f6:04:0c:ab:d0:8a:02:b0:41:c8:a0:55:
         a9:d8:0e:a3:2a:b4:ce:19:93:84:3b:a2:1e:82:26:c8:74:12:
         e0:88:d8:6c:29:30:e3:d8:09:9e:59:64:24:c2:c1:70:2d:6d:
         ce:78:09:61:c8:ae:e3:7a:65:c1:92:5d:28:3b:50:53:60:72:
         4f:2b:57:e0:a9:63:98:0e:e4:4b:21:15:df:ed:06:c7:f8:a0:
         d1:a8:ef:fa:ce:9d:16:21:55:3b:b8:74:ac:38:69:9f:1b:9a:
         a5:a7:dd:10:63:6f:eb:76:fb:1e:8c:78:dd:03:f5:8e:d2:30:
         de:84:e5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 01:53:34 2025 by rpki-client