Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8eadffea-7ae3-46a5-afb6-3aee3190a76d/f08abee9-414b-3299-aa0d-823a1c6aaab9.roa
File:                     f08abee9-414b-3299-aa0d-823a1c6aaab9.roa (raw, json)
Hash identifier:          EnBjJcoCSWtawLT4/iCHoQvwTFxMkfzPesP/j79tT34=
Subject key identifier:   14:C9:8D:FD:7F:4E:EE:F7:63:05:F8:A0:7E:47:6C:65:DA:08:4A:DA
Certificate issuer:       /CN=8eadffea-7ae3-46a5-afb6-3aee3190a76d
Certificate serial:       010D0C9F4328584B434C4C4970666F6319C47240
Authority key identifier: 0E:FB:0A:1B:F9:6F:6F:F5:DD:7A:77:98:29:40:51:63:C1:E9:09:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8eadffea-7ae3-46a5-afb6-3aee3190a76d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8eadffea-7ae3-46a5-afb6-3aee3190a76d/f08abee9-414b-3299-aa0d-823a1c6aaab9.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     16509
IP address blocks:        209.135.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8eadffea-7ae3-46a5-afb6-3aee3190a76d/8eadffea-7ae3-46a5-afb6-3aee3190a76d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8eadffea-7ae3-46a5-afb6-3aee3190a76d/8eadffea-7ae3-46a5-afb6-3aee3190a76d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8eadffea-7ae3-46a5-afb6-3aee3190a76d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:4c:49:70:66:6f:63:19:c4:72:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eadffea-7ae3-46a5-afb6-3aee3190a76d
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=0e594a35-58d2-4043-8817-b00ef302277a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:28:de:7a:1c:5b:f9:64:9a:20:e4:b9:cc:52:
                    64:11:a8:48:5d:54:5a:a7:b1:0e:bd:f2:fe:75:24:
                    00:3d:ba:d6:af:00:9d:77:b1:5f:15:f8:57:2a:74:
                    cd:76:3d:11:83:16:53:17:36:c6:b8:30:f8:b5:0d:
                    cb:82:22:c5:84:42:0d:cc:8b:a9:ee:21:1c:3d:8c:
                    f7:4f:cf:f1:d9:8a:a0:79:c6:9f:6a:65:b8:fc:1a:
                    8f:3a:3c:cd:e8:7f:c5:a8:fa:82:ff:27:0b:41:f6:
                    d0:5f:24:37:e3:c5:9f:11:c2:08:1c:d6:96:8d:1d:
                    ba:b9:e2:b9:53:28:b2:20:57:fe:16:e2:d5:d3:17:
                    6d:80:ec:47:ef:40:7a:23:63:93:3c:31:b0:e7:bd:
                    af:29:be:d7:72:3b:da:ba:91:e6:b6:0f:63:66:7c:
                    74:6c:df:c3:f5:4a:7f:59:2d:07:93:07:0b:25:d5:
                    b7:12:16:ba:87:76:a9:76:9c:d8:b6:c1:c5:5d:73:
                    85:60:ac:89:62:81:19:26:3a:9b:13:eb:cc:c9:61:
                    01:b6:e4:4a:bd:02:9d:de:c1:8f:7d:cc:48:9a:39:
                    5f:b7:48:b1:7a:c8:31:d8:9b:b8:82:63:25:10:a8:
                    af:02:d2:ad:4c:6a:4e:1b:a3:86:a7:d4:88:5c:54:
                    00:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C9:8D:FD:7F:4E:EE:F7:63:05:F8:A0:7E:47:6C:65:DA:08:4A:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8eadffea-7ae3-46a5-afb6-3aee3190a76d/f08abee9-414b-3299-aa0d-823a1c6aaab9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8eadffea-7ae3-46a5-afb6-3aee3190a76d/8eadffea-7ae3-46a5-afb6-3aee3190a76d.crl

            X509v3 Authority Key Identifier:
                keyid:0E:FB:0A:1B:F9:6F:6F:F5:DD:7A:77:98:29:40:51:63:C1:E9:09:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8eadffea-7ae3-46a5-afb6-3aee3190a76d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.135.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:3e:64:14:24:16:3e:cb:bb:ea:52:c0:0a:92:a8:13:a9:1c:
         86:09:f8:b7:4a:cf:85:51:fc:b0:65:56:e4:72:c7:ea:00:f3:
         75:80:56:02:10:e7:8b:23:33:1a:06:a3:3d:fd:0e:d3:99:cc:
         9c:0b:03:44:e2:76:94:3d:31:95:5b:9d:d6:fc:b8:50:20:93:
         4c:08:4e:2a:35:2e:da:42:4a:7e:30:ec:e1:e0:e0:63:a1:c0:
         1a:4a:90:fa:d8:17:ea:a0:6d:32:38:05:9e:c9:d8:d6:44:17:
         22:fd:a1:80:e2:64:46:93:1b:05:89:4c:65:a1:a7:87:f9:37:
         8f:83:b6:c0:84:97:64:06:01:c6:9b:79:5f:13:6c:f2:4b:68:
         8b:ac:39:a3:bf:52:eb:3b:07:ea:df:b5:f4:a0:72:5f:9c:33:
         2f:59:0f:fb:ac:b2:5c:c3:69:aa:1f:d2:5f:ef:b4:59:15:cc:
         39:1f:3e:4f:ec:a7:16:29:9d:c4:5e:53:9d:7a:51:c0:b3:b5:
         0b:01:6f:05:75:ea:b6:34:68:69:3b:a1:38:9b:87:ce:f6:0e:
         f1:77:84:9a:b1:82:e4:2e:e7:d8:d7:da:e8:98:24:96:34:66:
         88:9b:78:07:ee:dd:a0:67:f4:ec:f8:8e:d4:93:b3:14:6d:0a:
         0e:cc:b3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:53:07 2025 by rpki-client