Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/0dfd6515-bdb1-3df5-93f0-d5778b70020f.roa
File:                     0dfd6515-bdb1-3df5-93f0-d5778b70020f.roa (raw, json)
Hash identifier:          Fh5BppvkkV7i6Fgi02972gWS4PRE95edUGhtglA5bgM=
Subject key identifier:   1D:43:19:A3:46:FB:33:94:8F:28:ED:55:12:CF:C9:4E:C7:61:78:C1
Certificate issuer:       /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
Certificate serial:       010D0C9F4328584ADECBC2066F85705E68E7C500
Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/0dfd6515-bdb1-3df5-93f0-d5778b70020f.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        209.169.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:c2:06:6f:85:70:5e:68:e7:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=156e577f-058f-4496-bf47-cb6ac1b4ea07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:66:f3:e1:e5:90:d0:9c:69:a3:75:80:56:ab:
                    bc:43:78:2f:69:1e:4d:c8:e1:d1:fa:65:59:57:1c:
                    dc:2f:04:a2:67:48:b9:ef:25:f4:2a:b0:d2:70:46:
                    7f:7e:00:86:24:24:97:ef:83:4f:ae:6b:fb:eb:ac:
                    51:d4:46:33:89:8f:a3:da:ab:11:f4:51:7b:00:43:
                    9e:7d:2f:7c:ab:93:63:ce:1e:0b:15:94:cd:74:58:
                    9d:e2:ec:ab:15:b7:56:1a:d7:49:ee:e9:9c:9d:2c:
                    3a:34:63:76:a5:45:2f:1e:d1:2b:0e:2d:a2:54:a3:
                    09:d9:dd:c2:37:4f:46:92:27:76:3c:ad:76:1b:c2:
                    d5:59:f3:67:54:b5:17:1f:7a:ea:a3:37:cf:74:5e:
                    3a:0b:c5:b2:8d:cd:30:85:de:f8:52:4f:f9:e2:d2:
                    fa:37:78:31:bd:ce:6e:08:29:6a:97:db:ee:f5:d4:
                    25:43:d5:b8:c4:11:84:07:6d:38:7d:8e:e6:0c:4d:
                    74:f9:56:0b:e0:cc:c3:19:9b:10:3d:9c:a0:de:61:
                    b7:20:bf:35:73:34:c9:69:f6:52:41:40:6b:d3:9e:
                    a4:80:ab:7f:22:ec:18:f1:9e:ad:12:dd:94:2f:35:
                    35:08:76:13:d4:48:a1:77:55:bb:ec:7b:cf:3d:a1:
                    27:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:43:19:A3:46:FB:33:94:8F:28:ED:55:12:CF:C9:4E:C7:61:78:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/0dfd6515-bdb1-3df5-93f0-d5778b70020f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl

            X509v3 Authority Key Identifier:
                keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.169.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:67:f0:dc:ce:d8:92:d0:73:01:36:67:20:52:72:ab:d0:fd:
         cd:e2:f1:52:cd:60:2d:bd:a2:9b:97:d8:c0:fc:30:73:0c:af:
         d3:bb:a0:ae:32:76:d0:74:94:c6:ca:5a:d3:4c:7b:76:ed:54:
         02:4e:29:24:81:51:a2:2a:1a:0c:14:0a:90:9f:df:0b:05:7b:
         77:48:3e:fc:34:4d:a3:a7:06:ca:21:e2:ba:b5:d0:78:22:b4:
         f1:8b:50:73:e6:df:b5:5b:82:de:39:83:37:21:98:9c:93:1b:
         81:3b:ef:4b:ee:fb:6c:59:9b:af:5a:b2:f1:d0:96:e4:a7:f2:
         6e:5a:15:be:f2:3d:d8:54:15:f9:56:05:73:6b:c3:f3:2f:5c:
         bf:58:10:12:81:03:78:53:ca:be:87:92:03:77:50:69:b0:05:
         e1:ca:29:da:c1:c9:c3:3c:36:ec:d1:d4:27:28:52:25:15:cb:
         56:bb:d5:fd:d4:f8:88:94:b3:50:a1:8e:e7:73:91:c5:28:13:
         fa:c6:6d:e8:62:48:43:9f:f3:21:98:18:6e:c0:46:95:0b:07:
         22:d5:b4:b4:58:b5:81:c7:20:f8:24:49:87:e9:a6:1b:1e:99:
         3d:8c:8c:e0:53:98:02:83:b2:26:b4:bc:4a:ac:a4:5f:e5:cb:
         b9:3d:f7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:50:12 2025 by rpki-client