Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/9cb23fd8-3c09-3578-9afb-c8234a90a00e.roa
File:                     9cb23fd8-3c09-3578-9afb-c8234a90a00e.roa (raw, json)
Hash identifier:          CYCm7Ad3Cj0bLqfoy2FR1ytJpatPWnvBgFQK458WadI=
Subject key identifier:   4C:C0:E3:A9:B7:8D:47:B4:EE:FF:DA:F7:4B:EB:95:51:DC:64:0D:6F
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F4328584B0CDC0783BC3BAF0199961870
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/9cb23fd8-3c09-3578-9afb-c8234a90a00e.roa
Signing time:             Mon 01 Sep 2025 13:00:40 +0000
ROA not before:           Mon 01 Sep 2025 13:00:40 +0000
ROA not after:            Sun 30 Nov 2025 14:00:40 +0000
asID:                     27947
IP address blocks:        207.226.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0c:dc:07:83:bc:3b:af:01:99:96:18:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Sep  1 13:00:40 2025 GMT
            Not After : Nov 30 14:00:40 2025 GMT
        Subject: CN=9bab455f-a307-4d28-a48e-388643e8d350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:92:ab:b4:9c:1d:49:dd:d4:5c:da:7a:6c:7b:
                    36:af:7d:bc:19:12:3b:a3:3a:1c:c5:ee:75:b8:4e:
                    87:70:d2:2d:01:a9:15:53:ff:5e:ae:54:ed:2b:e4:
                    50:f4:90:c9:94:3e:94:c8:eb:a4:15:6b:5c:60:45:
                    30:dd:ad:4a:90:7b:8c:39:30:5a:7e:95:fe:d3:1e:
                    a4:a0:64:1c:64:80:1e:ad:60:95:60:74:78:da:16:
                    a0:ae:61:d3:bc:8c:d6:d0:86:22:48:5b:43:ab:9a:
                    3b:03:de:d0:9a:cc:7d:29:9d:6d:c2:38:9d:66:6f:
                    83:26:c4:d4:d2:b7:1b:21:23:43:34:0d:26:c8:a5:
                    3b:93:07:31:ff:1f:85:57:4e:7a:a1:fe:3d:43:80:
                    df:80:00:16:3f:5f:86:f8:63:d4:b7:de:d8:55:0b:
                    57:68:55:33:f8:42:2f:9d:70:59:ae:04:a0:08:8b:
                    20:a5:86:4c:a0:0d:b5:c5:b6:f9:c7:e9:dc:0a:60:
                    8b:16:e7:a6:8f:ca:28:ed:b2:b7:9a:a1:89:b9:94:
                    2d:26:f1:1b:ff:aa:42:73:a4:47:3a:37:b9:55:3e:
                    62:8d:42:a6:ca:2d:a9:e3:bc:0d:36:51:d6:a7:81:
                    f7:fe:ec:d4:fa:e7:c5:60:f0:b0:bc:1f:43:5b:e0:
                    ae:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C0:E3:A9:B7:8D:47:B4:EE:FF:DA:F7:4B:EB:95:51:DC:64:0D:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/9cb23fd8-3c09-3578-9afb-c8234a90a00e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.226.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:6c:b4:65:e6:e4:8c:05:f6:cb:81:7e:85:cf:44:0f:e2:77:
         5e:d5:99:37:ad:28:3d:37:3b:82:6c:a1:f1:04:b4:d3:e7:ed:
         d8:58:17:58:5b:01:c2:a5:be:f4:39:a5:48:74:44:ce:73:61:
         e8:8c:8d:71:dd:88:8e:d4:00:c8:88:5d:5c:d5:6a:19:64:81:
         2e:f5:b5:55:97:3d:e2:92:50:6d:3d:ba:a5:c5:48:fa:21:7e:
         e5:69:77:d6:7e:3c:e4:c7:35:ab:54:9c:69:8f:a4:bb:dc:ad:
         7e:db:0f:7d:94:1b:8a:82:4a:2e:a2:0a:aa:b8:8e:66:8d:bd:
         51:39:ba:1e:a9:2a:11:34:cc:7d:7c:47:04:48:1b:aa:5e:cb:
         54:69:bc:91:5f:e3:59:ff:46:41:ed:eb:8e:bd:56:f2:72:26:
         5e:5c:82:6f:9a:cc:d5:03:f6:8d:71:9e:70:ce:d4:3a:93:9c:
         78:8d:94:6d:5d:61:ed:e9:1d:3b:8a:bb:69:32:c4:52:e8:d5:
         8e:c9:01:05:15:d5:60:52:08:24:91:ae:cf:84:3b:06:5a:f1:
         c1:37:fb:13:f5:d8:b1:64:d2:91:39:f1:6b:40:2e:5a:54:b6:
         d7:13:64:63:98:5d:3f:6a:17:0c:b4:f2:b3:49:82:19:7f:2f:
         c7:03:61:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 12:07:59 2025 by rpki-client