Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/ff7ae68c-02e6-3bb2-b0fa-94df0dbbd6fc.roa
File:                     ff7ae68c-02e6-3bb2-b0fa-94df0dbbd6fc.roa (raw, json)
Hash identifier:          2R1DEOuQXtSI3bZECwAW5QDxU9txpAhKzW4MY0TbNSs=
Subject key identifier:   25:62:A3:B5:52:B6:FB:03:AC:A7:47:9F:0A:D3:78:86:6A:14:81:DE
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F4328584B95A79687CCC1086D50EE4E00
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/ff7ae68c-02e6-3bb2-b0fa-94df0dbbd6fc.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     30103
IP address blocks:        209.9.211.0/24 maxlen: 24
                          209.9.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a7:96:87:cc:c1:08:6d:50:ee:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=87e5ae6e-2144-4b0f-ba08-09c9d25dbf07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:5f:14:a2:03:5d:c4:03:2a:9b:fd:e3:41:06:
                    b6:60:32:6e:f3:05:ba:96:66:5b:d5:6b:72:00:cb:
                    57:12:aa:4b:73:82:7b:a4:eb:f3:0b:ef:14:24:5e:
                    8c:2a:01:65:ca:f4:ae:91:eb:f4:64:06:50:f1:dd:
                    c3:6d:4c:2b:73:7a:4c:50:31:a7:75:a6:46:ff:2b:
                    3b:7c:b1:15:25:e8:37:6e:a2:29:29:a7:47:27:2a:
                    a7:23:5a:5a:f7:e0:9a:86:9b:ac:93:05:4d:29:c5:
                    ad:a1:01:2a:a0:94:16:1b:0b:2d:c0:ee:32:62:34:
                    59:f5:80:c8:f8:67:99:2a:78:aa:2d:ca:83:0c:04:
                    d8:7e:00:76:4f:2d:ee:c7:35:7b:20:21:70:e0:bc:
                    c2:52:49:db:64:14:a1:bd:64:2c:50:2e:34:94:b4:
                    a8:03:a5:e5:58:7d:d2:37:7b:d6:f5:dd:c3:4d:19:
                    30:cf:54:4e:91:6d:72:0f:02:d8:70:e5:56:3b:c7:
                    dc:f5:62:61:0c:f2:27:fd:57:8f:10:4c:35:8c:cd:
                    4b:37:78:48:1d:8e:87:c7:c5:42:80:d4:1d:ad:40:
                    0b:74:12:a0:d1:85:4f:e7:5b:d7:e0:c2:77:7a:eb:
                    c7:ee:9f:15:fc:8e:b4:57:13:e3:4e:38:67:73:33:
                    54:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:62:A3:B5:52:B6:FB:03:AC:A7:47:9F:0A:D3:78:86:6A:14:81:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/ff7ae68c-02e6-3bb2-b0fa-94df0dbbd6fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.9.211.0/24
                  209.9.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:a0:d4:fa:7a:6d:df:ad:c2:29:a0:51:06:ed:3f:83:68:3c:
         2d:eb:fb:0c:80:f5:24:8b:1a:3d:7c:e4:2b:f7:fd:0b:30:4e:
         c3:28:e8:67:0f:a1:26:3b:fd:b6:2e:59:9d:87:22:ba:ea:c7:
         d8:85:b2:d0:76:54:ca:51:0f:7b:6c:87:34:df:ab:a2:f1:c9:
         fb:71:fd:4a:0d:ca:4d:ae:bb:e0:bc:ec:37:07:01:2e:f7:ee:
         88:7f:04:e7:ee:dd:a8:0b:11:a7:b6:32:e3:27:90:52:bf:db:
         7e:a8:69:1c:ef:65:21:1a:4c:a4:46:5d:c3:8b:64:6a:78:1d:
         61:73:ce:76:b6:73:e1:c3:92:71:64:6e:fc:57:45:22:eb:ea:
         84:27:df:1c:58:a2:38:45:9b:cd:e5:bc:a6:96:7d:d6:9c:f0:
         d0:b9:a7:2e:d8:f6:44:84:00:98:c1:ba:fe:db:98:90:df:19:
         62:72:e0:d3:31:50:83:e1:79:0f:5d:d5:cd:65:4a:ef:ec:cc:
         97:a2:9c:6a:f6:dc:af:b5:2c:1e:68:30:9d:b7:c7:27:de:60:
         57:e0:4c:8f:a8:bd:93:ef:35:34:33:43:74:54:be:9c:6d:7c:
         67:91:27:0a:a8:92:ea:16:a9:db:97:6d:52:8e:e3:d2:8a:2a:
         64:3d:df:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:07:23 2025 by rpki-client