Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/a502b432-1632-3940-872f-cd24ee7e9163.roa
File:                     a502b432-1632-3940-872f-cd24ee7e9163.roa (raw, json)
Hash identifier:          6DNWPN+fJ+y6Zcj8I1sEW3s77dtLJx5JuUbVfSpX/AQ=
Subject key identifier:   BA:C3:BC:BF:57:FC:30:4D:3E:68:80:95:CB:A7:88:9D:6F:0F:13:DC
Certificate issuer:       /CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff
Certificate serial:       010D0C9F4328584B2496CE06097F44EC4CD83B80
Authority key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/a502b432-1632-3940-872f-cd24ee7e9163.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     14369
IP address blocks:        209.173.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:ce:06:09:7f:44:ec:4c:d8:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=27d183a9-18ec-4933-a4d1-244dc19f9638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fa:0c:3d:9c:b6:83:97:3d:21:1c:d8:e8:31:
                    41:e4:9e:26:8e:44:6d:45:41:47:e5:ab:1b:00:0f:
                    7f:de:c5:04:a2:99:9e:ad:e9:7c:6c:17:3a:f3:56:
                    5d:c9:af:ee:79:c4:78:29:98:ca:54:25:16:1f:fb:
                    7b:2d:c6:e4:02:97:41:37:50:23:59:b5:19:ce:d1:
                    19:91:1a:5a:89:66:5d:90:cc:8c:e6:31:82:ad:fe:
                    b6:1a:4d:d6:63:15:49:2f:49:aa:5b:c2:6e:45:3e:
                    8e:bb:f5:bd:f2:82:fc:bf:c9:8f:ca:ae:21:38:8b:
                    7b:28:f6:20:22:5e:35:11:51:4b:30:2d:85:50:16:
                    f8:cc:e1:2b:03:b5:55:54:a6:e9:3e:3c:0d:6d:ea:
                    ad:40:9c:82:bd:f4:93:e2:c4:2a:fb:35:4b:19:a1:
                    89:3d:3e:55:3f:19:8a:65:c9:29:53:31:88:c6:ba:
                    bd:8a:14:f8:6f:19:45:e0:0f:2c:6b:75:d2:02:03:
                    ee:1c:1c:86:d8:45:98:fc:2d:8f:7e:d6:b6:55:08:
                    e4:17:d3:c6:84:0b:f0:50:57:b3:9c:72:3e:39:e4:
                    22:5e:e4:83:16:15:4b:cf:9c:d1:87:97:3b:6c:09:
                    ca:21:79:34:51:ce:27:b0:de:75:af:22:ee:5e:ea:
                    b7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C3:BC:BF:57:FC:30:4D:3E:68:80:95:CB:A7:88:9D:6F:0F:13:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/a502b432-1632-3940-872f-cd24ee7e9163.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl

            X509v3 Authority Key Identifier:
                keyid:D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.173.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:cc:1a:c3:66:aa:68:41:ce:5e:81:2c:33:d2:f7:90:98:4a:
         4c:9d:0e:31:77:78:88:85:c1:ae:7f:9d:da:7d:45:d6:f2:de:
         80:8d:7a:35:16:51:7b:1f:ed:be:23:70:f6:90:8c:fc:58:5e:
         9b:65:5d:79:e4:63:c9:31:c3:c6:20:73:69:45:d3:22:f9:45:
         1f:88:89:73:9d:e0:b7:a3:37:b2:e6:b5:c3:39:a5:78:ce:9c:
         84:b2:2d:49:f8:fa:3f:e7:98:da:ec:a6:62:9b:81:27:6c:81:
         56:f5:cd:4b:37:a2:58:c1:e4:e1:c9:31:f9:e9:c3:a2:fb:eb:
         df:a8:7b:11:71:c4:e2:5e:97:5b:cf:b0:7b:07:95:3d:f3:c0:
         01:fa:ff:05:c5:05:92:4d:4c:42:27:74:af:cf:2d:ae:2b:0e:
         0f:59:5b:89:cd:4d:18:9c:a3:cd:2a:7f:58:c9:d4:9c:7e:13:
         56:6d:1b:f1:3a:bd:db:31:8e:b5:df:b4:3f:85:d1:3d:2b:16:
         22:4b:cb:e1:52:1f:c1:d8:ce:82:72:d4:31:d0:12:f8:62:29:
         8a:ed:6b:9b:e3:b0:30:10:38:cb:b9:68:a6:45:37:c0:28:40:
         09:04:0d:d5:6d:86:cf:e4:93:1f:a2:09:ec:be:22:36:a7:e2:
         e7:1e:38:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 10:42:30 2025 by rpki-client