Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/b0eb3180-5f26-3dc6-ac3f-b9f5d5fe0ee5.roa
File:                     b0eb3180-5f26-3dc6-ac3f-b9f5d5fe0ee5.roa (raw, json)
Hash identifier:          JV5WLJEv34Ko0ltvrTf1/ZGuS00akeTQsAGEcaqoVqE=
Subject key identifier:   24:B3:02:47:0E:91:A8:7E:5F:0B:0E:0E:16:58:65:A9:B0:83:AF:AC
Certificate issuer:       /CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff
Certificate serial:       010D0C9F4328584B21CC1AE459B5881BFB6C3640
Authority key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/b0eb3180-5f26-3dc6-ac3f-b9f5d5fe0ee5.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     15239
IP address blocks:        209.50.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:1a:e4:59:b5:88:1b:fb:6c:36:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=2c0de023-65bb-4de4-90a0-4d104af7765f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:db:1f:99:22:09:0a:8a:90:67:bb:07:46:6b:
                    a2:7a:58:41:b0:6a:dd:90:a0:69:5b:f3:97:d2:e8:
                    d3:dd:84:03:f0:0b:06:e9:d6:7c:59:59:b9:13:f1:
                    ee:1f:b5:7f:f2:52:8e:18:bd:70:15:0a:ec:d7:fd:
                    97:b5:6e:52:db:79:bb:ce:47:5a:70:0d:fb:0f:e4:
                    92:dd:33:6a:b5:a7:62:fc:30:f9:f7:8a:e0:ce:97:
                    50:18:b8:95:4a:3c:10:18:09:ea:cd:7d:21:69:89:
                    e7:aa:48:30:36:b8:33:00:b1:49:83:01:19:68:fe:
                    54:fc:60:49:5a:4a:8b:fc:6e:de:55:e9:3e:56:aa:
                    ad:cf:fe:c5:19:6f:fb:cc:1c:4f:43:98:5f:55:33:
                    8d:1d:5a:56:97:18:9d:c3:44:7c:69:f7:98:5f:ef:
                    4b:0a:8a:81:a6:0d:7a:7d:7f:78:57:70:d7:ad:7d:
                    b5:ae:c1:b9:76:33:5f:c4:c9:a0:1f:ee:e5:14:c2:
                    13:ed:1f:b2:19:f3:25:67:4b:d6:43:d6:93:39:a1:
                    57:cc:d7:d8:23:ee:7e:78:e1:4e:4d:2c:bb:23:37:
                    f9:7c:7e:82:4f:ce:c5:09:c8:cf:0d:41:07:dc:d5:
                    42:c5:cd:9d:d0:bc:1f:6c:73:df:a3:c0:47:75:fd:
                    25:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B3:02:47:0E:91:A8:7E:5F:0B:0E:0E:16:58:65:A9:B0:83:AF:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/b0eb3180-5f26-3dc6-ac3f-b9f5d5fe0ee5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl

            X509v3 Authority Key Identifier:
                keyid:D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.50.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:eb:66:2b:22:e3:3c:9e:1c:71:49:bb:ae:77:cc:da:77:54:
         4a:cb:c8:f8:b4:00:40:37:eb:48:72:7c:de:79:b9:52:2a:db:
         fa:07:bb:30:b4:bd:49:26:a0:86:a7:1e:44:5a:86:23:57:34:
         88:ca:61:c5:07:fc:d9:ab:a0:df:97:4d:a0:c5:bf:76:0b:7f:
         cc:ac:d4:e2:aa:29:00:8a:d8:2c:ca:00:06:c0:31:6d:94:79:
         ef:71:7c:bb:5b:82:58:86:99:f7:33:96:d0:08:a0:54:e8:8f:
         57:04:9b:ee:8c:f9:ed:1d:fb:14:51:16:75:5e:2f:b4:70:e1:
         cb:e8:0c:17:cb:20:b2:7d:1b:45:f9:3e:6f:39:e8:b5:da:56:
         b4:af:4c:7d:65:bb:1d:1f:11:c8:42:74:6d:28:94:66:65:32:
         f9:bb:c4:8b:b6:52:42:22:c3:9a:02:21:eb:39:73:62:3a:d0:
         f4:cf:a3:94:ca:f8:a8:6d:c8:54:d6:d7:48:94:40:da:b3:46:
         e3:55:f8:2f:b0:74:10:07:9d:1f:2f:4c:55:cb:d8:94:f5:56:
         1b:af:01:d3:e8:85:e4:37:c5:48:64:8a:7b:bf:2f:ff:ee:d9:
         03:e5:15:61:0c:f2:a2:3e:0d:19:ca:d7:dd:d1:e8:e0:0c:92:
         0f:3d:28:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 10:40:24 2025 by rpki-client