Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3eb72aed-fa62-39be-83c3-b39809c93d6d.roa
File:                     3eb72aed-fa62-39be-83c3-b39809c93d6d.roa (raw, json)
Hash identifier:          0nksRkmGiqtWHdz86fW7xXvM3AtbXrqqx8cJmNy9J7k=
Subject key identifier:   1A:03:C4:07:46:72:10:4C:07:C2:33:F2:31:BF:A9:C0:3C:22:2A:13
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A698B1957493B017A0BB5B300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3eb72aed-fa62-39be-83c3-b39809c93d6d.roa
Signing time:             Sat 05 Jul 2025 01:00:50 +0000
ROA not before:           Sat 05 Jul 2025 01:00:50 +0000
ROA not after:            Fri 03 Oct 2025 01:00:50 +0000
asID:                     17119
IP address blocks:        209.4.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:69:8b:19:57:49:3b:01:7a:0b:b5:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  5 01:00:50 2025 GMT
            Not After : Oct  3 01:00:50 2025 GMT
        Subject: CN=b2879465-599d-41f3-b11b-01025d787eeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a3:fc:d5:fa:de:72:a5:19:97:3a:f5:2b:4c:
                    5c:d4:de:00:a0:ef:55:a5:48:20:3f:5b:3f:fa:a5:
                    01:44:02:4a:d9:81:3c:ee:66:d7:c4:cc:f8:ad:b9:
                    15:ab:46:f9:3f:d3:56:50:23:53:a0:de:4a:dc:85:
                    2c:7e:12:1d:fa:7b:bb:30:e6:7a:56:e7:0f:c0:e1:
                    48:60:47:e4:ec:94:71:c1:10:41:15:6c:80:e5:10:
                    13:5f:78:9b:2e:37:b1:4e:90:c0:56:2a:33:56:0a:
                    c5:14:74:ee:ca:ba:98:b9:d1:f2:0c:55:7e:80:ce:
                    63:8a:21:c3:fe:e9:8e:29:70:67:81:50:e9:1a:1f:
                    32:84:2a:a8:7a:97:f4:4f:66:3a:d4:40:07:08:29:
                    fc:e4:f7:49:1f:3a:9d:10:8d:e0:3f:a0:b7:55:a2:
                    ce:4d:fa:e9:fe:f3:ce:65:d4:4e:a3:42:c3:f4:e9:
                    b5:43:37:b5:e0:f0:fe:24:61:a8:e6:d9:72:e0:0d:
                    01:89:cc:15:f3:38:22:b8:e1:04:08:9d:19:2d:8d:
                    a7:aa:c0:1a:03:ce:2a:e3:81:e8:15:3d:dc:a9:31:
                    0f:69:c9:90:be:21:0c:33:98:88:fc:5b:f4:99:7a:
                    19:06:60:5e:fd:93:90:8a:60:3e:90:5a:ae:2a:7a:
                    a3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:03:C4:07:46:72:10:4C:07:C2:33:F2:31:BF:A9:C0:3C:22:2A:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3eb72aed-fa62-39be-83c3-b39809c93d6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.4.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:42:85:20:3b:c7:28:13:47:49:0f:3a:71:43:65:6c:13:c5:
         4d:2a:c9:5a:b6:6d:d7:20:0f:0c:8e:d1:62:4d:d7:0f:df:3d:
         9d:ad:10:b6:de:22:4f:22:bf:54:e9:7e:1c:2a:70:6a:88:80:
         8e:07:be:56:07:0a:44:e1:de:5f:b4:41:00:60:df:21:1e:cf:
         95:dd:cf:e2:ce:94:67:6c:13:13:dd:42:5c:65:1d:fb:63:ae:
         ac:40:74:59:ab:fd:5c:9b:70:15:94:df:7d:90:bf:e3:3d:e8:
         15:7b:40:99:ac:b6:02:5a:eb:a2:f2:0c:4b:24:56:75:e2:42:
         86:ab:f1:cc:4a:2a:53:7b:10:d1:ce:fa:d0:59:11:c1:50:c4:
         56:7f:ad:e8:fa:8f:8e:66:8b:7f:e4:05:1a:9d:03:40:e6:74:
         cc:66:ef:3e:a2:5f:c9:fe:a7:3e:85:73:2d:6d:d8:ec:28:7e:
         ef:89:89:e0:d5:04:47:dd:4f:1e:59:89:18:d1:f1:7a:cd:80:
         c5:3b:7b:10:58:a9:83:87:b5:c3:e2:58:f6:7c:2f:bb:f1:6f:
         4a:91:97:f3:85:b6:75:dd:98:ba:38:fe:6b:84:a3:89:d6:35:
         60:76:d3:93:6d:98:f3:55:b9:ff:0d:45:60:d8:e0:25:20:38:
         09:6c:c0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 21:45:18 2025 by rpki-client