Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/187ea578-167a-4040-baae-c4022f6738f1/db81fc1d-09d4-3bc5-bbe4-5e10dc97d929.roa
File:                     db81fc1d-09d4-3bc5-bbe4-5e10dc97d929.roa (raw, json)
Hash identifier:          OlyJSuzKpYbb/+xDUcH/Bu3tqniy36hTo3vXs/gGGR8=
Subject key identifier:   AE:D1:7D:4F:A7:0C:10:8F:07:1D:CA:E2:06:1D:2C:67:D3:EF:C6:95
Certificate issuer:       /CN=187ea578-167a-4040-baae-c4022f6738f1
Certificate serial:       010D0C9F4328584AC962B2A72A59109B8B717FA0
Authority key identifier: 13:79:70:F8:E5:2B:42:94:84:41:6E:74:81:05:D7:B7:F9:50:CF:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/187ea578-167a-4040-baae-c4022f6738f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/187ea578-167a-4040-baae-c4022f6738f1/db81fc1d-09d4-3bc5-bbe4-5e10dc97d929.roa
Signing time:             Fri 08 Aug 2025 08:57:06 +0000
ROA not before:           Fri 08 Aug 2025 08:57:06 +0000
ROA not after:            Thu 06 Nov 2025 09:57:06 +0000
asID:                     16509
IP address blocks:        208.69.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/187ea578-167a-4040-baae-c4022f6738f1/187ea578-167a-4040-baae-c4022f6738f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/187ea578-167a-4040-baae-c4022f6738f1/187ea578-167a-4040-baae-c4022f6738f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/187ea578-167a-4040-baae-c4022f6738f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:62:b2:a7:2a:59:10:9b:8b:71:7f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=187ea578-167a-4040-baae-c4022f6738f1
        Validity
            Not Before: Aug  8 08:57:06 2025 GMT
            Not After : Nov  6 09:57:06 2025 GMT
        Subject: CN=93d56f84-30db-45c3-ad93-d81267aeee65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ed:50:d8:e0:98:12:8e:79:15:3c:de:01:33:
                    c6:09:c6:7a:f5:f2:b6:67:3f:d6:90:34:0a:b6:14:
                    c6:10:6d:98:89:b8:50:52:47:cf:94:47:f0:07:54:
                    83:66:3c:22:d8:e4:ae:d0:6b:7c:a5:c2:41:5d:72:
                    27:eb:3d:d2:9b:13:22:f6:30:7a:a3:18:55:9d:24:
                    0e:9b:e2:53:be:4e:e5:09:b7:36:c1:47:81:dc:43:
                    43:ee:bb:ef:51:5e:04:3b:e4:bd:8f:32:48:03:b3:
                    ab:4f:d2:19:1e:f1:5d:1f:d7:37:54:73:1c:26:88:
                    75:e0:83:be:ef:b5:35:d5:3d:76:ef:32:a7:3d:bb:
                    dd:cf:58:73:2e:c9:21:b3:74:49:3c:c9:47:82:5d:
                    46:94:53:ec:d0:c7:56:5b:1b:e8:6b:3c:f5:6c:36:
                    ed:c7:89:5c:3e:e8:08:66:e6:a4:ea:2f:3d:5c:78:
                    c2:9a:f9:cf:18:e3:d5:6a:82:53:68:67:7d:71:b8:
                    71:de:01:69:e9:cb:2f:8b:98:41:ca:94:87:97:b9:
                    d9:eb:4b:a5:9d:ae:25:b9:78:fe:92:20:81:fc:9e:
                    ea:f9:d5:16:a4:39:b6:7a:e9:35:a8:61:18:27:85:
                    09:a0:5f:a3:3b:89:35:ed:ca:fc:76:86:d7:76:90:
                    5d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D1:7D:4F:A7:0C:10:8F:07:1D:CA:E2:06:1D:2C:67:D3:EF:C6:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/187ea578-167a-4040-baae-c4022f6738f1/db81fc1d-09d4-3bc5-bbe4-5e10dc97d929.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/187ea578-167a-4040-baae-c4022f6738f1/187ea578-167a-4040-baae-c4022f6738f1.crl

            X509v3 Authority Key Identifier:
                keyid:13:79:70:F8:E5:2B:42:94:84:41:6E:74:81:05:D7:B7:F9:50:CF:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/187ea578-167a-4040-baae-c4022f6738f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.69.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:13:8f:99:cb:8b:c7:68:19:d0:c6:09:66:1e:07:24:db:62:
         ad:71:aa:14:75:fe:af:c1:e6:1c:9f:46:52:a9:91:5e:36:da:
         c0:78:0f:b1:70:39:6a:fe:26:b9:db:9e:2b:a6:04:d7:5f:23:
         ca:c1:5d:bd:66:ca:fc:00:63:2e:8a:5b:13:80:92:0f:4f:fb:
         4c:85:08:6a:1f:96:96:c8:28:80:90:ad:b4:72:a9:ac:f1:b5:
         42:e0:9c:2a:26:9d:f4:7a:f3:04:42:a7:76:61:e8:64:d4:f6:
         2f:6c:40:96:71:13:d2:0f:56:cf:94:c3:85:27:77:3f:ab:44:
         0b:fc:31:74:dc:d3:29:31:38:33:3c:34:f1:06:3f:ff:7f:43:
         49:10:fc:33:e8:4a:12:da:ee:7f:e2:62:8a:1d:89:1a:87:13:
         6e:f1:79:75:c8:a5:11:e7:2a:54:ee:cd:f7:34:f7:51:de:f5:
         dc:b3:12:3e:02:04:e4:e6:2f:63:4e:87:ae:df:04:72:e9:30:
         b1:17:9e:df:bb:6c:73:18:e8:b7:00:1c:9e:24:70:bf:00:da:
         22:da:07:e8:d8:fd:ef:11:c4:75:3f:94:ee:b6:f2:74:aa:b0:
         44:00:07:6f:f8:38:85:54:25:64:cf:8e:63:eb:73:1d:26:ae:
         3f:5d:b9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 03:46:36 2025 by rpki-client