Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/f880db5b-e47b-395f-bff3-27346670e7a5.roa
File:                     f880db5b-e47b-395f-bff3-27346670e7a5.roa (raw, json)
Hash identifier:          VJ5UOjQyBMFRgrzGKnTwVdO5Sg4EeUvRvy7dnNh+df4=
Subject key identifier:   F9:9D:63:DC:0F:1F:78:6D:A0:F4:86:4B:7D:CF:0A:EE:2D:7B:19:C5
Certificate issuer:       /CN=09fe46b0-7034-4d7b-a746-7a70f788c3f5
Certificate serial:       010D0C9F4328584A5CFB2E6FFEE56482367257E0
Authority key identifier: 2A:52:1B:75:DD:A9:EE:3E:91:EC:CB:6F:A7:C2:EB:3D:EA:BC:38:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/f880db5b-e47b-395f-bff3-27346670e7a5.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     16509
IP address blocks:        209.127.216.0/24 maxlen: 24
                          209.188.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/09fe46b0-7034-4d7b-a746-7a70f788c3f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/09fe46b0-7034-4d7b-a746-7a70f788c3f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:2e:6f:fe:e5:64:82:36:72:57:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09fe46b0-7034-4d7b-a746-7a70f788c3f5
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=8e98ca9a-1b80-454f-b215-b72d349fc31a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d9:71:ad:7f:8c:3c:8a:8d:17:a9:40:f5:9e:
                    a7:e8:fb:ca:27:5c:2e:42:66:06:c4:5b:6a:fb:15:
                    eb:60:ea:69:3a:17:bb:c9:e3:60:d2:28:0e:43:16:
                    ba:6e:4e:f0:24:a3:69:5a:51:24:5f:68:d1:7b:1d:
                    08:38:a6:70:27:7c:33:7a:75:ae:9d:c4:fd:1c:ae:
                    90:ba:6a:43:8d:77:bb:4f:08:68:01:ba:f1:dd:e1:
                    c2:8e:98:ee:2f:bf:25:40:92:6d:42:a4:89:95:c6:
                    9b:be:80:51:7e:0e:d4:a2:4a:be:aa:84:28:3d:6b:
                    55:ca:b9:93:62:62:ef:8c:32:10:2f:1b:8e:df:90:
                    2a:fa:9b:ba:70:2a:37:a9:18:e9:10:01:0e:7e:44:
                    b4:b2:21:1c:76:28:2b:27:45:3b:3b:0f:ba:51:eb:
                    41:59:57:86:f2:e9:67:c7:c9:28:dc:e1:44:cd:32:
                    dc:a5:de:81:f0:d8:28:48:f5:88:a7:12:7b:4a:a5:
                    ae:79:15:a1:74:c8:8c:23:58:73:ff:3e:b1:cb:36:
                    1e:eb:aa:03:51:ec:8a:b0:2f:ff:b5:62:9f:6c:48:
                    a3:9d:2f:05:12:5c:e8:92:7e:94:00:e4:a3:df:9f:
                    9e:9e:a5:9b:0f:5b:22:28:83:7f:c0:87:03:a5:32:
                    bd:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:9D:63:DC:0F:1F:78:6D:A0:F4:86:4B:7D:CF:0A:EE:2D:7B:19:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/f880db5b-e47b-395f-bff3-27346670e7a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/09fe46b0-7034-4d7b-a746-7a70f788c3f5.crl

            X509v3 Authority Key Identifier:
                keyid:2A:52:1B:75:DD:A9:EE:3E:91:EC:CB:6F:A7:C2:EB:3D:EA:BC:38:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.127.216.0/24
                  209.188.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:38:f6:69:cd:4a:c7:63:66:16:78:89:81:90:c5:87:66:92:
         91:bc:8b:af:2f:74:6d:56:1b:c0:d8:6a:0b:fc:11:b7:51:12:
         a4:a0:2d:8e:6f:01:25:9a:8c:b1:9a:59:53:4e:02:1d:91:f6:
         97:aa:0a:a3:c4:36:9a:09:75:c3:cf:8e:27:51:4a:6a:03:33:
         d1:58:6b:12:5c:f5:81:07:fc:50:30:98:98:5a:47:a1:65:85:
         1b:5c:45:21:3f:bd:6a:13:e7:ff:e2:b2:a9:bb:4b:a5:87:ec:
         2c:42:20:7b:92:2f:08:aa:f8:40:08:ce:9b:93:71:3d:49:e1:
         57:ba:0e:13:8a:33:09:bd:0f:5f:39:ad:d9:45:88:33:7e:5f:
         f9:3a:90:95:57:9a:7a:d3:35:d4:59:f9:2b:be:32:ce:df:4e:
         84:75:06:be:a4:e2:60:b4:c5:bc:7c:f5:04:d0:aa:7e:a6:d5:
         c0:04:bb:8d:8c:dc:f1:52:a3:16:a6:a7:c2:15:75:e3:b7:90:
         50:60:df:fb:b6:79:7a:b5:db:64:d2:a0:85:cf:33:33:99:dc:
         f2:c2:b1:49:d2:97:8e:c1:f1:24:af:d5:42:ef:e1:49:ba:77:
         df:12:e1:ec:21:51:d2:56:bc:b7:bd:be:fc:4f:00:d9:8b:3c:
         4a:5a:1f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:35:45 2025 by rpki-client