Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb/f7c1cca8-5d59-3fc8-a60d-aabdc5ccc4e2.roa
File:                     f7c1cca8-5d59-3fc8-a60d-aabdc5ccc4e2.roa (raw, json)
Hash identifier:          XF9cy2ubn0wDWAbqdgwYoJFDRIMeJ29pW22cTPMbi/o=
Subject key identifier:   9E:70:01:24:94:BB:B7:42:1E:4E:4D:E0:A1:75:8C:CD:19:08:43:C8
Certificate issuer:       /CN=2c03f09b-6404-4b04-b989-df1493d00cbb
Certificate serial:       010D0C9F4328584A295564B32BB513AEFC35A748
Authority key identifier: 34:D4:E9:AF:27:E0:F3:8B:54:3A:AE:54:73:53:93:30:8E:EE:6B:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb/f7c1cca8-5d59-3fc8-a60d-aabdc5ccc4e2.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     16509
IP address blocks:        192.230.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb/2c03f09b-6404-4b04-b989-df1493d00cbb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb/2c03f09b-6404-4b04-b989-df1493d00cbb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:64:b3:2b:b5:13:ae:fc:35:a7:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c03f09b-6404-4b04-b989-df1493d00cbb
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=ea6ab4ee-e1ad-4fd3-b98d-ae61bdd949e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a3:b2:f3:df:9b:0e:a1:0a:61:c5:8c:43:3f:
                    d2:64:5f:ce:8c:26:d3:98:1a:25:bc:b0:9b:bf:04:
                    02:17:d0:6a:e7:ef:f7:55:b7:f8:05:be:2a:e7:16:
                    00:44:72:59:b2:c5:36:52:2b:f0:58:16:50:aa:ae:
                    e9:70:ef:65:d1:f6:f5:fc:09:b6:9f:3d:b4:a4:d0:
                    9b:40:18:18:55:37:a7:f9:d4:a0:d1:d0:a3:c2:b8:
                    bf:d1:fc:5e:63:96:93:34:39:39:ce:57:57:d0:21:
                    23:81:b6:f5:c1:bc:7a:c4:38:66:1f:68:5a:86:5a:
                    e4:72:4c:d8:9d:d3:c8:c9:50:bd:85:1c:44:4a:cf:
                    1c:74:2d:66:9e:b6:9d:90:a0:ab:f9:bf:59:93:73:
                    ea:1b:7a:6d:eb:11:c5:3b:da:a9:ee:50:e3:49:ec:
                    48:2c:7d:35:3b:43:cf:2d:ef:c5:a0:e4:eb:8e:f2:
                    a9:21:38:2b:22:fc:e9:70:37:9c:7b:5b:49:5f:02:
                    18:d1:e4:d9:60:d3:5f:6e:05:95:bb:19:ec:e6:c1:
                    6e:ac:05:dc:9c:f9:19:d3:de:03:d2:5a:85:59:85:
                    15:ad:66:4f:e6:f5:87:2d:45:26:53:f5:09:aa:a8:
                    63:31:40:d1:c2:f0:df:af:9f:76:8e:75:ec:12:d8:
                    46:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:70:01:24:94:BB:B7:42:1E:4E:4D:E0:A1:75:8C:CD:19:08:43:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb/f7c1cca8-5d59-3fc8-a60d-aabdc5ccc4e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb/2c03f09b-6404-4b04-b989-df1493d00cbb.crl

            X509v3 Authority Key Identifier:
                keyid:34:D4:E9:AF:27:E0:F3:8B:54:3A:AE:54:73:53:93:30:8E:EE:6B:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.230.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:e3:c3:b5:aa:ad:46:79:c5:b4:82:6e:b8:1a:79:06:2d:a0:
         ca:c5:0e:b2:cd:c9:b3:ac:22:60:f7:dd:f4:35:65:8a:37:2f:
         c6:9d:d6:06:d0:d5:d9:0b:c9:11:bf:5d:b9:ad:de:66:0f:a1:
         da:63:d3:af:89:78:a3:cf:ba:30:12:4e:7a:ba:c7:06:2a:99:
         fb:ef:53:fa:72:bb:9f:3a:6a:4b:2b:eb:58:37:36:f9:89:48:
         1a:41:4c:81:d5:07:8a:42:41:85:7d:59:da:03:e3:eb:05:0d:
         fb:02:ca:e5:f7:8f:1c:be:36:1f:60:05:7c:37:b8:fe:d0:d6:
         1e:17:9e:c9:de:4c:f0:de:a4:e0:08:cc:1b:f4:ab:b1:e4:ba:
         0b:75:52:af:91:02:86:b0:74:a0:5a:5c:a5:30:21:0b:e8:85:
         6b:40:13:4f:25:6c:b8:c4:ad:c0:fe:c9:bc:af:ca:13:3e:68:
         b2:f6:36:44:17:41:b5:fc:3d:b2:d4:78:c2:64:f9:7c:4d:77:
         25:82:af:68:63:83:cd:7d:8e:47:41:f5:8f:75:ca:d0:a1:82:
         98:e1:33:c4:dd:fa:2f:88:a4:86:01:10:c9:4c:bd:73:c0:32:
         ef:9c:8b:bb:3d:65:49:4a:b5:9f:4e:1c:47:e9:f2:ec:d8:ff:
         4d:d4:f8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:19:12 2025 by rpki-client