Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/cb4b4823-4600-35bb-b18c-2db9d5fed6b7.roa
File:                     cb4b4823-4600-35bb-b18c-2db9d5fed6b7.roa (raw, json)
Hash identifier:          jaZlno/pI7o2IVXjPAkfZZybvRWPrr/qdvPzgamuNkM=
Subject key identifier:   C8:DD:9D:EB:7B:85:C4:4B:72:6D:97:7C:7D:4F:D9:1E:A9:0B:B4:93
Certificate issuer:       /CN=61532adb-ed7d-43ba-a66f-2a333fb9cf62
Certificate serial:       010D0C9F4328584AC257F70485931154C8C0F700
Authority key identifier: C9:65:22:CD:0A:BC:3A:D6:00:B2:BD:17:FD:42:C2:66:C6:45:5F:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/cb4b4823-4600-35bb-b18c-2db9d5fed6b7.roa
Signing time:             Tue 05 Aug 2025 20:24:49 +0000
ROA not before:           Tue 05 Aug 2025 20:24:49 +0000
ROA not after:            Mon 03 Nov 2025 21:24:49 +0000
asID:                     23243
IP address blocks:        209.124.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:57:f7:04:85:93:11:54:c8:c0:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61532adb-ed7d-43ba-a66f-2a333fb9cf62
        Validity
            Not Before: Aug  5 20:24:49 2025 GMT
            Not After : Nov  3 21:24:49 2025 GMT
        Subject: CN=4f5b3f8c-7507-4424-86be-85752ca4f8d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:11:05:53:9a:59:31:59:f5:cb:42:c9:61:32:
                    d9:cd:1d:4b:30:bd:f3:04:36:6c:a7:8f:ba:0a:06:
                    aa:e1:3a:d1:cc:4a:48:16:ac:f6:d2:05:51:08:08:
                    63:9b:72:ef:d7:e0:aa:52:aa:98:19:f7:56:3c:35:
                    e6:b5:64:e1:a4:a4:ff:8b:ad:b6:fa:c3:0e:8d:b8:
                    7f:b4:4c:05:2f:f0:32:55:de:00:a6:75:08:89:a7:
                    16:ef:d6:d0:ee:0d:f0:f0:82:8e:1d:d1:4c:24:64:
                    57:ef:b4:53:35:3c:98:58:63:6a:ed:1d:d6:cc:24:
                    47:ab:d8:32:08:82:31:f4:96:c5:71:af:3f:81:2f:
                    2d:a1:20:e2:3d:f4:17:2c:7e:72:0d:51:7c:5c:1f:
                    1d:1a:58:84:bd:3f:09:72:d5:f3:54:57:ed:92:37:
                    8a:49:28:41:da:1c:b0:dd:76:65:e4:80:bb:f7:7b:
                    bb:24:b0:ed:f6:b1:35:ff:f2:77:03:30:b6:87:46:
                    85:3d:c7:da:94:af:1f:a8:5d:30:4e:dc:58:31:c8:
                    56:15:0a:cf:a6:14:70:f0:59:91:cf:0e:7b:62:38:
                    74:d9:16:15:01:fd:18:ef:ea:88:d5:46:ed:df:0f:
                    a4:c8:65:ac:ec:17:ef:7f:15:86:cc:1a:d8:07:01:
                    ea:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:DD:9D:EB:7B:85:C4:4B:72:6D:97:7C:7D:4F:D9:1E:A9:0B:B4:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/cb4b4823-4600-35bb-b18c-2db9d5fed6b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.crl

            X509v3 Authority Key Identifier:
                keyid:C9:65:22:CD:0A:BC:3A:D6:00:B2:BD:17:FD:42:C2:66:C6:45:5F:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.124.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:4f:f5:55:3f:2d:93:ad:b2:e9:73:20:80:f5:df:7b:3f:25:
         e0:64:f6:14:3c:6f:b3:20:40:cc:d9:d2:32:bb:dc:49:ea:d2:
         57:30:bf:6e:e3:d4:89:bd:dc:67:ac:96:25:8a:a1:c2:ac:90:
         5f:30:50:1c:43:4e:8f:f9:07:89:7d:39:cc:7a:7f:70:4f:3e:
         fc:e8:df:0e:a1:46:ed:96:38:33:17:3e:42:4e:e1:ae:b4:5e:
         5c:ac:98:fd:64:be:79:73:d9:5d:89:c3:28:fa:5c:f7:f3:79:
         08:0a:c5:b7:e4:ca:9c:98:6c:64:a8:a2:6b:3b:3b:4e:c7:4b:
         2d:4e:fc:f8:62:9e:e5:dc:bc:66:6f:1c:98:2c:a6:45:32:bc:
         11:5f:8b:5c:30:8c:48:fc:ff:c3:09:c3:2c:5a:42:8f:df:55:
         2a:96:29:52:28:6f:74:83:32:93:ca:1b:7e:26:59:6f:ca:a2:
         6d:43:a2:6b:98:9a:d7:c3:08:94:62:93:7e:bd:0f:93:1b:0b:
         3e:11:63:7b:eb:1b:15:b9:b7:46:87:bb:69:bd:5e:65:78:21:
         5e:12:92:8a:43:4d:bb:c8:d2:e5:cd:c4:36:19:48:9d:19:cd:
         a0:74:b8:7a:f6:82:b2:59:37:38:29:1f:38:e0:25:ec:01:fa:
         ec:15:04:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:22:25 2025 by rpki-client