Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/09591a19-c6e3-3973-9499-51ef6efc847d.roa
File:                     09591a19-c6e3-3973-9499-51ef6efc847d.roa (raw, json)
Hash identifier:          xzbblkLPlU7ex0Mkr2nXZQAKL2FYIp0jIiOdQAA8+xg=
Subject key identifier:   5F:D0:A9:6A:75:06:DD:3F:58:AC:5E:95:6D:B7:03:5A:35:CE:FA:C1
Certificate issuer:       /CN=e89b44b0-a151-49f2-b4a6-d917e3c95e83
Certificate serial:       010D0C9F4328584AB650E9F88B7DF4127AB4EC40
Authority key identifier: 65:DE:38:46:E6:89:94:A2:11:8F:52:2F:F6:E4:DD:24:48:A6:04:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/09591a19-c6e3-3973-9499-51ef6efc847d.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     0
IP address blocks:        206.41.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/e89b44b0-a151-49f2-b4a6-d917e3c95e83.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/e89b44b0-a151-49f2-b4a6-d917e3c95e83.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:e9:f8:8b:7d:f4:12:7a:b4:ec:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e89b44b0-a151-49f2-b4a6-d917e3c95e83
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=e1129e05-7baf-4148-b893-10b143f4e549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ae:00:b7:aa:e4:56:1a:89:a1:e1:86:c3:80:
                    a2:9a:09:91:99:ab:5c:6a:a3:38:0e:fc:e4:1f:79:
                    d1:31:e8:c7:3a:4b:e6:32:a6:e0:83:6c:f2:bb:08:
                    0e:78:3e:5a:6e:d3:f3:01:66:6f:e8:25:0c:03:da:
                    af:2a:18:eb:60:6d:6c:e6:bc:4e:36:19:57:13:dc:
                    c6:58:61:c2:4f:a8:e6:2a:31:24:ac:76:44:6d:47:
                    fc:01:3f:c6:3b:91:cf:51:22:f8:a6:47:e3:91:78:
                    30:fa:91:b2:0a:85:82:ca:8f:92:e6:7a:1b:0d:8c:
                    c5:9a:ec:b6:9e:e1:b4:10:ba:49:de:00:47:22:2f:
                    04:f0:17:87:cb:17:f6:83:d9:35:8d:88:6e:94:b8:
                    e0:36:98:ad:49:8b:4c:76:69:06:3b:8d:ab:a0:25:
                    23:a6:38:be:04:40:3b:13:d6:69:16:7d:61:86:b8:
                    17:f4:97:87:bd:d3:df:17:85:fd:1a:07:9b:77:ca:
                    e6:db:2a:47:30:09:33:0f:8f:2a:36:38:4e:7b:c9:
                    2c:ea:c5:84:ad:ec:03:c8:74:ae:59:2b:c6:55:28:
                    d8:21:d9:20:d8:94:26:e1:64:26:c6:31:e7:6e:41:
                    b5:51:cd:6d:c1:88:cf:14:0d:e4:1f:47:fb:49:d1:
                    9d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:D0:A9:6A:75:06:DD:3F:58:AC:5E:95:6D:B7:03:5A:35:CE:FA:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/09591a19-c6e3-3973-9499-51ef6efc847d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/e89b44b0-a151-49f2-b4a6-d917e3c95e83.crl

            X509v3 Authority Key Identifier:
                keyid:65:DE:38:46:E6:89:94:A2:11:8F:52:2F:F6:E4:DD:24:48:A6:04:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.41.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:26:f0:c6:5f:db:3f:46:e6:92:44:fe:a7:07:1e:a3:ee:ad:
         b6:b9:a2:e4:69:6f:22:52:fe:eb:96:af:8e:6e:fa:86:99:11:
         7c:ee:65:5f:de:a4:af:be:c2:7c:f1:8f:0a:57:66:74:62:0c:
         d2:11:1c:9a:35:c0:59:0b:c7:a8:ad:26:87:5a:f8:09:36:47:
         89:f1:dc:76:65:6b:5f:c1:0e:4c:5c:13:5d:c7:ef:bd:2e:b8:
         4b:35:c5:cc:a7:f5:5f:18:a9:77:84:c7:4a:2c:7b:91:f4:11:
         8a:6e:3d:aa:fb:5b:de:09:ee:82:1e:17:ef:b1:34:fb:a4:ad:
         54:a3:26:f6:47:bf:77:89:d8:4e:c5:35:34:c9:90:b6:2a:4e:
         41:22:f8:b3:a2:e2:37:5f:0d:26:39:52:03:f8:8c:d7:07:a8:
         a0:97:00:48:27:e2:3a:4b:ef:26:9c:1d:45:87:88:e1:25:e1:
         79:01:01:07:3e:c2:23:0c:c0:5f:32:50:16:5e:50:8e:4c:b0:
         98:67:b4:35:9f:49:be:b8:c6:e3:e2:82:db:4b:0e:b7:e0:63:
         e5:36:f2:74:14:92:6c:3c:42:3e:60:c7:45:a2:9d:f8:2e:c3:
         59:c5:ca:cf:ac:8e:29:4d:b4:34:ba:ed:47:d2:57:7e:1a:4d:
         25:83:26:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:04:54 2025 by rpki-client