Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/86056cc0-c327-3d61-9b25-28ab0e71e8b9.roa
File:                     86056cc0-c327-3d61-9b25-28ab0e71e8b9.roa (raw, json)
Hash identifier:          oMWpNfzctvH+rOjuUCbnXM9roYeemsxIFfpb4FQzdlw=
Subject key identifier:   BF:71:C2:88:83:30:5A:DA:C1:EF:05:C8:9D:56:23:FB:B6:40:49:DB
Certificate issuer:       /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Certificate serial:       010D0C9F4328584A30502BA10A9844E780DAB300
Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/86056cc0-c327-3d61-9b25-28ab0e71e8b9.roa
Signing time:             Sat 14 Jun 2025 13:01:04 +0000
ROA not before:           Sat 14 Jun 2025 13:01:04 +0000
ROA not after:            Fri 12 Sep 2025 13:01:04 +0000
asID:                     19909
IP address blocks:        209.151.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:30:50:2b:a1:0a:98:44:e7:80:da:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
        Validity
            Not Before: Jun 14 13:01:04 2025 GMT
            Not After : Sep 12 13:01:04 2025 GMT
        Subject: CN=bab1041b-1396-4dac-bb86-aa00e660cacd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e0:83:4c:22:72:72:3d:ef:1a:43:a3:90:fe:
                    87:bd:e2:2b:50:4b:b4:b0:35:a0:a0:0b:83:10:3d:
                    68:42:42:6c:a2:20:43:00:97:4e:a2:36:74:e2:7a:
                    fa:be:80:15:d5:75:b5:61:87:77:98:a6:ec:cc:74:
                    f1:a8:c8:0f:1d:35:83:88:e8:ad:59:20:2e:39:54:
                    72:6d:49:ab:40:62:c5:88:b8:b0:79:52:4e:62:b9:
                    75:63:2f:15:75:06:84:7e:3e:6a:53:11:ed:0e:a7:
                    7f:05:5a:5d:a5:58:cc:7d:33:48:b0:84:ac:7f:53:
                    4d:f5:40:c1:b7:81:f1:dc:4e:b4:f0:f2:f9:36:62:
                    ce:b2:85:8b:db:9f:2a:85:47:d1:ff:35:53:46:ff:
                    e3:2a:9c:c9:28:2a:18:c3:06:c1:62:ed:fe:40:23:
                    56:c0:06:91:33:bd:e5:e3:69:4f:47:98:ac:35:1f:
                    31:f3:6e:e4:d5:25:d8:0e:a5:79:fc:06:e8:c4:1e:
                    bb:ee:19:b4:f8:f3:67:1f:37:8a:00:83:e4:a4:5f:
                    83:3d:bd:d1:99:24:5d:a6:42:f2:ee:d3:46:75:b2:
                    3c:46:69:fe:cf:39:53:31:84:ab:c7:dd:8c:94:1f:
                    13:a8:52:d8:03:22:e0:1f:62:56:dc:ca:02:92:0d:
                    d4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:71:C2:88:83:30:5A:DA:C1:EF:05:C8:9D:56:23:FB:B6:40:49:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/86056cc0-c327-3d61-9b25-28ab0e71e8b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl

            X509v3 Authority Key Identifier:
                keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.151.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:c0:fc:f6:a2:c7:bc:2d:23:c8:09:33:9d:28:92:0a:0d:cf:
         3d:db:69:ee:f9:04:7f:49:50:cd:c1:24:3d:8c:a4:59:d6:47:
         2d:ce:8b:58:25:2e:c2:a5:aa:0c:95:40:df:94:95:ec:89:e2:
         21:22:e2:65:74:cc:c4:4f:b1:fd:01:3b:9c:5c:b0:85:30:ef:
         27:49:dd:24:7b:80:fe:68:fc:cd:1f:11:b8:23:99:b2:7e:10:
         e4:8e:a0:ed:8a:90:b9:13:53:a0:9e:59:21:10:e4:ce:24:60:
         06:62:e8:d2:23:be:51:db:e0:1c:87:83:68:c3:77:18:92:8b:
         46:08:49:84:a4:0b:b6:1f:50:74:df:31:f5:ac:c1:7a:ec:e0:
         fb:26:62:65:50:94:2c:55:3e:4c:93:e1:18:44:c8:f1:cb:09:
         57:5f:1b:4a:4e:6a:1d:67:9e:94:50:1b:b6:8f:07:4b:46:7d:
         df:65:31:76:0c:1a:1d:b3:d9:6e:9a:f5:f2:6a:2d:e7:b7:de:
         38:a3:f3:7c:f3:cd:44:bc:f1:17:56:bd:09:cc:6a:f6:0a:b2:
         bc:e9:0d:5b:8a:a6:b2:93:82:68:8e:5c:87:e5:0f:9f:56:dd:
         cc:4f:0e:43:d9:a8:d9:dc:9a:d8:62:01:b7:0e:0d:94:a5:72:
         bd:3e:f6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:23:47 2025 by rpki-client