Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/40385235-f792-3e3f-8a68-b1affa65f084.roa
File:                     40385235-f792-3e3f-8a68-b1affa65f084.roa (raw, json)
Hash identifier:          qAEkNxYeIWN1ICma5e/zTiqrpnv5lRlb2jm78Cu0SYI=
Subject key identifier:   62:96:DC:BB:3D:8B:FE:3A:D5:C2:D8:3B:B1:5E:3B:B2:E7:8C:99:0A
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584A9900C0E7998945547F3B8C00
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/40385235-f792-3e3f-8a68-b1affa65f084.roa
Signing time:             Tue 22 Jul 2025 01:00:50 +0000
ROA not before:           Tue 22 Jul 2025 01:00:50 +0000
ROA not after:            Mon 20 Oct 2025 01:00:50 +0000
asID:                     397422
IP address blocks:        209.237.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:99:00:c0:e7:99:89:45:54:7f:3b:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Jul 22 01:00:50 2025 GMT
            Not After : Oct 20 01:00:50 2025 GMT
        Subject: CN=bdfe3263-585a-4985-b2ce-0f20c382f45f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e7:84:b6:d2:ac:61:6e:68:7a:0e:80:79:b7:
                    60:56:03:ca:61:53:a9:2a:42:30:c3:fe:6d:de:ff:
                    2f:2b:ef:62:57:ce:94:bf:91:9c:1d:2f:32:db:38:
                    d9:4a:4c:9f:28:fe:b9:4f:a7:41:b7:4b:8f:b1:47:
                    67:bc:20:d2:16:c4:76:4d:ce:37:81:1b:a3:6b:d7:
                    bf:84:2f:c9:80:32:d7:47:b2:3c:03:3f:97:eb:a7:
                    ba:ad:c5:25:89:96:b4:6d:27:a8:2d:4d:52:3d:35:
                    bd:b5:1d:83:ba:b2:47:2b:89:be:f8:11:d2:34:e8:
                    d4:48:7c:71:41:fa:eb:98:1e:83:8c:28:86:cb:c2:
                    52:69:1a:67:a4:61:42:cc:eb:4d:19:3b:62:38:f8:
                    08:f2:cd:cb:36:5b:db:d3:45:c2:77:6e:bb:60:2d:
                    08:ef:6d:d4:61:06:ab:36:35:47:d3:e6:dd:c0:9f:
                    87:b7:86:b8:44:50:61:b0:38:41:ae:95:a3:a1:bb:
                    00:18:2c:58:17:05:4e:7d:a5:8f:e1:62:35:9b:c3:
                    5a:d9:9a:6a:fa:15:a5:ae:69:9a:77:3e:00:18:f1:
                    b0:a9:a1:ed:a6:35:1d:46:0b:dc:4c:17:37:c8:97:
                    da:65:c9:3b:9c:e4:cf:1d:01:6e:1e:85:8f:09:6e:
                    9a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:96:DC:BB:3D:8B:FE:3A:D5:C2:D8:3B:B1:5E:3B:B2:E7:8C:99:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/40385235-f792-3e3f-8a68-b1affa65f084.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:2f:bf:44:fd:09:e5:76:5a:59:9b:f3:e6:e2:2f:20:c6:9f:
         9d:3a:5d:e8:05:82:31:ca:6a:87:ba:13:b2:66:b0:b8:8e:eb:
         9c:71:89:78:74:d8:99:d4:65:5e:32:18:81:54:79:6c:50:23:
         7f:db:42:37:f0:63:72:63:e4:7c:ce:d9:f2:d0:05:00:9a:0d:
         9f:e0:5c:fa:63:7b:44:86:1c:72:5f:84:fa:11:9a:5b:6e:0f:
         29:b2:cd:6d:a9:d4:35:40:39:71:3e:20:a5:7d:6a:b6:f2:61:
         6d:c3:3f:e1:a6:20:60:d3:c1:37:93:e3:54:a7:67:d7:ca:e0:
         16:23:64:73:d6:95:b8:32:90:3b:93:7f:8a:00:08:58:51:25:
         ca:63:79:45:fd:5e:e8:1d:b5:35:c5:80:af:3c:1c:bd:ac:ce:
         52:3f:0b:05:b8:f8:84:dd:a5:dc:5c:19:34:2f:30:a2:e0:b9:
         65:85:21:f6:6e:bf:03:25:62:0c:ec:9e:ca:cc:dc:f0:20:45:
         ae:40:70:5e:07:82:1a:34:68:fa:fe:91:b4:0b:30:7b:3e:fd:
         6d:8f:47:28:2c:cd:b3:d1:60:2c:fc:98:21:0b:7e:d3:a5:8e:
         a2:51:51:cb:91:64:73:14:5f:6b:00:7e:b9:55:74:cd:99:64:
         f3:96:f4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:20:57 2025 by rpki-client