Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/e0d79fd4-9174-37dd-ae23-196db87f1499.roa
File:                     e0d79fd4-9174-37dd-ae23-196db87f1499.roa (raw, json)
Hash identifier:          vqWeskYjiLLAL5MHghN3KyUF4jxLHw6CRsiGdX8kVm0=
Subject key identifier:   B6:F4:27:A0:5E:DE:2F:5F:60:02:B4:42:61:AB:9A:83:83:18:D2:82
Certificate issuer:       /CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
Certificate serial:       010D0C9F4328584A9E961844B6DB5FFE2E186474
Authority key identifier: 09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/e0d79fd4-9174-37dd-ae23-196db87f1499.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     397041
IP address blocks:        209.59.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:18:44:b6:db:5f:fe:2e:18:64:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=2a8daf65-1f11-441d-86a0-b2cbf68d3610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:40:06:26:7b:b2:ea:76:61:02:39:38:8b:f4:
                    fc:87:52:0f:5b:27:56:5c:de:e7:07:11:42:43:b7:
                    6f:92:fb:b8:19:36:1c:c7:71:94:f2:87:ba:35:4c:
                    d8:bc:df:7b:2f:6c:dd:5c:f7:9b:a1:11:79:45:eb:
                    16:ac:31:ea:be:65:85:09:fc:ae:a7:77:f2:8a:23:
                    26:61:7f:21:f8:b4:94:91:98:a2:ab:11:77:ce:fe:
                    b2:6a:be:b2:1b:f6:de:b8:3f:c1:4b:86:bc:83:58:
                    a8:48:60:52:c0:6d:0d:e8:c2:8b:92:06:12:af:c8:
                    be:0f:2c:05:6d:3f:b0:ef:eb:85:56:57:3e:9e:3a:
                    40:d2:f3:35:4d:0e:98:f3:ae:80:46:d5:aa:a5:37:
                    5c:55:58:ce:d9:4c:f6:49:d4:53:ca:e8:f2:13:6d:
                    9c:9e:1b:0b:c5:39:64:b5:7a:2b:bc:97:05:2d:27:
                    c5:aa:f4:9f:cb:bd:69:e8:bf:e6:91:bf:b7:a3:3f:
                    cf:95:0c:f3:e1:e8:c5:da:eb:ae:54:b4:bc:d4:63:
                    db:ac:a2:ce:fe:8e:af:89:46:46:30:0d:15:68:8e:
                    2e:1d:01:d8:e0:69:b7:5e:7f:49:de:96:69:af:de:
                    17:32:2e:61:e5:65:57:ed:20:e5:ab:a3:0d:89:0e:
                    61:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F4:27:A0:5E:DE:2F:5F:60:02:B4:42:61:AB:9A:83:83:18:D2:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/e0d79fd4-9174-37dd-ae23-196db87f1499.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl

            X509v3 Authority Key Identifier:
                keyid:09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.59.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:66:87:1f:f0:bd:42:30:ee:9a:f6:17:f0:69:84:d1:9e:04:
         51:37:df:48:3c:59:a3:42:76:ee:51:23:ef:1f:59:37:ff:a9:
         97:84:a8:60:8d:0a:9a:21:14:fd:de:06:63:d9:f4:29:1d:16:
         8a:17:bd:6c:0c:e1:4f:f3:81:94:a8:78:46:84:7f:50:dd:24:
         f4:82:09:a9:3f:21:c0:a3:6c:79:21:2e:21:56:13:a9:23:fd:
         98:c4:b4:e5:1e:f0:46:6e:25:e8:21:95:88:cc:4f:49:5e:cc:
         9b:52:1e:26:c3:9a:43:45:63:93:fd:e3:ca:9b:42:88:7f:89:
         01:1e:4d:48:7b:ee:90:c0:5e:45:20:37:84:2b:72:48:f0:2d:
         8d:98:de:9e:6f:66:6e:0c:89:d1:a2:6a:58:6e:5b:b2:4c:4b:
         a8:7d:2a:ba:c9:b9:0d:b3:ee:45:47:34:ec:1e:ac:74:69:bb:
         2f:e1:80:b9:98:51:c5:51:c5:14:42:7d:95:05:ee:e4:ab:03:
         b7:e2:de:4f:59:b4:61:9e:62:77:c7:85:3e:3d:61:bb:fb:39:
         51:55:b1:27:53:48:f1:82:50:39:a1:af:fc:71:59:d0:58:31:
         7d:58:c2:7b:91:43:6f:ad:fc:56:2e:dc:bd:a9:94:88:54:41:
         b3:77:9c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:05:21 2025 by rpki-client