Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/26254462-2ddc-4c43-8ad7-6fc9c843ddf3/c898ae40-4c6d-3666-9f10-c83397f991ad.roa
File:                     c898ae40-4c6d-3666-9f10-c83397f991ad.roa (raw, json)
Hash identifier:          gj64CpWR+CC0m05YvzcYWqQ1wtJkUS6owBhjHXeUsEw=
Subject key identifier:   70:35:54:D0:99:93:66:61:95:29:72:00:58:B3:01:21:6F:BB:BA:D8
Certificate issuer:       /CN=26254462-2ddc-4c43-8ad7-6fc9c843ddf3
Certificate serial:       010D0C9F4328584A7BB0B54071C5FA740E191A80
Authority key identifier: 46:21:E9:FF:9D:C3:9C:BF:3E:42:07:DB:FC:31:C2:FF:88:3B:63:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/26254462-2ddc-4c43-8ad7-6fc9c843ddf3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/26254462-2ddc-4c43-8ad7-6fc9c843ddf3/c898ae40-4c6d-3666-9f10-c83397f991ad.roa
Signing time:             Fri 11 Jul 2025 13:01:05 +0000
ROA not before:           Fri 11 Jul 2025 13:01:05 +0000
ROA not after:            Thu 09 Oct 2025 13:01:05 +0000
asID:                     136744
IP address blocks:        209.209.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/26254462-2ddc-4c43-8ad7-6fc9c843ddf3/26254462-2ddc-4c43-8ad7-6fc9c843ddf3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/26254462-2ddc-4c43-8ad7-6fc9c843ddf3/26254462-2ddc-4c43-8ad7-6fc9c843ddf3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/26254462-2ddc-4c43-8ad7-6fc9c843ddf3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b0:b5:40:71:c5:fa:74:0e:19:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26254462-2ddc-4c43-8ad7-6fc9c843ddf3
        Validity
            Not Before: Jul 11 13:01:05 2025 GMT
            Not After : Oct  9 13:01:05 2025 GMT
        Subject: CN=2350e70c-ff44-40b8-87a5-9c267b8220c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:03:ba:df:fc:52:61:f9:d8:91:3a:a2:30:a7:
                    df:f1:33:4f:48:d4:f6:8d:b2:cb:43:21:ea:84:1e:
                    e3:7e:42:4e:04:ac:3f:65:2f:58:38:80:71:95:e5:
                    32:f7:78:b0:c9:ca:bd:f0:4f:8e:10:ca:e9:3f:5c:
                    9d:07:bf:e6:d6:f1:7f:3f:45:f7:e5:0d:04:2c:04:
                    9f:3a:a0:0d:68:60:d0:51:68:c4:19:b7:66:56:92:
                    24:8d:74:e3:4c:19:01:11:ab:e0:74:b6:3e:61:20:
                    09:d9:7e:b4:30:e0:4b:29:af:f0:a6:f9:1f:0d:91:
                    85:17:ac:b7:e2:42:2c:80:fa:c1:19:e5:5e:46:a1:
                    27:96:ad:f7:c0:00:09:df:e9:a2:5a:b1:94:76:e9:
                    ec:1a:ee:3a:db:78:e4:e2:dc:96:70:22:8a:b1:0e:
                    0b:9f:b4:6f:86:28:d5:24:3a:b8:69:5e:14:fd:c6:
                    dd:d5:65:c4:7a:2f:8f:d4:cd:15:3b:3d:b8:63:d8:
                    e0:37:e6:2a:c0:57:34:fd:1e:46:94:6b:63:70:e7:
                    9b:7b:e8:fa:20:95:7b:cb:7e:28:ef:27:93:92:00:
                    e0:a0:86:70:2e:04:95:82:bc:ab:5a:fb:94:85:6a:
                    45:87:24:e4:60:1f:37:6e:b3:7f:e6:17:fe:35:ea:
                    2d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:35:54:D0:99:93:66:61:95:29:72:00:58:B3:01:21:6F:BB:BA:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/26254462-2ddc-4c43-8ad7-6fc9c843ddf3/c898ae40-4c6d-3666-9f10-c83397f991ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/26254462-2ddc-4c43-8ad7-6fc9c843ddf3/26254462-2ddc-4c43-8ad7-6fc9c843ddf3.crl

            X509v3 Authority Key Identifier:
                keyid:46:21:E9:FF:9D:C3:9C:BF:3E:42:07:DB:FC:31:C2:FF:88:3B:63:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/26254462-2ddc-4c43-8ad7-6fc9c843ddf3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.209.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:34:df:14:98:18:61:59:41:12:dd:e5:20:45:b5:63:6a:49:
         d2:83:cc:98:ba:d7:b3:3f:3e:62:c1:04:40:09:84:d4:78:6f:
         22:c7:b2:b5:7d:b1:1b:6f:fe:60:ba:55:80:e1:fc:82:7f:e6:
         06:3b:33:53:8c:b3:24:65:f5:8f:a8:d8:f8:06:f8:5c:d2:62:
         9d:65:0c:f3:28:67:b1:90:cc:41:11:8d:0d:0d:a2:37:84:46:
         63:1d:02:0e:a6:1f:7d:cf:63:76:82:ba:8d:86:0b:3d:28:de:
         c8:7c:e1:fc:ec:a0:77:38:0b:14:d9:81:00:14:cd:21:06:81:
         93:1a:a3:33:d9:e9:0b:54:89:a9:9f:80:77:7e:e1:f5:2c:5c:
         ad:26:b9:65:8b:f0:56:ea:4c:6e:88:ae:1a:8f:1a:bd:5e:af:
         8b:69:24:88:cc:7e:0c:00:46:45:2c:55:0e:75:0e:4e:0f:b8:
         86:af:4b:ed:6f:fd:95:c3:e2:ae:5f:f1:1f:3e:8a:eb:a2:9c:
         2e:cb:78:86:fd:27:d2:5f:f0:6e:c5:fc:ca:2c:25:2a:cf:11:
         b9:94:84:01:dc:9c:1a:14:be:d7:6b:a9:55:ec:b2:2f:eb:3a:
         c6:24:08:c8:c5:62:64:06:40:b0:ab:10:ce:a5:53:fd:42:d9:
         09:35:c6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:05:02 2025 by rpki-client