Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/6cbbb644-eea9-3c07-b55b-21e0a8879697.roa
File:                     6cbbb644-eea9-3c07-b55b-21e0a8879697.roa (raw, json)
Hash identifier:          SxBeZhr+CjI3Oz/aE5ZNA4+FrLjlKBLnQ7EFNpRpVPo=
Subject key identifier:   CF:AE:98:02:2E:03:0A:7F:1F:55:9C:F1:84:01:83:48:A7:B1:B9:7A
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584ABA80C7C044BFA82552064080
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/6cbbb644-eea9-3c07-b55b-21e0a8879697.roa
Signing time:             Sun 03 Aug 2025 01:00:32 +0000
ROA not before:           Sun 03 Aug 2025 01:00:32 +0000
ROA not after:            Sat 01 Nov 2025 01:00:32 +0000
asID:                     0
IP address blocks:        209.233.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ba:80:c7:c0:44:bf:a8:25:52:06:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Aug  3 01:00:32 2025 GMT
            Not After : Nov  1 01:00:32 2025 GMT
        Subject: CN=e4e1eed9-689b-4ccc-aa15-eed68831b84c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0e:77:2f:29:96:82:85:bb:ab:1f:d7:a8:50:
                    94:73:05:45:ac:fc:1c:8a:d2:69:36:07:bd:00:db:
                    08:55:2b:44:2c:2c:c3:46:4d:ab:4e:bc:07:e2:94:
                    3e:b5:4f:f2:f1:be:cb:83:4b:6c:ba:d4:48:03:7d:
                    91:d4:15:75:58:07:73:e6:2f:6e:3c:d3:67:58:a2:
                    08:f3:f3:93:da:78:06:12:83:4d:81:9e:fa:07:4e:
                    7b:31:98:07:42:40:1c:11:b7:df:6f:3a:0b:60:3b:
                    52:aa:9f:ae:c5:73:3a:44:c8:0c:16:94:89:41:c1:
                    c8:46:45:3c:7b:57:f8:aa:6e:10:4d:80:67:7f:7d:
                    df:a5:94:4d:d3:fe:47:18:46:83:ae:a2:e3:08:5b:
                    3a:75:23:46:f5:89:a3:8e:1c:56:05:2b:d3:32:93:
                    c1:a8:74:e3:6c:3f:14:49:8f:40:37:5b:0f:15:b7:
                    c1:fd:8b:3c:2d:b0:b5:4d:4d:fa:e1:f6:e9:9d:ec:
                    d2:50:ae:64:0d:57:22:b4:bf:ed:5c:e6:31:ef:32:
                    bb:31:9f:c6:c0:0c:c0:1d:29:fd:20:e1:48:ff:b1:
                    a6:ba:26:bb:c5:7d:6e:52:56:ac:dd:71:30:37:ea:
                    ad:00:0b:10:15:a6:6b:f7:89:46:3a:f6:59:6e:f3:
                    88:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:AE:98:02:2E:03:0A:7F:1F:55:9C:F1:84:01:83:48:A7:B1:B9:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/6cbbb644-eea9-3c07-b55b-21e0a8879697.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.233.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:b3:31:b4:9f:71:9e:54:4f:96:22:95:fa:5e:a3:b5:41:35:
         24:d5:fb:b3:63:b3:09:d2:a8:ab:1f:73:56:7d:4d:b8:5a:7b:
         1c:6e:c2:da:00:65:8d:fd:7e:24:dc:fb:94:ca:c0:52:0b:69:
         89:13:7f:5a:2e:f7:52:27:04:b4:14:4c:86:30:47:9e:b5:82:
         84:7f:92:96:bd:10:ed:24:e8:f4:98:4a:ee:0a:31:fc:8e:18:
         ca:ca:79:e6:ce:d2:86:c1:70:42:22:db:1b:0a:75:df:7e:56:
         cf:06:17:42:72:65:9b:d6:0c:01:c5:30:2f:70:60:24:de:c5:
         3f:bf:26:cb:14:b0:9c:1f:e6:02:22:d3:f2:45:d9:28:df:fb:
         4d:36:7f:68:dc:f8:e8:ff:c0:86:5b:bf:e3:9e:e1:b5:a2:a3:
         0e:30:26:09:28:fb:e7:30:aa:1f:c4:1c:14:f9:bb:ec:2f:22:
         b3:a3:19:13:1c:a4:57:6c:14:c3:e9:10:56:fc:68:46:41:67:
         06:51:02:7f:ad:3c:61:26:9b:90:00:45:1f:95:e4:77:75:6a:
         b7:1e:45:b3:02:84:d1:5e:08:e3:a4:9c:5a:a1:19:ad:da:5a:
         d6:08:87:12:1a:31:a2:24:20:c7:ed:2b:e5:32:cf:f2:bc:bd:
         bc:d8:07:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:09:31 2025 by rpki-client