Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/34a7eeea-8030-32eb-bd36-cafa44a1e44b.roa
File:                     34a7eeea-8030-32eb-bd36-cafa44a1e44b.roa (raw, json)
Hash identifier:          W/xBF9HjqF/o5UOUsFJl6AI0cYTabMwJd2/erf8kdEI=
Subject key identifier:   04:E3:4C:39:0A:37:1E:59:28:77:94:72:72:58:7B:EE:82:37:ED:DD
Certificate issuer:       /CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
Certificate serial:       010D0C9F4328584BA5023D3C182D3A6E0F501FC0
Authority key identifier: DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/34a7eeea-8030-32eb-bd36-cafa44a1e44b.roa
Signing time:             Sun 26 Oct 2025 01:00:31 +0000
ROA not before:           Sun 26 Oct 2025 01:00:31 +0000
ROA not after:            Sat 24 Jan 2026 02:00:31 +0000
asID:                     3257
IP address blocks:        204.9.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a5:02:3d:3c:18:2d:3a:6e:0f:50:1f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
        Validity
            Not Before: Oct 26 01:00:31 2025 GMT
            Not After : Jan 24 02:00:31 2026 GMT
        Subject: CN=75b09eb8-9d5b-4330-8c97-9f4964f2ce60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e7:f9:5c:ad:de:ec:49:dc:13:38:1e:98:38:
                    15:34:27:e9:9c:44:09:01:8c:b7:27:76:31:b0:28:
                    a0:8f:38:94:5e:04:20:2c:b2:c8:a6:99:e6:27:b3:
                    46:2f:d2:73:0b:6b:8b:a5:aa:2a:c8:9f:51:8e:64:
                    94:15:6a:87:db:e9:fc:4c:45:1c:36:55:9d:02:78:
                    8b:b2:ba:5c:82:c5:aa:5f:1f:c2:1b:1b:e5:95:98:
                    82:2a:73:ee:f7:92:19:1e:dc:1a:63:96:af:c5:42:
                    04:e3:09:4e:07:ce:0a:1a:3a:1c:eb:c2:0c:d6:af:
                    99:d0:7d:13:2f:c2:57:41:11:52:65:dd:ce:27:91:
                    7b:d8:7b:f1:19:26:c6:5b:95:3f:23:56:db:a2:f9:
                    c1:44:f0:6d:e4:bd:5d:11:44:d5:b0:74:72:52:77:
                    f0:a3:3c:ac:6d:7e:14:32:d5:24:5d:0a:44:20:29:
                    85:44:1c:1a:ed:25:48:e2:10:7c:92:25:31:80:65:
                    98:53:16:f2:49:38:08:80:f2:47:61:cd:c9:1e:13:
                    e9:e3:76:93:40:86:e8:c6:cb:46:75:55:8e:38:54:
                    df:5e:55:f6:9a:92:6b:7b:5e:13:d7:35:dc:5c:ef:
                    94:0a:b6:0a:61:e7:44:a7:7e:40:22:da:61:f6:f6:
                    b6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E3:4C:39:0A:37:1E:59:28:77:94:72:72:58:7B:EE:82:37:ED:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/34a7eeea-8030-32eb-bd36-cafa44a1e44b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl

            X509v3 Authority Key Identifier:
                keyid:DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.9.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:78:65:53:dc:65:74:fe:60:06:e6:d1:6f:aa:9d:d7:f5:31:
         6d:93:c7:fd:45:0d:bb:d7:88:03:e7:16:d3:1f:a1:93:2a:ff:
         c8:5b:1b:f0:c7:41:ec:bb:71:31:ee:10:2e:45:9d:c5:a2:f9:
         f6:20:62:a7:85:39:2b:7f:ee:23:ec:e1:91:b0:40:79:51:ae:
         84:82:9d:72:94:e2:f6:16:82:30:8c:95:c8:04:2b:3f:eb:a1:
         cd:c2:1d:18:79:b8:b3:70:c0:fb:bd:e3:a2:74:2a:26:dd:27:
         72:7d:92:ad:11:ef:b3:cf:4c:2f:f5:e9:4b:b9:ef:98:2f:a6:
         32:9f:75:4d:d1:b6:11:be:44:0f:5b:e3:95:58:8a:e4:7c:c8:
         0b:f8:60:5f:55:17:81:c5:4c:65:38:f5:50:58:85:36:aa:97:
         93:4b:5e:5d:08:55:9e:11:8a:fd:35:71:3f:5f:c2:c0:63:18:
         09:6b:51:a1:6f:65:c9:53:20:e6:15:04:0b:0d:b4:f9:46:04:
         b9:67:98:00:97:bf:81:5e:41:15:2a:d5:88:09:c8:a8:11:61:
         95:b2:31:96:f0:87:8e:5a:5c:a9:76:c8:b9:b9:26:39:85:ea:
         71:cf:60:62:76:c2:95:15:cb:7d:48:4e:d3:78:69:0d:87:57:
         ad:42:fb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:27:38 2025 by rpki-client