Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/6ab76165-6246-3aa0-9803-d5ace20531fd.roa
File:                     6ab76165-6246-3aa0-9803-d5ace20531fd.roa (raw, json)
Hash identifier:          di9ieFTX06AEiYpW41T8LUevA+98tqdho7UfTeO/Ff0=
Subject key identifier:   60:CC:23:0B:40:DB:16:7A:9E:90:CE:BF:0D:74:0B:E6:DC:08:D5:84
Certificate issuer:       /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
Certificate serial:       010D0C9F4328584AB650D7C5397089BFA19B2D00
Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/6ab76165-6246-3aa0-9803-d5ace20531fd.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     23137
IP address blocks:        209.151.208.0/22 maxlen: 22
                          209.151.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:d7:c5:39:70:89:bf:a1:9b:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=b39ef1d9-d3d1-4da1-80b5-731dc7332c92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e8:77:61:1e:32:d4:a9:7f:3c:27:5b:5a:52:
                    9c:4f:c9:65:62:c1:ee:43:df:e4:f7:35:1b:53:9b:
                    b6:a4:24:05:5e:b9:3b:04:ae:a7:f7:fb:b6:b8:01:
                    02:f2:0a:18:ca:ad:bc:34:11:81:59:18:18:d6:bc:
                    2b:6b:87:df:83:e7:c7:fb:5d:80:52:13:3e:2a:26:
                    53:10:fb:cb:0c:8e:cf:81:86:0d:8e:d0:03:96:81:
                    1b:99:53:cb:b8:af:c2:b8:87:ca:86:3e:5d:89:14:
                    ac:61:fc:fc:dc:26:e4:ba:e7:a4:1e:48:7e:b2:8d:
                    81:c4:56:7d:98:32:07:07:c5:7f:60:22:b9:33:58:
                    dc:0a:03:40:36:fb:9a:4e:7d:6b:1a:bf:13:33:01:
                    13:e7:4b:2e:3d:fb:65:be:81:27:77:5b:4e:0d:b2:
                    db:e0:25:1f:d5:8f:19:9a:45:aa:a8:f4:51:ef:da:
                    e7:32:34:0d:5b:0b:f8:d9:08:41:c8:8c:a0:64:98:
                    0f:34:bb:9a:4f:14:f5:f8:73:06:20:5f:1a:19:03:
                    c1:c9:8d:70:c4:7a:72:e3:9a:66:7d:e5:4f:69:06:
                    45:07:27:1f:be:ac:71:7c:3d:ef:9e:db:3d:fe:5a:
                    7d:02:a7:f8:3d:dc:05:eb:55:12:c6:de:b5:01:33:
                    2a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:CC:23:0B:40:DB:16:7A:9E:90:CE:BF:0D:74:0B:E6:DC:08:D5:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/6ab76165-6246-3aa0-9803-d5ace20531fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.151.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:aa:63:87:f6:f1:18:bf:29:a6:e5:44:0c:e9:61:6d:1c:0b:
         bf:57:60:84:a5:c6:e0:04:d4:4e:d6:92:77:2b:15:87:ad:36:
         39:e9:dc:5d:e7:0f:8a:14:bf:4b:ff:da:98:76:91:68:a5:de:
         80:19:39:c4:42:22:b3:2d:8e:86:14:46:f7:1b:99:96:94:7c:
         80:eb:cd:bc:50:17:5f:3b:0b:76:57:39:7b:24:74:90:73:92:
         25:43:ae:dc:4f:67:10:1c:bc:6d:c5:02:c9:43:8a:42:b5:51:
         50:33:b2:bb:6a:bc:94:cd:34:a8:35:14:2f:6b:d4:d2:42:7d:
         3e:25:57:10:9d:fa:88:86:51:03:22:73:02:8a:41:33:23:de:
         8c:31:50:6e:a0:c3:13:3c:cc:04:cf:44:6a:a8:0b:18:e9:0d:
         49:36:2a:77:4d:c9:bf:a9:03:2b:3f:40:fc:9f:b9:b1:1a:18:
         14:39:33:10:0f:19:f2:b5:66:a5:33:41:d9:41:9e:7f:39:90:
         80:2b:b6:1c:d5:55:fd:71:58:b5:d2:b0:bb:2b:0c:81:d7:cb:
         2a:4c:f9:6b:d2:9f:1b:af:3f:a8:73:21:a2:15:99:a5:bd:f8:
         bc:a6:8f:32:26:eb:aa:d8:36:45:f9:cd:9d:d0:e2:3d:b4:85:
         1a:ac:e8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:44:39 2025 by rpki-client