Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b/7586b998-4829-325b-9633-0343317f6ee4.roa
File:                     7586b998-4829-325b-9633-0343317f6ee4.roa (raw, json)
Hash identifier:          4CDnaGr7MCtRWOtr/0vQ9hvLkrQ4xJhMQxGsLrgRd1o=
Subject key identifier:   6A:39:C6:E6:2C:F5:1A:AB:ED:D1:A4:6C:87:40:0E:9C:C7:19:52:77
Certificate issuer:       /CN=e85794f9-a8df-4d59-8974-f686e8987f1b
Certificate serial:       010D0C9F4328584AADF121C1832C216A239452C0
Authority key identifier: 42:2D:F4:AF:AF:93:BC:42:C6:1C:43:7B:9C:16:F8:E7:E3:C9:EB:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b/7586b998-4829-325b-9633-0343317f6ee4.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     376
IP address blocks:        205.237.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b/e85794f9-a8df-4d59-8974-f686e8987f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b/e85794f9-a8df-4d59-8974-f686e8987f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:21:c1:83:2c:21:6a:23:94:52:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e85794f9-a8df-4d59-8974-f686e8987f1b
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=74577fb8-c444-4a83-b0d9-0254edf02207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f5:2c:2a:40:c5:dd:78:05:b1:48:dd:b2:59:
                    77:93:0d:1a:e0:07:08:2a:44:80:e9:2b:0e:b7:69:
                    5d:db:46:df:48:44:4f:77:2b:89:55:14:80:b0:f8:
                    6a:27:c7:f2:f9:c7:26:16:2e:27:b6:d4:7c:ed:44:
                    93:5d:8b:02:b5:84:bc:5b:fb:db:e2:ce:93:e8:43:
                    74:09:50:3d:4e:4b:0a:cf:b0:ff:bd:8d:66:c7:cc:
                    6b:8b:d0:e0:2a:8d:d1:3c:a0:40:04:28:91:a8:f4:
                    f2:9e:87:8c:b4:35:90:a3:c7:94:c8:c4:55:ee:f3:
                    22:e9:b8:64:1f:aa:5d:9a:43:ef:25:75:5b:0c:5d:
                    fb:45:3d:bf:15:1c:21:78:63:7f:f1:af:57:88:a2:
                    05:70:91:14:8c:b7:d7:2c:29:b2:0c:35:1e:db:74:
                    51:2b:9d:38:16:ed:f4:b2:7a:ff:72:8d:30:41:30:
                    88:84:f4:cd:dc:01:e7:ff:11:64:14:22:fd:79:c3:
                    89:0e:52:b6:34:e1:56:e7:c9:72:ab:6c:da:96:ca:
                    30:7d:2c:3d:c2:80:f7:60:10:59:42:b4:88:d9:1b:
                    32:21:6d:a7:31:4b:59:11:9a:0b:36:0f:44:be:f4:
                    e0:12:25:63:68:ec:f9:b6:34:cf:6c:7f:94:da:25:
                    98:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:39:C6:E6:2C:F5:1A:AB:ED:D1:A4:6C:87:40:0E:9C:C7:19:52:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b/7586b998-4829-325b-9633-0343317f6ee4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b/e85794f9-a8df-4d59-8974-f686e8987f1b.crl

            X509v3 Authority Key Identifier:
                keyid:42:2D:F4:AF:AF:93:BC:42:C6:1C:43:7B:9C:16:F8:E7:E3:C9:EB:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.237.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:31:e6:19:c0:18:ca:89:1f:56:07:a5:57:72:35:61:80:45:
         dd:a7:5a:48:d3:2e:8c:3d:00:c7:8b:08:ca:42:8f:f8:6d:2e:
         3d:21:a3:58:26:64:26:9e:5b:cd:11:7d:c4:ad:4d:d2:82:ad:
         ab:99:19:95:92:26:69:b2:07:99:81:45:2b:8c:fc:7c:d7:d8:
         58:d1:0f:a1:a7:8d:0c:4a:37:ff:49:8e:e3:3e:d8:1a:24:d9:
         01:1e:e9:fe:56:3b:e7:9b:b8:ce:88:83:d6:8d:84:7f:62:92:
         37:da:8c:c3:70:46:8e:d3:03:b2:03:88:2a:11:81:62:30:44:
         3f:36:75:49:aa:4f:8e:98:e4:a4:3e:f4:f3:25:da:86:d3:10:
         18:db:55:ee:ec:08:20:8e:0b:65:07:1a:32:75:9c:52:43:76:
         c3:ec:f1:a5:45:8c:a2:0f:63:bd:8e:2f:a4:d3:4f:0c:16:11:
         11:d6:6e:6e:56:97:d5:53:2f:01:f6:55:d1:b4:2a:60:98:05:
         a5:45:9c:21:29:d5:2e:de:ab:54:08:6b:cf:41:4b:da:41:d5:
         4a:81:44:a7:e6:35:dd:5a:9b:06:12:c6:b9:73:c3:de:6c:7c:
         b8:ae:6e:c1:b7:7c:49:a5:83:3c:c7:ff:c0:c7:82:ba:49:08:
         c3:61:17:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:49:00 2025 by rpki-client