Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/2ce4302b-9df1-39e3-9959-d08bcbf85835.roa
File:                     2ce4302b-9df1-39e3-9959-d08bcbf85835.roa (raw, json)
Hash identifier:          yxxaZ/XQPNDEIFgLJmprRzE/atp8qxAmG5LMfjpBczA=
Subject key identifier:   AC:62:F6:BE:B4:14:18:08:A2:A9:78:17:EC:57:E8:D1:6B:08:54:99
Certificate issuer:       /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
Certificate serial:       010D0C9F4328584AAB26687D66CE4C4F09F92500
Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/2ce4302b-9df1-39e3-9959-d08bcbf85835.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     16509
IP address blocks:        209.169.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:68:7d:66:ce:4c:4f:09:f9:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=1bff665b-3f6c-4bc7-a33d-790dbd5d2e5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d6:06:74:49:97:36:23:9f:41:d9:b2:d0:df:
                    e3:3a:7b:80:ae:2f:e8:d9:27:10:c7:6b:47:9d:3f:
                    69:98:b3:fa:c0:b6:96:84:cc:49:d6:74:69:6f:c0:
                    a8:92:da:0b:11:ba:6f:9b:b2:bd:0c:44:53:6e:11:
                    a1:8a:4c:e9:00:f9:f6:35:8b:d1:a3:73:16:d0:e0:
                    a8:af:4f:08:43:33:ec:a3:7b:ad:27:4a:35:83:70:
                    6b:5a:de:54:09:0b:6a:13:58:39:fe:1e:d9:97:fe:
                    7c:28:35:b9:e0:0d:cd:74:fe:7d:81:a5:fb:d3:08:
                    e7:bc:6c:df:dd:eb:8c:3d:f9:11:90:25:d9:c4:f9:
                    d1:cc:a7:35:ad:a7:28:31:de:23:c2:8e:45:a4:32:
                    e2:00:ff:dd:ca:b5:96:16:1b:5c:d5:0d:1d:a6:72:
                    a2:bb:0b:21:be:fb:a3:ec:ab:0a:61:dd:5b:0e:44:
                    b8:8a:f2:dd:d0:a5:1f:d1:87:4f:f3:59:0f:76:1a:
                    23:cb:d8:35:6f:4a:1d:e3:a8:31:56:7a:be:1b:ab:
                    47:10:1f:15:ce:34:58:cf:3e:eb:63:9e:94:e4:ee:
                    3f:b9:38:97:d4:17:d5:e5:21:06:5d:be:54:57:69:
                    e3:88:c3:32:49:0a:40:86:2c:70:47:31:77:db:1c:
                    c3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:62:F6:BE:B4:14:18:08:A2:A9:78:17:EC:57:E8:D1:6B:08:54:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/2ce4302b-9df1-39e3-9959-d08bcbf85835.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl

            X509v3 Authority Key Identifier:
                keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.169.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:b0:67:d3:0a:8e:8b:d2:1e:a5:16:e4:13:84:44:61:3c:c7:
         cd:5d:70:e8:b7:55:cf:f8:71:1a:fc:2b:a0:46:68:db:a2:85:
         52:7f:48:0e:87:15:3a:c8:d7:a9:50:d0:d9:22:de:2b:f1:76:
         b1:90:34:50:02:a4:4f:b3:2b:d6:cc:d7:82:21:9b:94:0e:db:
         e8:95:07:99:7b:50:ff:03:62:dd:67:73:3b:6d:a9:94:65:78:
         74:73:79:1f:f4:ab:3f:f2:c3:d9:bc:f4:27:33:a1:68:21:b2:
         d6:86:70:0d:74:24:4d:db:96:6c:da:87:0f:86:22:32:ed:c5:
         98:01:78:d7:d0:48:fb:9c:68:b6:f9:93:3f:d7:b8:91:30:96:
         2d:5c:a9:c5:d4:f1:ff:27:1c:e9:20:c4:f1:60:15:f4:ca:8c:
         ad:2c:fe:ae:d5:2d:42:ce:41:b9:da:c1:cd:54:cc:18:4a:87:
         a2:80:aa:0b:22:6b:5d:bd:92:5e:d7:87:fb:b5:56:90:88:41:
         e7:64:fb:2e:41:85:f1:59:00:1b:df:9a:cf:76:78:1d:19:f4:
         e3:8e:23:97:22:14:2a:32:6f:35:7d:6e:b4:90:eb:3e:b1:ea:
         bf:f4:51:ff:60:15:67:1a:ed:c6:8b:60:b9:79:37:d5:38:3e:
         3c:60:f2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:39:29 2025 by rpki-client