Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/65d11a05-2769-3f82-a107-6def6f4c6ffe.roa
File:                     65d11a05-2769-3f82-a107-6def6f4c6ffe.roa (raw, json)
Hash identifier:          GMTdxbhRtdn2QTP2O9ObFbrtOMOEGtzWw/6jY04wABs=
Subject key identifier:   34:66:C0:B8:C8:3E:67:D5:0F:0E:9B:43:DE:31:F6:EB:A7:AB:03:9F
Certificate issuer:       /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
Certificate serial:       010D0C9F43285849FE0FFD49EA993AB13A705580
Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/65d11a05-2769-3f82-a107-6def6f4c6ffe.roa
Signing time:             Tue 27 May 2025 13:01:05 +0000
ROA not before:           Tue 27 May 2025 13:01:05 +0000
ROA not after:            Mon 25 Aug 2025 13:01:05 +0000
asID:                     16509
IP address blocks:        209.169.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:0f:fd:49:ea:99:3a:b1:3a:70:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
        Validity
            Not Before: May 27 13:01:05 2025 GMT
            Not After : Aug 25 13:01:05 2025 GMT
        Subject: CN=dfeda58b-c7ed-4f3b-a1d8-fd4d38cef738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:13:5d:c2:54:7b:b8:6a:91:84:fd:6f:0b:09:
                    49:d3:72:9d:d0:6d:6f:a4:24:eb:61:fc:ad:a2:0d:
                    5a:aa:55:51:19:5f:88:dd:9b:55:fc:24:ee:04:af:
                    db:8e:68:1e:6f:45:e6:3b:19:55:cf:56:50:61:23:
                    8d:fb:f8:54:94:cf:b7:ba:12:76:de:0a:00:be:bb:
                    49:ea:18:ef:ac:97:6d:91:b5:cd:88:ff:b3:1f:f8:
                    37:62:b8:18:3c:fc:09:b4:fd:6d:a4:1d:4f:e8:40:
                    3f:86:62:16:a3:83:c1:0a:e6:6f:94:b9:4c:ad:ad:
                    f9:7e:a8:ab:1e:8a:27:5d:d9:d3:64:ef:13:bb:ec:
                    76:a8:fe:c1:36:78:c9:3c:56:43:fb:ca:1b:f1:fe:
                    be:4c:75:a8:f4:ed:37:b6:91:79:8a:83:79:38:46:
                    39:c5:ea:09:b0:9d:bc:59:26:0d:b2:94:fa:a3:dc:
                    06:9b:66:f0:8d:0c:2c:02:20:e4:29:a8:7a:07:4a:
                    7a:d6:a7:e6:99:6f:9e:ae:24:a8:8a:61:6e:17:ae:
                    69:de:db:3b:fe:bf:3f:08:37:b4:65:a3:24:b3:09:
                    7a:ec:62:bb:fb:50:58:99:90:45:dd:99:13:5e:79:
                    b5:8b:f6:b1:8e:d4:9b:0f:09:c4:d5:2f:9b:10:ae:
                    7b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:66:C0:B8:C8:3E:67:D5:0F:0E:9B:43:DE:31:F6:EB:A7:AB:03:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/65d11a05-2769-3f82-a107-6def6f4c6ffe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl

            X509v3 Authority Key Identifier:
                keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.169.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:a6:ff:a8:24:ac:35:be:52:84:6a:b9:16:da:46:73:80:39:
         af:a3:6e:62:f2:cf:87:97:11:3a:91:ef:0d:48:99:3e:26:89:
         30:a3:81:a7:49:11:4d:72:b5:a8:41:ab:bd:87:95:2d:48:22:
         0b:33:7c:1a:ba:e4:86:8a:8c:5d:4e:f3:37:04:a1:b3:6d:f9:
         a6:4a:85:bc:ec:95:8e:cb:8f:c4:1d:a1:12:0b:fc:31:83:76:
         92:b3:6f:fa:ad:ba:e4:39:29:5a:24:6a:10:40:b9:e1:60:8e:
         f7:eb:e7:bd:24:ce:1a:9a:6f:02:86:56:c5:08:77:c1:b6:59:
         5c:74:10:fb:47:e8:68:9b:c9:e4:29:a1:03:92:67:59:57:d8:
         f6:ab:51:03:a8:8b:02:fa:ff:d9:2a:ca:8b:8d:4e:c5:2b:7f:
         22:44:09:0a:62:09:f0:27:05:b8:f3:42:bf:f0:af:61:af:58:
         46:ba:51:e7:ea:81:32:b2:14:f9:4e:fe:e1:29:cb:9f:03:92:
         4d:a2:0b:a2:ca:41:88:21:2a:ed:52:e0:a3:28:62:c3:b2:4f:
         a8:c0:25:0d:de:56:83:8b:da:fe:78:aa:59:23:1e:bc:4d:8b:
         54:ce:e9:ce:1f:a3:ed:03:75:5d:3a:1c:6d:af:3d:69:f1:ce:
         24:00:d7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:16:25 2025 by rpki-client