Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/fa29edd3-f830-34f2-b449-cdb32d15da01.roa
File:                     fa29edd3-f830-34f2-b449-cdb32d15da01.roa (raw, json)
Hash identifier:          wJ0l0X7sP/uBzQ5BWD5tj0rFN5sDihe8tyQaK0TdEcw=
Subject key identifier:   24:98:74:C1:B8:A0:2B:20:79:11:F9:91:FF:8F:FA:F5:62:68:F3:14
Certificate issuer:       /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
Certificate serial:       010D0C9F43285849C4D4BF00B33E5356BF169700
Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/fa29edd3-f830-34f2-b449-cdb32d15da01.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     16509
IP address blocks:        209.169.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:bf:00:b3:3e:53:56:bf:16:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=1d26ac3e-0d7b-4db7-84de-8634e710f153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:10:9b:6e:97:40:59:72:64:db:d4:b9:c1:85:
                    9e:60:3e:54:15:03:d0:9b:48:61:e7:01:c4:3e:17:
                    a1:bb:49:92:26:23:a8:f9:ad:6e:86:d5:b5:f9:ac:
                    d6:8b:ba:b3:a7:5e:04:66:e1:b8:b8:3d:44:55:6a:
                    a1:fa:2b:25:ff:8f:32:b8:4e:78:80:9c:eb:73:3f:
                    69:69:06:28:6a:d8:fd:34:e8:e6:b1:87:b2:ed:95:
                    c4:a2:97:a5:89:74:0a:f5:a7:6c:b3:1e:09:8b:bf:
                    30:57:3b:0e:23:db:5b:de:c0:65:ba:3b:1e:54:ca:
                    9b:9a:86:8e:a5:f2:25:82:5e:1e:42:f3:e2:ed:82:
                    00:60:12:fe:f5:62:aa:72:28:b5:75:70:42:e9:44:
                    0a:ed:24:29:59:75:16:69:d5:c3:12:14:25:ba:a1:
                    20:d1:3a:04:0a:71:07:7a:47:7d:41:fd:98:1b:30:
                    30:0d:d5:4b:13:dc:4b:d2:05:65:d0:a5:2b:eb:5b:
                    a6:fe:04:fb:b2:3f:08:e3:d5:14:b8:a9:27:13:07:
                    c1:67:ac:7b:ff:4f:38:42:04:19:ff:be:5e:47:c4:
                    b6:01:7d:10:fe:3b:60:eb:b6:2b:79:97:3c:f3:5a:
                    2f:4f:5c:28:8f:cc:63:93:32:94:7a:71:4d:50:bd:
                    98:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:98:74:C1:B8:A0:2B:20:79:11:F9:91:FF:8F:FA:F5:62:68:F3:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/fa29edd3-f830-34f2-b449-cdb32d15da01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl

            X509v3 Authority Key Identifier:
                keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.169.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:62:34:1b:90:40:7a:1c:cc:e5:ee:21:9f:a5:3e:d4:0d:75:
         fc:b2:88:2e:ed:74:f2:b7:9a:31:4e:9d:02:4c:dd:04:f8:e7:
         21:5a:c9:c5:84:80:12:5d:b8:90:b6:a7:06:b0:b7:cb:64:7e:
         a6:f3:34:9f:3a:6b:e7:aa:6d:1f:55:53:ff:a2:97:6d:c4:42:
         54:68:82:8a:7f:df:a0:b4:a1:8f:d2:94:be:7b:e3:ca:c3:b7:
         fc:11:cb:b6:2b:2f:78:fc:20:0a:83:15:e8:7d:17:f6:22:aa:
         ea:76:ad:7f:b1:b9:49:37:16:f8:f7:cd:5a:e1:d6:95:5e:0d:
         2a:65:f8:dc:1c:8f:a2:48:9d:a5:ce:9d:fa:5c:ed:0e:6f:e1:
         87:45:07:de:8e:83:34:48:b1:ab:ad:26:70:5a:81:b2:3a:8e:
         bc:2d:1c:ef:de:61:d1:19:f7:b6:d1:8c:15:ac:b8:89:64:ec:
         f5:40:93:29:da:0b:f0:e9:91:e2:6f:e5:59:90:3d:2d:87:d0:
         2e:15:31:17:bc:3a:aa:b4:dd:c1:55:0e:0d:ee:80:be:84:ea:
         2b:10:63:64:db:bf:2b:bd:d7:11:9a:a2:fb:4b:d2:a9:99:94:
         93:a4:f1:8c:6f:0e:51:1d:aa:41:77:48:5f:61:4a:47:d0:8b:
         28:3c:12:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:22:00 2025 by rpki-client