Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/d57ed4d6-9953-3ee9-9ce1-5dc06d702c1b.roa
File:                     d57ed4d6-9953-3ee9-9ce1-5dc06d702c1b.roa (raw, json)
Hash identifier:          7QAwu24Vs3USRrZnu8ECZg5XHNKFiQXK1IUytzWXYR4=
Subject key identifier:   80:99:56:29:65:FA:51:F1:32:B5:61:16:11:D2:D2:16:D7:58:B1:0B
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F4328584ABD4B8B9358650C6105670B00
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/d57ed4d6-9953-3ee9-9ce1-5dc06d702c1b.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     198148
IP address blocks:        209.8.144.0/22 maxlen: 24
                          209.9.2.0/23 maxlen: 24
                          209.9.72.0/22 maxlen: 24
                          209.9.104.0/21 maxlen: 24
                          209.9.112.0/21 maxlen: 24
                          209.9.128.0/21 maxlen: 24
                          209.9.208.0/21 maxlen: 24
                          209.9.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:8b:93:58:65:0c:61:05:67:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=0c5c18f3-736c-4d39-ab61-6efd213348e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e7:6f:f2:96:78:93:19:3a:37:4d:7a:8e:1b:
                    f9:e4:b0:84:d8:6a:d2:e3:7d:93:40:e0:5e:be:e6:
                    35:93:27:8b:42:79:34:ad:ad:17:11:9d:d7:2d:9a:
                    7c:87:1c:1a:ec:4f:e0:29:08:6f:0a:99:c3:cb:97:
                    7d:b2:7b:ec:4a:1e:95:48:6a:f3:6a:bb:d0:34:16:
                    e5:cb:6a:17:33:9f:04:6a:03:c0:28:f2:f1:d2:a6:
                    aa:22:10:5f:91:29:94:96:93:9d:65:6c:4f:95:ed:
                    65:f2:f4:3b:80:88:4c:d0:a9:59:a5:10:08:84:85:
                    cb:b7:a8:74:ff:39:f7:e7:22:95:54:e2:b6:e9:a2:
                    4a:f4:24:89:26:56:aa:5c:35:05:b1:3e:fb:19:9c:
                    da:5f:92:7c:2c:b5:37:08:e9:d1:18:6b:87:50:95:
                    61:ee:95:bf:f9:84:d5:19:43:d7:3c:87:70:fd:0f:
                    a1:1f:44:75:f2:63:b9:82:3b:28:dd:6d:26:72:67:
                    6f:7f:b4:00:68:7b:0d:e7:74:70:47:5f:b1:4e:44:
                    b4:97:52:8a:1d:82:94:9c:db:93:4d:14:be:0d:70:
                    7d:05:cc:8b:de:4a:1d:e8:4a:fb:04:5b:db:bf:75:
                    1e:66:96:ae:0a:2a:1f:6d:8a:c7:9d:aa:da:a4:b7:
                    ea:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:99:56:29:65:FA:51:F1:32:B5:61:16:11:D2:D2:16:D7:58:B1:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/d57ed4d6-9953-3ee9-9ce1-5dc06d702c1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.8.144.0/22
                  209.9.2.0/23
                  209.9.72.0/22
                  209.9.104.0-209.9.119.255
                  209.9.128.0/21
                  209.9.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:5d:6e:cd:2f:e0:70:a0:13:04:4d:57:34:cb:0b:7d:7c:ec:
         fc:04:bc:37:35:09:fe:ef:b0:f3:9f:cd:a0:bc:6e:4b:67:3c:
         43:ad:76:7c:d4:c9:f5:35:4d:36:aa:2e:2d:f9:df:2b:07:9f:
         5e:76:09:89:90:1d:8d:fa:68:66:51:11:88:fd:f0:34:5f:50:
         e6:a4:0d:f0:58:68:88:77:d3:e0:41:ea:95:5a:61:c4:cf:13:
         fa:b4:38:81:fe:f6:f4:fc:7a:3a:9c:c7:71:45:3a:63:13:25:
         d1:d3:6e:d0:2d:02:1d:44:bc:48:20:a4:80:bc:fe:ce:8e:48:
         dc:0b:7a:d8:61:3b:d3:52:e6:1d:d3:50:58:3c:1f:d9:e7:9d:
         a4:b2:e6:3c:0d:6f:9d:70:f3:1a:cb:5d:b4:56:6d:d3:f3:f7:
         83:c1:f5:18:1f:9b:e5:6c:3d:2d:9b:3f:32:49:82:ef:75:3a:
         08:19:19:7f:d7:91:ca:fc:43:de:ce:fe:b5:a6:ad:bb:df:b6:
         b1:de:06:9d:44:1b:f0:8c:ef:ae:00:03:ee:53:b5:5d:79:01:
         66:68:55:6a:dd:07:38:bb:6f:04:50:80:0b:44:af:27:0f:a2:
         cb:7b:85:d0:d1:c8:d9:ae:0e:f9:c0:cb:04:f6:c5:8e:56:aa:
         a4:51:a8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:28:10 2025 by rpki-client