Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7cd73e8e-869e-33d4-abe2-b6f8efcf3ee8.roa
File:                     7cd73e8e-869e-33d4-abe2-b6f8efcf3ee8.roa (raw, json)
Hash identifier:          nv/Q4SVc998WC/VW98vxOmEuGYnNc1NDcVrvDJvesAY=
Subject key identifier:   96:15:DE:EC:09:AE:98:75:E5:E9:30:49:DC:4A:32:89:BC:F0:2B:B5
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584A7E7B9A03E64885E816CE8900
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7cd73e8e-869e-33d4-abe2-b6f8efcf3ee8.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        108.177.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:9a:03:e6:48:85:e8:16:ce:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=bb917fbb-d3ff-48f0-9899-b8b3be7c1b46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1b:66:3d:6a:93:94:3e:e9:b3:36:90:27:f0:
                    23:bb:44:73:23:50:4d:7b:5d:ab:d8:97:d4:d5:75:
                    84:b2:db:42:46:43:17:e4:f4:60:4d:ea:fd:74:96:
                    b4:ed:5f:78:18:43:9c:ac:e5:c0:52:4a:91:db:b6:
                    00:2b:89:d7:76:f6:a8:92:16:a4:b1:1a:ff:1b:e4:
                    1d:83:38:25:c4:0c:f2:a7:f7:94:47:ab:13:76:15:
                    a1:ac:73:bc:7c:17:3d:64:bd:ad:ee:bb:8a:b1:a5:
                    b9:98:3e:b2:f6:ce:45:63:84:26:f6:70:73:58:0d:
                    9a:53:d5:8c:52:73:a5:13:dd:42:b1:3e:4a:a3:57:
                    b4:24:65:7e:08:06:69:91:0f:3a:70:2f:ba:fd:58:
                    2f:7d:4a:6a:4a:7e:68:44:80:43:e3:5d:d6:94:18:
                    d9:a4:87:97:f4:4f:97:b0:a0:b1:19:95:66:17:05:
                    09:1c:92:65:2b:b0:4a:19:3f:2e:aa:87:65:ca:6c:
                    b7:15:3e:30:0a:a7:57:37:47:c8:11:4b:ad:64:7b:
                    3c:57:f1:66:1a:8e:d5:e4:dc:0a:7b:c2:91:f2:7e:
                    cd:30:22:08:7d:0d:09:33:19:18:ce:eb:ca:2e:72:
                    3a:cb:4d:ac:84:00:8e:af:56:8f:de:34:93:6f:d6:
                    29:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:15:DE:EC:09:AE:98:75:E5:E9:30:49:DC:4A:32:89:BC:F0:2B:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7cd73e8e-869e-33d4-abe2-b6f8efcf3ee8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.177.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:fa:50:51:81:e0:bd:f3:3e:99:b0:24:b1:76:74:76:18:7e:
         b1:81:12:0f:d0:e7:fc:9f:2d:3f:91:19:9b:51:07:a2:00:97:
         42:e0:48:b3:b8:93:95:50:24:a0:eb:00:ab:f7:c2:5c:a8:93:
         bd:50:91:c6:3b:6f:3a:ae:73:4a:70:95:d2:19:58:a7:a7:6d:
         6b:93:f5:99:b5:40:6c:a5:dc:7c:72:94:83:a9:c3:e8:f9:10:
         5e:61:69:66:69:d7:c2:8b:ce:ee:53:76:ac:0b:fb:85:e8:d6:
         fa:65:78:21:20:e9:94:ba:1a:d6:c2:6b:cf:e9:35:55:06:f8:
         8e:3f:bc:66:9f:a8:46:6b:41:3d:1a:fd:56:38:fd:8f:7e:a2:
         5e:4d:1a:93:ce:ef:38:79:e3:d1:4d:0c:ba:06:1f:60:6b:8f:
         04:0d:47:f7:f7:dc:8c:2a:ab:99:83:ab:5a:df:43:1e:28:a6:
         c4:c0:e3:35:d1:4f:ac:a0:e4:7c:52:5c:31:d7:49:5c:1f:b2:
         e4:42:4a:fc:c3:f5:66:91:16:51:74:79:ec:3e:cf:93:df:ba:
         92:6d:f6:7e:77:1f:b9:45:e7:40:13:c3:a7:8d:fc:17:7f:fc:
         ac:bb:1d:d2:87:35:b2:e0:05:dc:8f:13:c0:19:75:05:55:65:
         73:70:38:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:46:15 2025 by rpki-client