Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/85e98373-72a7-3bb8-8c82-b2f6ff478cb4.roa
File:                     85e98373-72a7-3bb8-8c82-b2f6ff478cb4.roa (raw, json)
Hash identifier:          E7mPj5hDobSTQXtKIwEknEZBxuK/jZVjhuz5KpCRNSk=
Subject key identifier:   92:21:F4:F1:FF:59:57:C2:C8:4C:4C:37:C1:1F:B0:52:85:C9:00:79
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584A841228F877FC7C5DE4450AA0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/85e98373-72a7-3bb8-8c82-b2f6ff478cb4.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        209.85.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:28:f8:77:fc:7c:5d:e4:45:0a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=b8222e15-63ef-4527-b753-17e6ab843455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a0:57:05:09:00:b8:7e:cc:2a:2b:0d:6d:4f:
                    36:00:de:e8:c7:73:76:92:03:48:26:33:40:4b:a3:
                    e5:7c:ea:64:c2:b4:92:14:ac:c7:60:1b:e2:c1:6e:
                    01:af:76:a8:18:da:70:80:30:98:d0:33:92:c8:b2:
                    df:90:f7:fa:57:56:90:1b:5f:cb:ed:fc:bb:21:c0:
                    70:f2:68:6b:fd:cf:54:e4:bd:f4:72:58:a0:6f:0d:
                    9d:30:12:04:9c:c8:30:77:ea:ef:e4:45:06:cb:e5:
                    0c:b1:28:74:1a:bf:80:37:cf:3d:b4:a0:e8:9b:73:
                    33:7e:64:73:5e:37:83:4b:41:c7:fd:34:f3:08:c4:
                    3b:7d:18:20:44:ef:9e:26:c2:a0:da:6b:ae:5f:89:
                    8a:43:39:b5:12:f9:e9:f5:9d:40:7f:cd:ac:b2:f0:
                    3a:da:38:b5:ee:29:9d:02:33:82:fb:0e:d5:e3:32:
                    0d:8d:7f:d7:9c:8a:eb:d2:ac:5f:ca:29:0d:53:85:
                    bb:58:bd:56:b0:67:f7:66:cb:ce:a7:49:18:0c:1f:
                    ee:2b:93:ec:12:d4:f8:bf:f4:77:e5:5f:56:3b:60:
                    13:44:2c:bf:0c:e7:07:50:34:fc:45:11:39:0b:51:
                    b5:f6:26:20:21:87:71:fc:83:ee:8e:96:e3:9e:a8:
                    f7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:21:F4:F1:FF:59:57:C2:C8:4C:4C:37:C1:1F:B0:52:85:C9:00:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/85e98373-72a7-3bb8-8c82-b2f6ff478cb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.85.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:aa:64:64:16:bc:0c:74:2b:41:18:73:fb:ca:97:43:36:03:
         fa:12:bf:61:fb:a6:46:dc:1d:7a:93:42:28:48:a8:70:a1:80:
         d8:e3:9f:89:ac:c7:83:36:20:28:6f:79:1e:16:c3:76:9b:13:
         61:35:db:89:17:e5:d8:94:55:c7:12:9b:0d:d0:4d:72:dd:ce:
         cf:ae:4d:cc:8b:a6:43:39:da:97:2d:62:6f:b2:40:78:8c:92:
         97:77:f8:0a:f3:ae:95:ff:30:a2:81:e7:20:2a:44:cd:fc:9e:
         55:86:d4:d3:fd:90:58:54:0f:29:83:40:9d:ad:bc:2c:6e:fa:
         77:5d:17:ef:0a:f0:39:0f:28:e4:16:86:37:80:b3:e0:0b:d6:
         aa:1c:df:01:97:cd:86:0c:b0:0b:29:b2:54:2e:a3:24:22:13:
         f4:4b:da:90:0d:04:a8:ed:8d:2c:1d:e5:03:f3:6f:84:45:c2:
         c4:c5:6a:04:da:8f:46:4a:55:69:2f:56:99:35:16:16:86:46:
         8b:98:ab:3f:88:7e:36:7c:00:4b:a4:fc:59:6b:98:f6:36:6e:
         77:b6:51:f4:fd:a8:85:00:c6:e1:3e:d1:5a:61:36:0a:b2:47:
         77:54:5a:95:4c:dd:5d:76:4d:1c:f2:99:2f:0f:f9:56:05:97:
         fd:75:3a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:13:17 2025 by rpki-client