Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3efa705f-91fa-31b8-b37a-2e64bf636213.roa
File:                     3efa705f-91fa-31b8-b37a-2e64bf636213.roa (raw, json)
Hash identifier:          VFaZIwPLtfPL9FJxMxtomo5JM7R21rcOmI4FHavHUKM=
Subject key identifier:   F0:C2:42:76:5E:7C:CE:32:D3:5F:F4:DD:89:F3:1A:4F:8F:46:6C:07
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FB9C087A9B5EB3B4DA580
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3efa705f-91fa-31b8-b37a-2e64bf636213.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     395880
IP address blocks:        209.51.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:b9:c0:87:a9:b5:eb:3b:4d:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=3d1f945f-66e3-4c1f-8d8f-3096725909ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f1:3e:ef:78:d2:26:83:a7:e6:b1:f5:8d:d1:
                    8d:93:61:84:7a:fa:d7:b7:7a:b3:84:09:e5:0e:20:
                    c0:b2:ee:55:a7:ab:fb:76:46:e9:36:b4:e4:fa:b8:
                    a1:1c:c6:7f:b6:f0:ff:87:90:45:88:ac:f5:90:21:
                    45:98:7d:13:8a:a2:09:09:7c:9e:dc:4a:09:67:3f:
                    fa:90:0b:47:db:e6:42:b4:97:d9:e3:e2:e3:60:99:
                    4f:dd:3a:aa:6e:8d:c7:0d:46:91:28:fa:51:8b:dd:
                    fe:23:2c:e7:e6:41:c2:eb:f1:68:a9:26:71:bf:25:
                    77:db:9c:a7:cc:db:db:fc:f8:a7:da:d1:6d:c9:58:
                    64:d5:6d:a9:19:34:0e:ad:31:99:df:86:7c:68:49:
                    81:9f:f0:0e:d8:bf:de:71:a3:a4:0f:a3:e7:c3:e9:
                    d0:15:7a:00:3d:ae:ea:87:7e:ab:a7:87:91:70:c5:
                    f6:07:bf:11:e9:4d:45:df:3a:76:12:c0:c9:64:56:
                    48:6a:73:98:4e:e7:e5:6e:0a:5c:8a:8c:de:b4:b0:
                    55:a9:be:14:21:8e:2d:a4:23:d2:d0:52:8b:ad:6f:
                    af:e0:d7:6b:07:0f:46:10:72:e1:ab:7e:c3:b7:2d:
                    80:01:09:e5:46:b3:e1:ab:c9:e5:7d:2d:38:9b:cf:
                    70:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C2:42:76:5E:7C:CE:32:D3:5F:F4:DD:89:F3:1A:4F:8F:46:6C:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3efa705f-91fa-31b8-b37a-2e64bf636213.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.51.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:d4:a0:26:33:ec:77:56:4b:4a:70:ac:d6:45:4b:fa:fa:53:
         9a:65:af:6c:4d:c7:4d:5a:a7:3d:7c:21:24:15:92:ff:c9:5d:
         05:20:a0:2c:f4:e1:0f:e0:92:a8:84:09:31:3e:b9:45:a0:d9:
         c0:92:97:03:61:c7:1f:a6:04:1a:27:84:6d:1a:26:8f:23:7f:
         0e:15:76:53:12:f3:23:32:ae:d1:de:38:a5:2b:c1:e7:94:0d:
         f6:ea:2a:ab:1a:89:34:01:9a:f2:ff:06:5c:90:f4:56:23:8d:
         27:7b:a5:8f:53:1e:f3:e5:df:d6:aa:e8:0f:50:aa:ec:6e:aa:
         28:65:20:3a:bd:8b:97:c3:90:99:8b:bb:b0:25:26:52:97:d7:
         ec:96:af:fe:dc:f1:68:fd:05:77:bd:91:3e:06:94:07:df:45:
         97:35:a7:4f:1c:fc:14:d6:24:d7:45:37:6a:df:1f:57:d4:ba:
         57:fa:2e:40:48:32:26:95:0e:ca:61:c9:36:c9:85:68:48:6c:
         0e:f8:6c:f3:1d:06:a8:fd:eb:4e:7d:df:22:c0:63:ef:41:0f:
         ff:7d:da:a2:ef:1d:ab:1f:55:2f:31:5b:f2:62:c7:b9:bc:be:
         8c:52:ae:12:ee:08:a6:00:55:de:91:75:d2:79:a6:4c:a9:26:
         4e:78:7c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:44:48 2025 by rpki-client