Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8610c57e-474d-3702-8904-cabe656dbbc0.roa
File:                     8610c57e-474d-3702-8904-cabe656dbbc0.roa (raw, json)
Hash identifier:          uSUEWZNyhSpzC+1tJObuRayPHliW1kQ8j7mrfXM+SVw=
Subject key identifier:   CF:DD:B5:1B:15:E1:09:85:1D:C7:1B:49:66:64:E8:04:98:92:99:AB
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B99D7B5DC412E2AC3A35A4240
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8610c57e-474d-3702-8904-cabe656dbbc0.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     22989
IP address blocks:        209.51.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:b5:dc:41:2e:2a:c3:a3:5a:42:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=8527537e-0155-49eb-b4cb-0207a3894266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:e7:d5:58:d3:12:6c:6f:bc:36:17:4e:ed:b1:
                    df:9f:db:69:58:3c:d1:f8:fc:e0:b2:6d:31:0b:b2:
                    50:00:b1:68:ba:ad:b7:93:69:67:a2:c7:ea:23:16:
                    28:80:53:4b:1b:10:b9:c2:80:17:bc:d8:9a:0c:92:
                    6f:66:41:b3:09:39:90:06:c9:ef:5f:bb:97:fb:7a:
                    24:93:2a:8e:7c:85:1b:19:0d:ab:b7:3b:93:d9:c5:
                    80:25:4f:65:7b:98:ca:7e:3f:9b:d6:c4:92:6e:54:
                    99:57:45:8b:36:a5:bd:11:66:f9:a9:4c:82:7b:24:
                    4a:43:6b:fe:07:f1:c9:42:45:6b:62:d3:d2:79:d5:
                    9a:08:df:3a:3b:be:f2:ae:c2:72:06:1c:ed:99:4d:
                    df:aa:d5:6a:88:5e:73:ae:d9:da:e2:5f:9d:20:03:
                    8e:32:1e:71:c3:91:7c:9e:ee:ad:9e:68:7f:8c:a2:
                    c3:6e:fe:5e:7d:cf:b6:c6:3c:75:52:5d:2b:38:22:
                    0b:37:88:07:0f:84:0f:4f:96:8d:fa:2c:f2:ca:2f:
                    1f:ed:af:f1:08:d8:b6:86:98:91:36:3c:57:d9:62:
                    84:d7:63:26:1e:31:68:d2:45:cf:71:6c:02:f7:b6:
                    62:e3:10:04:be:74:93:2d:9d:5b:e7:98:20:b1:88:
                    d7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:DD:B5:1B:15:E1:09:85:1D:C7:1B:49:66:64:E8:04:98:92:99:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8610c57e-474d-3702-8904-cabe656dbbc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.51.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:21:32:88:ca:11:b8:4c:0d:5e:b1:6b:43:21:5b:c0:1a:93:
         1a:7e:aa:52:6f:4e:fb:27:9b:15:12:4a:7b:29:00:5e:fa:cc:
         18:70:d3:56:f8:63:97:7e:45:42:49:03:70:11:0a:e2:17:09:
         f8:31:5c:3e:4f:02:88:9c:71:8e:da:9e:cc:dc:e5:e4:fd:e0:
         ef:e6:a9:63:23:e1:5f:aa:be:a4:c3:20:2b:68:b7:cc:9d:05:
         3e:ba:79:8f:4e:ee:57:ce:0a:be:71:e8:97:8e:b5:05:bd:b2:
         2e:4b:b9:b9:45:c1:6e:ab:50:c8:3b:b2:e3:71:31:84:4d:ca:
         25:6c:6b:94:81:d5:5c:ab:e9:33:a0:66:dd:4e:c6:66:c1:24:
         4a:5f:60:2f:fe:62:20:1b:c7:05:c0:04:20:d6:11:6c:a7:65:
         a4:10:66:df:53:14:e1:94:17:b8:96:00:7a:47:7b:03:9e:d6:
         29:9a:b1:9f:c4:31:80:d8:b7:f8:70:c6:43:60:68:e8:2d:2a:
         0a:a2:03:90:bc:ad:6e:7d:6c:2a:6c:f5:84:c5:fa:2e:ac:24:
         5f:5f:76:1c:f7:23:f9:c1:13:72:96:80:15:db:05:44:1f:ab:
         41:04:fa:cf:f6:21:2f:58:d2:20:ba:92:3d:9c:66:9e:ea:46:
         f3:39:76:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:28:58 2025 by rpki-client