Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ec3f0b50-5c0e-3609-a23d-16d314409bbb.roa
File:                     ec3f0b50-5c0e-3609-a23d-16d314409bbb.roa (raw, json)
Hash identifier:          3EW4V7648auvUAh5Ijh8oZ8jDs83ixpqeqNy8dSYBU4=
Subject key identifier:   67:20:27:20:E7:34:67:84:7C:85:40:4D:6D:82:F6:3B:61:BD:89:11
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91BC7D99FC4CBA837105700
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ec3f0b50-5c0e-3609-a23d-16d314409bbb.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     14979
IP address blocks:        209.51.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:c7:d9:9f:c4:cb:a8:37:10:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=4215dfbc-2cc3-42dc-a00a-cd6659735476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4b:50:40:83:48:6a:39:37:a6:a5:8f:c7:b9:
                    f5:91:d7:47:c8:7a:a8:7c:39:52:5f:10:91:e6:ac:
                    bc:15:8e:b4:e6:c2:6f:9e:4a:91:9d:a5:df:2e:4e:
                    08:2b:16:e7:b4:48:22:30:f8:02:e6:cf:40:2e:16:
                    72:65:59:f7:32:f6:6c:0c:96:1b:4f:9f:d0:12:27:
                    ce:66:91:f2:b1:23:e0:8a:d8:12:97:67:b1:d8:e0:
                    f0:b9:42:ce:42:b5:9e:4f:79:21:e6:b3:d4:1e:b3:
                    4c:c4:9e:bc:aa:3b:8a:80:d2:1f:1a:9d:bd:44:b5:
                    23:2f:e7:22:96:03:f5:01:a8:b8:ae:26:d5:bb:2e:
                    17:23:eb:63:bf:8e:0a:a8:04:ee:b5:c8:8e:c5:9f:
                    5c:ef:05:6a:dc:8d:5d:8e:9f:e1:50:bc:9f:e1:c1:
                    ef:cb:50:c0:28:98:df:1f:f4:1a:0f:32:6e:e7:d1:
                    60:d3:8e:df:c1:11:01:af:77:6e:1f:62:d3:6e:1d:
                    24:33:2a:f3:24:fc:5a:fb:5e:e3:c9:ca:a4:5e:9f:
                    cd:95:bc:ea:3a:c4:70:e5:d7:c3:7a:f2:bc:e6:f9:
                    e5:91:5f:f7:0b:b8:0f:66:2f:57:ee:5a:59:eb:7c:
                    fc:40:b1:6c:17:de:16:0d:a5:fe:2c:5d:08:de:a1:
                    6e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:20:27:20:E7:34:67:84:7C:85:40:4D:6D:82:F6:3B:61:BD:89:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ec3f0b50-5c0e-3609-a23d-16d314409bbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.51.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:00:a7:aa:51:b4:e3:8c:02:f9:a5:41:21:63:90:2e:1d:4e:
         9b:0a:77:4a:32:3e:3c:80:b8:cf:7d:2f:7b:e0:25:0f:9b:16:
         50:de:5e:9a:cb:1b:5a:95:fb:0e:29:2e:0b:71:28:b0:7d:ad:
         18:1a:50:a4:b0:ed:76:39:7b:20:06:08:f5:2c:e7:3f:98:50:
         87:56:aa:4c:a7:f0:1e:e5:cd:62:b9:47:3e:b9:fb:c5:6c:6c:
         d2:fc:d0:61:12:2d:5f:b2:71:51:ff:14:53:dc:93:bc:48:bb:
         63:a6:91:40:87:c3:49:0e:04:45:60:eb:f8:73:ab:07:dc:2f:
         17:c6:7d:76:ca:7d:f2:44:7d:0a:53:72:89:56:13:2a:ca:d8:
         bd:d4:4b:50:07:51:f1:12:02:8b:c7:df:ef:18:cf:9d:7b:d8:
         7d:82:95:0d:b2:03:ee:46:82:68:a9:95:7f:19:d9:6d:66:e6:
         94:e9:79:31:1b:df:44:8a:96:6a:56:36:90:78:bf:6c:0f:b9:
         24:0e:5f:3c:c4:c4:ab:6c:17:89:bb:23:0b:d7:28:bc:0b:b1:
         ad:ef:8b:fd:f2:58:d5:a7:28:b2:6e:61:6f:e7:38:20:a3:7f:
         fe:49:c9:a3:51:92:20:f0:0a:68:b9:98:92:28:bc:c7:c6:c7:
         45:58:29:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:34 2025 by rpki-client