Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/e5715690-5456-34f2-94db-a032059159c2.roa
File:                     e5715690-5456-34f2-94db-a032059159c2.roa (raw, json)
Hash identifier:          K89Y79YNEO2KUo2Eg9s/E11nbHcRUcTloG1CCUywUX8=
Subject key identifier:   80:98:D5:8D:EE:A9:75:B5:2F:A9:5E:9C:2A:DB:CD:87:08:AF:6C:3D
Certificate issuer:       /CN=55feeaf5-abfd-4f9c-9707-9236ce5397bd
Certificate serial:       010D0C9F4328584B5DD1E0B44ACCB7EF1ACE6E80
Authority key identifier: C9:EF:4B:01:33:02:5C:34:66:53:86:01:A7:05:AC:03:48:05:9A:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/e5715690-5456-34f2-94db-a032059159c2.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     11272
IP address blocks:        69.89.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d1:e0:b4:4a:cc:b7:ef:1a:ce:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55feeaf5-abfd-4f9c-9707-9236ce5397bd
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=3bb9c778-a753-45a4-b428-77501f691e06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ee:8b:36:b6:7c:17:24:77:99:f4:89:ba:78:
                    03:ce:4f:1e:b3:1e:c6:d0:25:0a:8b:f3:f0:fe:5d:
                    1e:b0:2e:08:d5:9f:1a:56:9c:3c:99:86:26:6c:a1:
                    b2:c3:5c:29:9a:8f:8a:e6:e7:33:ef:d5:14:fd:8e:
                    ba:ac:8b:64:50:37:cf:1f:28:f1:0c:06:79:56:38:
                    cd:56:be:a1:b7:1a:a2:56:ae:17:78:05:cf:a2:fb:
                    f0:85:b0:27:cb:9d:65:29:3d:f6:e7:88:62:4d:09:
                    d4:3a:91:57:0d:bd:a5:b8:2c:65:f9:17:24:a7:04:
                    b9:65:6f:fa:28:8c:99:bd:15:a3:7a:35:f4:1e:e4:
                    5e:73:ac:46:45:30:5f:34:a1:e6:c4:6c:61:4e:40:
                    df:b7:e5:b3:a4:9c:ee:98:08:25:6b:6b:48:60:b6:
                    7e:a3:17:7a:31:cc:dc:0f:75:0c:36:95:93:c0:43:
                    2a:0b:ae:60:ed:5a:04:6e:ea:6f:d1:2c:48:fa:6b:
                    b8:e0:94:45:00:cc:77:45:98:f3:18:37:1b:1e:f8:
                    8d:80:a1:7c:52:c6:46:f7:52:f4:68:09:62:88:d4:
                    a4:e3:ec:ba:68:9c:97:50:fc:d8:d6:6e:14:0a:af:
                    4a:20:c3:3e:8b:bd:ac:e9:cc:e8:32:96:37:77:a5:
                    18:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:98:D5:8D:EE:A9:75:B5:2F:A9:5E:9C:2A:DB:CD:87:08:AF:6C:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/e5715690-5456-34f2-94db-a032059159c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.crl

            X509v3 Authority Key Identifier:
                keyid:C9:EF:4B:01:33:02:5C:34:66:53:86:01:A7:05:AC:03:48:05:9A:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.89.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:a2:1f:7c:62:0a:a4:37:6e:4b:86:f3:d6:c9:50:cb:ef:bb:
         b7:22:51:12:be:c2:5a:f1:1d:58:0b:40:b5:c1:34:40:20:d1:
         44:63:6e:8c:e7:2a:e7:b0:ee:80:56:de:47:3b:1e:6a:a0:fc:
         09:ec:7b:62:39:38:28:78:30:ec:cf:86:ad:f1:53:c9:89:e3:
         49:19:2d:ab:4f:8e:1c:24:4a:52:56:4b:f1:6d:af:2f:22:1c:
         9b:94:c0:dd:ed:63:0e:87:7f:de:84:c3:d8:80:fe:a9:46:ff:
         09:ec:de:2a:4c:7e:a1:55:c4:8b:a7:81:06:a2:ab:3d:86:32:
         e0:e9:55:17:36:07:c6:4d:01:74:82:a6:5d:9a:e2:3a:d0:5f:
         f5:9c:3c:e1:87:04:0e:58:f4:fe:2b:83:21:3c:2c:c6:db:00:
         05:e6:fb:19:ab:b3:5c:ca:32:93:ad:93:bc:4f:06:43:22:da:
         b2:af:c7:68:bb:89:f5:2f:dd:31:3a:a7:82:7a:e3:c4:0a:63:
         3a:96:21:fc:73:fd:e3:92:27:7d:1a:b9:0e:25:2f:9e:85:25:
         af:08:cf:bd:3b:2d:1a:e2:f7:4c:91:91:73:cd:0e:24:5d:d9:
         58:46:e4:87:86:d3:7d:6e:98:d9:cc:ab:df:f3:c2:5e:00:3c:
         3b:70:99:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 09:34:58 2025 by rpki-client