Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/b055e2af-9402-3dc6-9892-eee3432b3b35.roa
File:                     b055e2af-9402-3dc6-9892-eee3432b3b35.roa (raw, json)
Hash identifier:          At39nyrpHZCnpGj+GQfedrh5va+sTittP4jC9UOesLQ=
Subject key identifier:   79:F1:4D:93:AF:D0:27:2A:2C:AD:2A:6E:54:A4:9C:14:7E:14:3D:83
Certificate issuer:       /CN=a9a8478d-2e70-4659-8d85-8edbac09d675
Certificate serial:       010D0C9F4328584B4616FBDCECEDFE3CBFA9A290
Authority key identifier: 77:DE:D7:AB:0E:46:F5:30:83:A0:BD:40:E0:BD:D6:36:06:39:A8:67
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/b055e2af-9402-3dc6-9892-eee3432b3b35.roa
Signing time:             Mon 22 Sep 2025 01:00:33 +0000
ROA not before:           Mon 22 Sep 2025 01:00:33 +0000
ROA not after:            Sun 21 Dec 2025 02:00:33 +0000
asID:                     27370
IP address blocks:        140.241.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:46:16:fb:dc:ec:ed:fe:3c:bf:a9:a2:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9a8478d-2e70-4659-8d85-8edbac09d675
        Validity
            Not Before: Sep 22 01:00:33 2025 GMT
            Not After : Dec 21 02:00:33 2025 GMT
        Subject: CN=052d6801-39b1-438b-94b5-da0cd5849f47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7a:d2:34:e7:be:c2:6b:ca:f0:a9:02:d9:ac:
                    57:22:40:31:0f:c9:50:48:12:bd:19:37:57:f0:56:
                    2a:38:7c:5d:a6:e4:bf:19:f2:0f:ab:28:72:92:28:
                    7d:2b:c3:d6:40:4f:e3:a6:fc:f7:de:4b:90:bd:09:
                    fc:47:65:9a:bb:27:13:0d:28:23:78:66:37:e3:b8:
                    18:93:ca:60:cb:e0:5f:a5:a3:0e:da:be:9c:cd:ac:
                    9f:e5:b9:71:68:7c:73:13:d4:fe:5f:79:ac:28:6f:
                    01:0b:9a:ed:6d:4a:da:0a:b2:b9:be:09:6c:24:49:
                    49:da:75:f6:bf:05:c8:d3:5a:ae:c0:bb:1b:89:03:
                    31:4e:4a:6c:5c:92:55:3e:37:1f:0b:10:5b:d5:7c:
                    a7:67:fa:16:63:3f:ae:29:d2:a3:4e:bd:55:d3:5c:
                    c8:66:ba:44:f5:40:94:ee:c7:0e:b0:91:dd:48:e6:
                    32:fa:b7:fd:56:33:0d:8b:74:00:f7:5c:5d:da:11:
                    17:80:e7:03:34:41:d2:28:dc:60:c5:27:32:34:c9:
                    e9:39:5a:38:b6:ec:e2:30:65:8b:15:44:8a:8b:26:
                    18:b7:db:58:0e:3f:87:de:19:8d:63:21:d3:6d:35:
                    a1:1d:20:18:2e:c6:83:c8:f2:1f:6d:22:73:88:38:
                    2a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:F1:4D:93:AF:D0:27:2A:2C:AD:2A:6E:54:A4:9C:14:7E:14:3D:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/b055e2af-9402-3dc6-9892-eee3432b3b35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.crl

            X509v3 Authority Key Identifier:
                keyid:77:DE:D7:AB:0E:46:F5:30:83:A0:BD:40:E0:BD:D6:36:06:39:A8:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.241.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:e3:cd:0d:98:28:94:c1:91:0d:46:64:bb:bc:7b:b4:38:5c:
         ee:cb:65:d2:81:2e:60:25:5c:8e:49:fc:19:c6:cd:51:82:c9:
         4e:d1:bb:44:33:94:d4:6c:1d:75:6c:5e:a6:0b:f9:78:56:3f:
         b3:b4:7d:f0:97:8f:16:ab:a3:0c:f1:be:5e:a0:c5:6f:cf:47:
         92:f9:e6:9a:51:95:0a:cd:81:e3:85:ec:4b:d8:5a:6e:0e:51:
         ef:70:d1:9b:9c:dd:fc:a9:69:1d:b6:98:3f:46:86:4d:49:69:
         80:ef:fd:f4:48:c1:3b:c8:43:c9:a7:94:b1:c0:be:74:76:9f:
         58:d5:74:a4:5f:a6:c4:88:68:b0:8e:df:a3:aa:df:58:02:a0:
         b5:56:cc:8d:a5:66:f4:19:90:3d:9a:e6:89:09:d6:91:39:7e:
         2a:38:2c:f4:2d:7d:3a:f2:65:7a:84:43:c2:db:40:15:64:05:
         82:eb:0e:e0:02:d3:f4:75:dd:c2:96:85:8a:3b:f0:ac:7c:82:
         3d:7e:dd:9e:0d:9b:77:9d:15:7b:74:cd:77:ba:52:d6:e1:84:
         22:d2:ae:74:fb:e6:e9:63:0c:c4:af:f9:eb:83:19:83:7f:c3:
         d3:8a:01:7b:5a:cb:fa:02:ea:51:c8:1f:85:dd:6a:20:e8:b9:
         88:74:8b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:29:53 2025 by rpki-client