Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/2ef408ad-35f8-33e4-b29d-64037f1ae171.roa
File:                     2ef408ad-35f8-33e4-b29d-64037f1ae171.roa (raw, json)
Hash identifier:          G24eUv7xqAA0PhXMKfn9+48mnoD8019NHbtI4l0pZJg=
Subject key identifier:   11:5A:C7:33:26:A2:92:1F:04:2E:4A:9D:98:5A:10:0D:E7:93:00:59
Certificate issuer:       /CN=b1f976fd-7fa0-4323-97fa-35bb869a9231
Certificate serial:       010D0C9F4328584B1D9C28AD5BE0FC434D531DC0
Authority key identifier: AE:9A:24:71:98:85:E6:0B:5D:3F:EE:2F:FD:CA:A1:6A:94:E0:27:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/2ef408ad-35f8-33e4-b29d-64037f1ae171.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     2055
IP address blocks:        173.253.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/b1f976fd-7fa0-4323-97fa-35bb869a9231.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/b1f976fd-7fa0-4323-97fa-35bb869a9231.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:28:ad:5b:e0:fc:43:4d:53:1d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1f976fd-7fa0-4323-97fa-35bb869a9231
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=87d419bb-0992-4974-a2e2-211c2a228e4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ce:fb:87:99:9c:1a:10:24:57:87:9e:47:67:
                    9b:a0:5b:e2:7d:9d:c5:0a:c2:4b:63:68:7d:3f:19:
                    bd:22:7e:8f:92:5d:ad:df:13:5c:be:f0:fe:65:7a:
                    3c:be:d3:ff:03:76:ee:8a:ba:e8:34:c1:40:27:dc:
                    fa:b1:4b:c4:68:53:5b:99:46:5e:50:f3:45:82:c7:
                    bd:2f:a1:fc:a9:72:95:fb:26:3f:2a:6e:77:59:80:
                    e7:91:bc:13:28:a6:5f:3c:75:4a:5a:83:8d:d5:a3:
                    38:9c:4b:55:93:5b:a6:24:0b:fe:68:47:61:32:c7:
                    66:99:e4:76:39:14:db:81:8d:0c:2b:7a:34:e3:3c:
                    86:18:d1:d8:98:da:6f:31:84:52:d1:a2:e0:27:7f:
                    2b:b2:51:06:4d:11:d8:89:ff:e1:3c:3b:f1:57:ef:
                    a7:ad:31:50:3c:46:8b:6b:60:95:1e:12:00:c9:2d:
                    8e:a4:9e:c1:27:68:1c:39:5c:7f:e5:3b:32:37:6b:
                    54:aa:c3:ff:c9:3c:cf:6d:5a:d2:4e:e0:5b:61:b2:
                    87:44:e8:62:0a:68:b1:e6:cd:d3:10:ad:eb:da:bb:
                    ac:ee:c8:f9:72:61:6c:b0:ac:c3:a5:45:03:d2:b5:
                    3a:71:5b:d8:7e:9f:44:8e:d1:da:3c:2d:e1:ed:70:
                    73:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:5A:C7:33:26:A2:92:1F:04:2E:4A:9D:98:5A:10:0D:E7:93:00:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/2ef408ad-35f8-33e4-b29d-64037f1ae171.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/b1f976fd-7fa0-4323-97fa-35bb869a9231.crl

            X509v3 Authority Key Identifier:
                keyid:AE:9A:24:71:98:85:E6:0B:5D:3F:EE:2F:FD:CA:A1:6A:94:E0:27:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.253.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:b3:02:16:e6:a2:b3:ff:b0:ee:af:0c:c0:f4:7f:f6:a6:73:
         63:c0:40:4a:84:a6:e9:45:e0:37:08:d2:bd:25:f9:14:bf:07:
         cb:5d:e3:cd:5f:41:14:16:74:2e:bc:8b:ce:74:c7:66:41:53:
         9c:cf:d4:59:1b:ec:53:e1:b4:75:81:63:e3:1a:06:3a:5c:cf:
         8b:a4:b3:53:6f:c4:66:ef:5d:95:8d:50:45:b0:57:96:16:c4:
         ae:e7:b6:81:d5:08:c0:77:6f:4f:2e:34:e5:ea:e7:02:95:f4:
         31:ca:e0:73:f0:4e:f2:0d:cc:0b:cd:b2:0d:cc:26:ce:a2:06:
         12:fe:b6:b7:58:42:84:4c:fd:44:0f:2e:99:01:4a:14:05:e6:
         31:32:07:2e:e2:e0:71:18:94:d8:54:46:5b:84:b8:7d:9d:84:
         9c:67:d6:d7:25:7c:74:30:80:55:da:a5:d0:1e:ae:9c:78:90:
         da:af:16:df:1c:12:64:c1:06:18:b2:cf:04:fa:2b:c0:a8:5f:
         3c:48:b8:c4:30:74:f6:56:55:ff:27:1b:0d:fd:a0:a8:92:e5:
         0e:a6:a4:62:e9:6e:21:67:0b:92:a3:07:a5:7e:f6:49:76:cb:
         0a:46:cf:11:48:a6:24:57:3e:1c:7c:6d:0d:29:4e:be:ad:f2:
         3c:2c:d3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 14:12:37 2025 by rpki-client