Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/2932acef-5b18-3b72-8370-606f054ed25b.roa
File:                     2932acef-5b18-3b72-8370-606f054ed25b.roa (raw, json)
Hash identifier:          ph25kT+IJmCO/VnMbQEalU7MV3FhfQGOhCHjRzQ+TzI=
Subject key identifier:   C7:B9:B2:67:6F:3E:35:4A:54:CF:37:5F:63:00:EF:1D:37:9A:47:A9
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584B74274CF9588E0E7056F58900
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/2932acef-5b18-3b72-8370-606f054ed25b.roa
Signing time:             Wed 08 Oct 2025 13:00:37 +0000
ROA not before:           Wed 08 Oct 2025 13:00:37 +0000
ROA not after:            Tue 06 Jan 2026 14:00:37 +0000
asID:                     271
IP address blocks:        209.87.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:74:27:4c:f9:58:8e:0e:70:56:f5:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Oct  8 13:00:37 2025 GMT
            Not After : Jan  6 14:00:37 2026 GMT
        Subject: CN=29dbc543-59f9-448b-adca-c6412b581394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:00:17:38:d6:f8:d0:59:f8:26:cb:28:f0:ba:
                    58:df:31:19:41:11:76:dc:d3:80:1c:eb:bd:32:4d:
                    fc:47:0a:eb:06:2c:80:2d:87:38:96:fe:d3:16:6a:
                    16:b8:cb:4c:54:69:2d:f1:0b:41:a7:e4:9e:d1:47:
                    49:09:d4:6e:18:b8:90:2a:8a:0e:ce:b7:f2:69:2d:
                    f6:ac:cd:a1:98:16:29:ce:e5:04:2b:5c:0d:99:64:
                    16:1c:92:15:30:e2:a1:07:b0:b3:2d:11:bb:d6:fd:
                    f2:4f:4d:70:69:b1:09:74:e7:9f:e9:e9:03:de:f4:
                    8f:66:d8:44:ff:ee:8d:4e:a6:5b:f1:bb:a9:f3:3a:
                    22:b2:e1:c6:34:39:fc:63:a5:e5:ef:7c:d9:9b:52:
                    74:34:c1:ac:24:fd:b4:97:fe:9c:c7:33:ab:f0:e8:
                    51:c9:bb:af:76:1d:c4:61:ed:72:0c:27:2b:fa:3c:
                    c4:08:ab:56:83:7f:a5:59:29:a9:52:67:ba:0b:52:
                    13:e3:c7:8b:1f:f9:9c:00:74:f6:ab:cf:03:28:59:
                    05:ba:7b:79:cb:d0:15:62:36:d2:de:5f:ed:ff:27:
                    44:65:2f:29:76:df:01:8d:68:4d:44:5e:64:83:ce:
                    b1:9c:d1:af:a8:88:44:28:6b:76:94:1e:85:91:5f:
                    e7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B9:B2:67:6F:3E:35:4A:54:CF:37:5F:63:00:EF:1D:37:9A:47:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/2932acef-5b18-3b72-8370-606f054ed25b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:7a:9a:78:5c:7a:bb:26:21:34:92:d9:70:f7:f7:68:d2:fb:
         6c:ef:88:69:2c:18:4c:64:b5:85:a1:15:47:1c:48:eb:b1:bc:
         83:4e:49:58:36:ff:cd:60:f5:38:f9:e3:09:dc:b5:53:67:a5:
         84:81:2c:19:da:e6:d0:ab:36:a8:cc:60:6a:33:67:44:1c:6b:
         f8:85:5c:2e:b2:c6:04:69:43:d3:ba:ba:07:78:1c:a9:a1:7a:
         de:ce:4e:14:a8:6f:bf:b2:03:26:a9:5b:67:82:81:3e:96:6f:
         2a:8e:d3:77:01:d2:e4:20:24:c7:98:3e:23:6d:14:30:b7:6f:
         4f:2e:0e:f8:60:18:52:c1:26:41:c7:71:a2:54:63:0e:ff:45:
         2b:be:3a:36:c2:91:c8:68:1a:9b:87:12:3c:0c:55:ae:7b:3f:
         a5:ea:54:2f:b7:49:a0:c1:7a:2f:4a:2d:2f:f6:52:f4:66:e1:
         82:22:ed:e9:b6:69:5b:72:4e:41:90:ca:5c:d6:d6:f9:5b:f3:
         00:9d:61:61:b7:dd:4d:c1:9f:0d:83:6d:88:5b:2a:24:c8:72:
         ce:ee:c9:65:22:c3:25:c5:b7:b6:f5:82:ef:12:71:fe:22:f8:
         b5:75:ad:b4:49:ff:6e:01:c0:58:97:1d:5e:ed:54:50:fd:3f:
         16:dc:53:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt0J0z5WI4OcFb1iQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2
OTZjMB4XDTI1MTAwODEzMDAzN1oXDTI2MDEwNjE0MDAzN1owLzEtMCsGA1UEAxMk
MjlkYmM1NDMtNTlmOS00NDhiLWFkY2EtYzY0MTJiNTgxMzk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQAXONb40Fn4Jsso8LpY3zEZQRF23NOAHOu9
Mk38RwrrBiyALYc4lv7TFmoWuMtMVGkt8QtBp+Se0UdJCdRuGLiQKooOzrfyaS32
rM2hmBYpzuUEK1wNmWQWHJIVMOKhB7CzLRG71v3yT01wabEJdOef6ekD3vSPZthE
/+6NTqZb8bup8zoisuHGNDn8Y6Xl73zZm1J0NMGsJP20l/6cxzOr8OhRybuvdh3E
Ye1yDCcr+jzECKtWg3+lWSmpUme6C1IT48eLH/mcAHT2q88DKFkFunt5y9AVYjbS
3l/t/ydEZS8pdt8BjWhNRF5kg86xnNGvqIhEKGt2lB6FkV/nRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMe5smdvPjVKVM83X2MA7x03mkepMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy
ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvMjkzMmFjZWYtNWIxOC0z
YjcyLTgzNzAtNjA2ZjA1NGVkMjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh
NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli
Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj
MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Vc3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGJ6mnhcersmITSS2XD392jS+2zviGksGExktYWhFUccSOuxvINOSVg2
/81g9Tj54wnctVNnpYSBLBna5tCrNqjMYGozZ0Qca/iFXC6yxgRpQ9O6ugd4HKmh
et7OThSob7+yAyapW2eCgT6WbyqO03cB0uQgJMeYPiNtFDC3b08uDvhgGFLBJkHH
caJUYw7/RSu+OjbCkchoGpuHEjwMVa57P6XqVC+3SaDBei9KLS/2UvRm4YIi7em2
aVtyTkGQylzW1vlb8wCdYWG33U3Bnw2DbYhbKiTIcs7uyWUiwyXFt7b1gu8Scf4i
+LV1rbRJ/24BwFiXHV7tVFD9PxbcUws=
-----END CERTIFICATE-----
Generated at Sat Oct 11 02:43:26 2025 by rpki-client