Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/59203874-4ce9-3ff4-a27c-b4bb8f6b012f.roa
File:                     59203874-4ce9-3ff4-a27c-b4bb8f6b012f.roa (raw, json)
Hash identifier:          r1f1OZm1JX99jxJ9O0udR8rdK3Msf7M3wLzZXF3SVEk=
Subject key identifier:   98:1B:71:7A:26:29:42:C3:EF:A2:5B:C8:4D:6F:16:B8:98:90:F4:17
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584B9B3D089E3C118851D1ED8DC0
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/59203874-4ce9-3ff4-a27c-b4bb8f6b012f.roa
Signing time:             Wed 22 Oct 2025 13:00:38 +0000
ROA not before:           Wed 22 Oct 2025 13:00:38 +0000
ROA not after:            Tue 20 Jan 2026 14:00:38 +0000
asID:                     62044
IP address blocks:        209.55.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9b:3d:08:9e:3c:11:88:51:d1:ed:8d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 22 13:00:38 2025 GMT
            Not After : Jan 20 14:00:38 2026 GMT
        Subject: CN=565ea1c4-d9d3-4f8c-a103-fa3585d5a8a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:90:34:63:13:30:68:1c:78:0f:29:3f:d7:8b:
                    b2:b2:d7:31:4b:99:66:a5:73:ec:d0:b4:66:f4:85:
                    78:3f:56:2e:7c:25:f2:15:02:f7:d0:d6:af:a7:58:
                    45:23:61:d9:dc:d7:7c:48:5a:c0:87:11:c3:91:81:
                    b2:cc:c9:1f:44:d3:2c:89:7a:fc:d4:9e:54:06:ff:
                    f0:ca:ce:f3:67:88:66:d1:82:12:03:b5:cb:83:a3:
                    87:14:c6:28:5c:74:ce:0f:26:f1:e6:65:c6:bc:69:
                    c6:1a:44:85:bb:a0:cf:20:b0:9a:38:d7:4e:81:79:
                    ad:c4:ac:80:dc:5f:dc:80:18:f1:2c:ee:61:b8:8a:
                    36:12:35:fc:ef:1a:3b:ec:d8:11:be:f9:78:ea:3a:
                    b4:af:4a:28:82:a3:01:ca:0d:45:88:95:74:db:17:
                    5c:65:24:bb:3a:0d:1e:60:9a:f5:e5:b4:05:c4:e5:
                    4c:42:e2:e1:8d:84:00:e1:09:0f:db:6b:2d:a9:b1:
                    f3:79:97:dd:e5:86:29:2f:e3:91:36:37:de:43:08:
                    9f:2b:e5:7c:c5:3c:03:a4:ae:4e:60:bf:f7:50:95:
                    8b:be:d6:77:02:c8:41:ad:57:43:c8:76:12:0b:d9:
                    8e:ae:d8:a4:b3:80:cb:0b:ab:78:de:f4:d4:a0:49:
                    88:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:1B:71:7A:26:29:42:C3:EF:A2:5B:C8:4D:6F:16:B8:98:90:F4:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/59203874-4ce9-3ff4-a27c-b4bb8f6b012f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.55.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:ed:83:44:a2:6a:60:90:ab:43:9f:76:0a:a8:4c:4f:79:43:
         58:f4:be:88:85:a5:82:07:44:59:6c:7a:79:9b:31:21:42:91:
         20:fa:37:da:06:2c:d6:9b:62:30:03:27:49:fa:bb:18:7b:42:
         ec:a0:5d:b9:ac:db:67:d8:a1:27:34:34:a2:76:d6:a2:21:22:
         14:51:45:ff:78:82:1f:c6:a4:58:4f:bf:d4:6e:59:5a:b5:c7:
         b6:02:e9:c9:a4:29:47:c1:d7:7f:55:09:ca:6e:e4:62:21:ea:
         64:44:70:07:54:cb:4d:eb:d7:eb:7e:74:df:2e:d0:6b:48:c7:
         0f:3a:7a:93:27:e4:28:5c:66:5f:74:d3:55:35:37:88:23:e1:
         cb:f4:aa:db:1c:53:88:e3:b4:b7:93:ad:ad:b7:7d:b1:b8:08:
         2f:59:ba:8b:70:7f:7a:f5:12:2e:fb:ec:45:89:4d:60:d6:a4:
         b3:8c:53:da:90:dc:e6:36:cd:67:e9:8f:46:bc:e1:29:a7:72:
         37:8c:bc:61:b4:f7:30:1d:7f:2a:d4:90:85:46:a9:c1:9f:e7:
         18:06:51:07:aa:02:19:39:79:75:5c:e5:b8:c2:22:1a:08:8a:
         db:e8:62:9f:dd:92:a6:7e:90:7d:88:b1:e9:56:54:4a:db:a7:
         87:ee:1e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 08:17:52 2025 by rpki-client