Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/6f583cb2-e2b8-3a8d-b855-797075eadfd0.roa
File:                     6f583cb2-e2b8-3a8d-b855-797075eadfd0.roa (raw, json)
Hash identifier:          vabAqQm6yDLrGShD93Lva14XzhTfYU+71UcJmRBbIYc=
Subject key identifier:   91:01:28:20:05:A9:5B:5F:2F:27:3C:56:3E:AF:A1:61:9F:10:E3:AD
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584B9B3D07C679E2FD42FEBAD680
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/6f583cb2-e2b8-3a8d-b855-797075eadfd0.roa
Signing time:             Wed 22 Oct 2025 13:00:38 +0000
ROA not before:           Wed 22 Oct 2025 13:00:38 +0000
ROA not after:            Tue 20 Jan 2026 14:00:38 +0000
asID:                     53813
IP address blocks:        209.55.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9b:3d:07:c6:79:e2:fd:42:fe:ba:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 22 13:00:38 2025 GMT
            Not After : Jan 20 14:00:38 2026 GMT
        Subject: CN=9076bec4-cc64-4053-b780-871cb2bde0db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a6:e0:29:17:4d:a2:2f:f4:d3:2f:24:f9:27:
                    95:3d:f1:4e:bb:31:1e:cd:bb:52:74:68:cb:5d:77:
                    b6:6e:74:b0:ba:9c:59:ee:95:8f:cc:00:4e:e7:8e:
                    1d:86:1d:db:9e:9b:8a:43:69:b7:6d:18:0e:5d:e6:
                    f3:f3:90:a5:09:fa:35:86:43:df:a9:89:36:83:5d:
                    25:a9:e5:27:fa:f0:fa:9c:03:5b:1c:39:ab:52:10:
                    e0:d6:3a:bd:b8:d7:68:c5:72:96:55:6c:2d:5c:05:
                    15:13:65:91:41:68:44:82:fb:ff:20:15:9d:6e:69:
                    1b:0d:8a:b8:fe:12:8a:dd:35:c0:1f:62:68:d6:96:
                    82:52:45:56:11:f4:de:ed:5c:35:c4:61:b2:c6:e8:
                    08:23:38:52:3e:77:c9:83:ae:ae:7c:92:e4:ab:2f:
                    93:1a:12:ea:3b:8d:ec:82:51:71:43:8a:dd:bb:bd:
                    f7:01:20:53:6a:6b:21:15:75:26:ee:46:2b:29:1a:
                    3a:c8:f5:6c:5c:33:b9:6d:02:d7:6b:1f:eb:09:5e:
                    ba:11:ef:3e:3a:f7:9f:d8:bd:13:3d:90:ee:df:b7:
                    4e:39:08:3c:3e:bc:b8:0a:f7:fa:b2:a8:82:d8:e7:
                    8f:a7:38:14:7f:e1:6a:4d:bf:7e:47:12:d2:e5:83:
                    8b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:01:28:20:05:A9:5B:5F:2F:27:3C:56:3E:AF:A1:61:9F:10:E3:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/6f583cb2-e2b8-3a8d-b855-797075eadfd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.55.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:99:97:1a:7d:dc:9b:5e:fc:fa:05:e5:e9:19:74:39:78:d5:
         a5:54:75:6e:20:ca:3e:98:d9:25:b0:82:9c:87:fb:6b:5b:9d:
         f3:e2:1b:f8:69:a0:7b:8b:6f:0e:d0:7a:6d:5b:1f:b1:87:a8:
         ed:4c:14:92:af:47:c5:c0:99:9e:33:0f:08:35:db:6b:1e:ba:
         69:77:38:be:ca:39:b5:6c:2b:6a:d9:52:50:7b:b2:04:76:44:
         45:44:17:f6:d3:10:56:fa:42:10:3f:d4:ea:23:23:5c:0a:1e:
         82:3f:a6:43:8d:60:df:5c:90:c4:58:7f:ae:8a:3a:75:95:f0:
         98:0a:04:45:e5:71:13:ec:c2:a5:4a:cf:04:66:ff:b1:32:bb:
         9e:21:10:04:65:5c:50:8b:36:7f:12:25:86:2e:3a:3c:61:ef:
         b8:7f:2f:14:1d:bb:9f:21:99:c0:91:c0:34:a9:d1:e8:6e:b8:
         3a:49:5c:dd:c0:00:40:1b:7f:4d:e9:6e:64:12:d7:54:80:45:
         48:67:a9:80:f2:9e:f0:53:b6:ac:f2:8e:ae:8b:eb:77:b6:bb:
         82:f7:e5:e7:13:a9:e1:40:7e:c3:bd:1a:33:79:a3:f3:15:4d:
         6e:76:9b:a5:1a:4a:96:92:b3:ff:5c:10:3c:48:64:c9:9e:13:
         2e:ee:55:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPQfGeeL9Qv661oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk
OTA3NmJlYzQtY2M2NC00MDUzLWI3ODAtODcxY2IyYmRlMGRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqbgKRdNoi/00y8k+SeVPfFOuzEezbtSdGjL
XXe2bnSwupxZ7pWPzABO544dhh3bnpuKQ2m3bRgOXebz85ClCfo1hkPfqYk2g10l
qeUn+vD6nANbHDmrUhDg1jq9uNdoxXKWVWwtXAUVE2WRQWhEgvv/IBWdbmkbDYq4
/hKK3TXAH2Jo1paCUkVWEfTe7Vw1xGGyxugIIzhSPnfJg66ufJLkqy+TGhLqO43s
glFxQ4rdu733ASBTamshFXUm7kYrKRo6yPVsXDO5bQLXax/rCV66Ee8+Ovef2L0T
PZDu37dOOQg8Pry4Cvf6sqiC2OePpzgUf+FqTb9+RxLS5YOLkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJEBKCAFqVtfLyc8Vj6voWGfEOOtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNmY1ODNjYjItZTJiOC0z
YThkLWI4NTUtNzk3MDc1ZWFkZmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TepMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF+Zlxp93Jte/PoF5ekZdDl41aVUdW4gyj6Y2SWwgpyH+2tbnfPiG/hp
oHuLbw7Qem1bH7GHqO1MFJKvR8XAmZ4zDwg122seuml3OL7KObVsK2rZUlB7sgR2
REVEF/bTEFb6QhA/1OojI1wKHoI/pkONYN9ckMRYf66KOnWV8JgKBEXlcRPswqVK
zwRm/7Eyu54hEARlXFCLNn8SJYYuOjxh77h/LxQdu58hmcCRwDSp0ehuuDpJXN3A
AEAbf03pbmQS11SARUhnqYDynvBTtqzyjq6L63e2u4L35ecTqeFAfsO9GjN5o/MV
TW52m6UaSpaSs/9cEDxIZMmeEy7uVf8=
-----END CERTIFICATE-----
Generated at Thu Oct 23 02:14:51 2025 by rpki-client