Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/bc9bb3b3-726a-37bc-83b1-d62979706eff.roa
File:                     bc9bb3b3-726a-37bc-83b1-d62979706eff.roa (raw, json)
Hash identifier:          SRSdJ8DqpKllRYGF3ZG618rnpq23oMiPDR9emHn2g2o=
Subject key identifier:   AD:C1:AE:45:C2:41:EC:AC:17:94:42:95:51:F7:91:2B:CF:6D:74:37
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584EDDF74D3BBDDD9109BC7786C0
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/bc9bb3b3-726a-37bc-83b1-d62979706eff.roa
Signing time:             Mon 17 Aug 2026 13:00:11 +0000
ROA not before:           Mon 17 Aug 2026 13:00:11 +0000
ROA not after:            Sun 15 Nov 2026 14:00:11 +0000
asID:                     62044
IP address blocks:        209.55.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dd:f7:4d:3b:bd:dd:91:09:bc:77:86:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug 17 13:00:11 2026 GMT
            Not After : Nov 15 14:00:11 2026 GMT
        Subject: CN=986d85a1-8fce-4ec5-ae83-022c7d499e64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:34:1f:93:87:c8:ee:e8:13:6e:8f:68:78:d4:
                    07:0f:61:91:5e:dc:89:d7:09:ca:70:49:d9:4e:f2:
                    05:6c:1b:14:f0:cb:84:f8:b4:9d:47:a7:09:0b:f8:
                    66:69:db:01:f5:0b:c7:30:d6:00:29:87:de:c0:03:
                    0c:1c:33:78:72:43:f1:aa:26:51:9a:cc:3a:2f:67:
                    1b:eb:6d:d2:46:58:4e:82:7a:d7:46:94:79:5a:37:
                    b2:f0:7e:ec:dd:67:cf:2e:92:21:fb:f2:8a:b7:ec:
                    69:c9:36:94:36:49:e5:2f:47:d1:5e:df:5a:fd:1e:
                    56:71:8a:b5:b3:d7:39:81:d6:a2:af:40:be:9f:f0:
                    27:d2:f4:b1:ba:77:f2:ef:b8:79:41:9a:c2:46:23:
                    14:3d:ec:2f:f6:ae:d2:84:ff:c9:8c:cb:45:c8:24:
                    58:32:ce:98:63:9b:70:b6:3f:72:2a:22:24:80:84:
                    da:8b:77:9a:69:b8:bd:92:65:9d:b2:78:eb:68:4c:
                    14:e9:3d:49:ad:9a:6e:7f:5f:ff:ec:d6:8b:5e:93:
                    f2:b1:a0:e6:e8:c6:6d:58:26:2f:9b:8f:ec:b6:17:
                    be:a2:67:ab:cf:bc:e6:7d:94:75:d2:6b:6e:2e:b8:
                    7e:0d:ff:e4:91:eb:da:7a:5b:cf:9d:57:78:e2:7e:
                    11:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C1:AE:45:C2:41:EC:AC:17:94:42:95:51:F7:91:2B:CF:6D:74:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/bc9bb3b3-726a-37bc-83b1-d62979706eff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.55.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:87:94:0c:72:24:4d:70:d6:9c:5d:99:d3:f0:3b:10:55:37:
         37:0e:e9:e9:cd:02:c2:18:47:dd:3f:12:92:0c:62:aa:1d:dc:
         86:28:bb:1d:6f:1a:ec:91:69:67:46:55:66:4d:89:26:63:1b:
         c5:fa:52:d1:cd:ec:62:e4:05:17:bd:3d:6f:a2:7d:7a:20:81:
         6d:50:7b:d0:a0:82:57:c0:64:57:5f:91:01:be:7f:65:8c:7a:
         30:6b:4b:74:e4:89:89:8d:a1:40:ca:fc:43:ed:7f:0f:79:23:
         a7:39:0e:1d:96:c9:1b:90:23:46:29:fb:34:85:70:34:06:e2:
         e7:b7:ad:64:6b:7d:dd:54:88:a8:cf:09:9b:70:fc:fb:ff:f9:
         79:19:16:61:6d:63:2b:a4:d4:23:6f:2f:ec:fd:4d:2c:f9:25:
         c0:f4:62:86:1d:e2:c5:3a:8c:24:95:16:fe:44:21:89:d7:1d:
         52:30:47:f4:03:de:52:d7:5f:3d:ba:74:9c:d5:38:21:f5:7a:
         4b:bd:59:98:69:31:f3:2a:4d:87:dc:88:0a:c9:24:06:44:37:
         0d:a3:c2:bc:09:56:e8:e3:57:93:2d:fe:67:a9:3e:58:49:27:
         84:89:62:9b:e0:97:b7:e8:f9:8b:1d:2f:69:0e:9a:c1:88:e3:
         de:af:4a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 15:03:34 2026 by rpki-client