Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c015245c-7c31-303b-9418-d31c7bcc55da.roa
File:                     c015245c-7c31-303b-9418-d31c7bcc55da.roa (raw, json)
Hash identifier:          /LRpXDyC/Ee1o6+jgKqXtQI6e8SpNYytD/FXKZcyK60=
Subject key identifier:   C0:D5:9F:3B:96:E1:8F:BE:C1:FF:64:29:EC:EE:84:41:87:4D:1A:FB
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584B9B3D0855989A8805B30ACA00
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c015245c-7c31-303b-9418-d31c7bcc55da.roa
Signing time:             Wed 22 Oct 2025 13:00:38 +0000
ROA not before:           Wed 22 Oct 2025 13:00:38 +0000
ROA not after:            Tue 20 Jan 2026 14:00:38 +0000
asID:                     53813
IP address blocks:        209.55.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9b:3d:08:55:98:9a:88:05:b3:0a:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 22 13:00:38 2025 GMT
            Not After : Jan 20 14:00:38 2026 GMT
        Subject: CN=e71a8bbc-f6cb-4bea-b2c8-e7a4b4f9d40d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3d:7c:32:6a:50:35:06:ec:56:31:be:da:f6:
                    84:30:20:c1:d1:9d:25:83:b6:b7:0a:cf:6f:4b:25:
                    ab:9a:31:fa:95:44:7b:e4:81:c3:42:1b:00:55:ae:
                    3a:06:b5:41:d2:ea:69:a3:8a:21:35:66:ad:05:3f:
                    e5:ae:7f:29:3a:c5:8f:f0:0c:ce:1f:a7:2f:29:22:
                    1d:14:39:4a:b5:35:0e:90:bb:28:53:a1:ec:b7:c3:
                    b2:b9:23:c2:4a:bc:96:d1:d1:5c:fe:3c:33:8a:1c:
                    2a:fe:81:df:1c:58:e8:58:25:4b:64:f6:9f:d3:69:
                    fe:e7:52:05:99:0f:df:6c:e5:2e:1a:27:cb:41:1e:
                    7d:c0:d0:4b:ae:03:33:dc:03:9a:a0:58:6c:a5:9d:
                    1c:9a:7e:5a:78:cc:a2:2c:cc:44:4f:92:95:b9:62:
                    f7:d1:92:30:d8:da:86:e6:d5:bf:7f:6a:05:21:92:
                    74:61:ac:90:a9:2c:ec:e7:92:73:6e:39:bc:71:aa:
                    9b:da:99:2d:55:62:19:10:4e:94:86:e0:16:11:7e:
                    79:b6:2b:56:f8:29:9f:08:79:d5:6b:cf:48:05:04:
                    99:94:42:d0:6d:57:e5:75:4a:70:2a:a8:16:5f:3d:
                    05:d7:7b:a3:b4:8c:7f:84:4e:a0:bd:27:fe:96:84:
                    ff:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D5:9F:3B:96:E1:8F:BE:C1:FF:64:29:EC:EE:84:41:87:4D:1A:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c015245c-7c31-303b-9418-d31c7bcc55da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.55.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:ad:66:c9:a2:8f:5d:74:af:6c:2b:a1:83:e2:36:8c:a1:95:
         f7:b0:18:26:fc:d8:68:aa:86:eb:55:0d:4a:02:d1:0d:22:69:
         c5:4f:ad:e1:dd:62:14:59:f8:3f:e8:4f:af:69:93:25:93:19:
         ca:ac:eb:1a:62:e6:3c:6c:8e:e6:6f:96:5c:68:03:86:14:10:
         4b:0c:07:9a:99:e4:95:4b:fa:e2:97:b0:b3:c0:56:b2:b0:7c:
         06:08:ad:80:5b:78:2d:c8:9f:14:f3:5a:0d:d3:4b:fb:d0:3d:
         70:63:db:36:bd:dd:80:65:65:be:8e:b6:36:a6:81:d9:75:e2:
         67:53:e7:e6:87:b4:15:06:92:9e:40:8d:04:93:59:db:d4:1d:
         fc:b9:76:9c:43:fd:25:0a:ef:3d:5a:35:df:04:63:e5:a6:08:
         b9:a0:a0:36:21:04:53:c5:0d:2b:33:b6:28:db:f2:a3:c2:21:
         b7:3b:ff:3b:1f:b6:46:02:56:b6:ce:93:56:2d:4f:75:27:2c:
         d3:99:23:21:82:3c:7b:2f:8e:da:09:2a:39:dc:2f:a3:2f:60:
         cd:f6:ae:70:99:0c:b9:44:88:f0:d9:fd:8a:eb:e4:43:3d:02:
         e5:43:8a:65:fe:d4:a4:1c:ce:aa:dc:38:a6:3f:f1:75:4a:ba:
         ca:90:cf:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 02:14:52 2025 by rpki-client