Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/7fd5bf91-228e-3672-967b-c25d825ce3ff.roa
File:                     7fd5bf91-228e-3672-967b-c25d825ce3ff.roa (raw, json)
Hash identifier:          ggH6sWHCtwVzj0aJraDFrh3XbTtVHrrEOLpilqKoJWg=
Subject key identifier:   98:F4:DD:72:94:38:B6:EB:DA:89:D7:0B:3C:0A:1B:92:E6:3B:D8:38
Certificate issuer:       /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
Certificate serial:       010D0C9F4328584BA7CCEE037B02AAD62116DDFA
Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/7fd5bf91-228e-3672-967b-c25d825ce3ff.roa
Signing time:             Mon 27 Oct 2025 01:00:31 +0000
ROA not before:           Mon 27 Oct 2025 01:00:31 +0000
ROA not after:            Sun 25 Jan 2026 02:00:31 +0000
asID:                     55015
IP address blocks:        209.183.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a7:cc:ee:03:7b:02:aa:d6:21:16:dd:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
        Validity
            Not Before: Oct 27 01:00:31 2025 GMT
            Not After : Jan 25 02:00:31 2026 GMT
        Subject: CN=3785fce6-96f3-42bf-b15e-61b2b6d696d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:40:49:70:ee:ab:29:06:89:da:74:8a:13:7d:
                    5c:48:ed:7f:21:69:e2:e7:49:ef:76:8e:78:c2:08:
                    00:37:d3:00:d9:d4:2d:8d:60:1e:89:98:b6:4a:94:
                    b3:ef:49:fb:67:39:14:fd:7e:65:a3:45:0c:51:6a:
                    c2:a0:24:c8:4c:d2:ba:12:2b:fd:9e:9c:b3:b9:22:
                    4a:b8:69:7a:39:b3:45:8f:76:ee:f0:5f:30:81:c1:
                    98:3c:43:76:b6:72:98:c2:d9:5d:a5:17:cd:1a:94:
                    06:57:fd:7f:ee:ed:cb:38:2e:5b:9a:c9:16:48:7c:
                    9f:af:e8:6a:99:99:74:40:7d:19:df:2a:41:4d:e9:
                    0b:b3:10:b7:58:06:f6:70:be:bf:08:31:2a:2f:8b:
                    ab:f8:ff:9f:64:d6:64:e4:22:56:f9:ab:aa:a5:e9:
                    c5:da:e5:d9:dd:89:e9:0f:fe:79:13:8c:e6:3e:4c:
                    1b:30:01:da:f9:25:f9:0e:b2:dc:7e:6f:01:f6:24:
                    a1:31:aa:37:b3:37:0d:2c:8e:a8:6e:75:a7:81:75:
                    b0:01:ed:ee:e7:51:b0:7f:4f:a9:6f:2d:45:77:c1:
                    0e:18:af:51:0f:fd:29:fc:dc:e0:94:0e:26:7b:ca:
                    4e:f6:b7:11:5c:0a:ec:f1:fa:e2:b7:28:6c:aa:21:
                    f7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F4:DD:72:94:38:B6:EB:DA:89:D7:0B:3C:0A:1B:92:E6:3B:D8:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/7fd5bf91-228e-3672-967b-c25d825ce3ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl

            X509v3 Authority Key Identifier:
                keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.183.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:f9:7f:39:0c:56:47:ac:66:da:0e:c4:46:66:c7:e8:c0:c3:
         9e:0d:9e:e4:c4:0b:d1:7a:de:73:ee:b2:85:34:c4:08:9c:7a:
         94:08:08:bb:1f:a1:6b:ee:db:53:ab:80:1a:1a:65:44:47:b8:
         10:c1:85:4e:b7:b7:5c:89:12:a8:0a:d2:25:57:b2:63:4e:a0:
         4b:fe:90:d5:01:b8:8a:c9:67:5b:15:ea:3f:72:a4:75:06:0e:
         ec:f7:a3:85:1c:6e:6b:82:96:26:c3:a1:ea:f6:e5:10:18:89:
         a4:85:39:c2:7e:c9:fc:e6:ef:ec:be:20:b2:7e:d9:b6:dc:4b:
         34:8c:ca:92:65:2a:f1:3c:3e:39:d0:70:d9:bc:74:13:a9:00:
         7e:c8:a6:59:b3:37:b0:ea:2e:a3:7b:91:0f:69:2f:b5:2b:a9:
         a2:3c:fa:ce:77:9f:4f:3b:de:3f:44:98:3b:55:0e:f1:9d:4d:
         52:ef:d8:d7:2c:55:f2:3e:74:6d:b2:19:94:cb:12:d8:b4:51:
         9a:bf:75:eb:65:a5:ac:4f:df:50:bd:4a:b9:42:b9:a9:ab:a6:
         85:32:83:8e:eb:d0:3d:37:44:55:c6:10:85:10:a0:99:81:c2:
         1d:22:18:dd:fa:49:89:23:8f:4d:be:e4:a1:e9:95:bd:16:c8:
         bf:d2:3a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 14:39:01 2025 by rpki-client