Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/550daf18-84b0-3f96-a399-ac2375fc6049.roa
File:                     550daf18-84b0-3f96-a399-ac2375fc6049.roa (raw, json)
Hash identifier:          qJHpDbkwwTH39pTXiKE4WIlwSjB9PvZv7cHl2wwnlRI=
Subject key identifier:   79:2E:7F:BB:6F:54:A5:E9:81:14:81:0F:48:F5:7D:9D:30:E7:D9:FD
Certificate issuer:       /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial:       010D0C9F4328584B95A78B5D533219B05A72EF80
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/550daf18-84b0-3f96-a399-ac2375fc6049.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     2386
IP address blocks:        69.51.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a7:8b:5d:53:32:19:b0:5a:72:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=ba162530-ae28-433b-b939-6aca0cb89a93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a2:49:90:c5:87:c2:c2:65:a0:f5:48:2c:d3:
                    4a:c9:00:96:ef:b9:dc:e8:6a:03:25:01:62:19:fc:
                    b4:16:6c:d0:a4:46:b5:6d:bb:de:d1:8e:08:90:b0:
                    0b:b8:50:06:70:50:19:29:3c:c4:ca:a8:20:cc:69:
                    c8:e8:ca:ed:91:33:a1:79:4b:2f:4e:e3:90:54:1b:
                    7c:7f:81:33:87:17:9c:4a:3e:f3:85:c3:2e:8c:1c:
                    b0:79:a3:e0:5f:18:6e:71:04:00:2e:fd:84:be:2d:
                    c2:9e:88:97:5a:c9:2f:b8:36:59:a8:c1:9e:bd:2f:
                    b0:e4:70:b4:aa:ea:22:75:4b:fb:50:af:b0:d8:35:
                    9a:51:23:c1:f5:41:be:5d:a1:b7:f3:ba:3e:76:16:
                    dd:08:0c:a1:5d:08:d7:fa:5a:e5:0f:5a:dc:23:ca:
                    60:db:82:71:18:53:0c:26:1a:65:7c:e5:1b:e5:c8:
                    f7:bb:7b:f7:8a:f6:3a:1c:4b:b9:de:31:11:47:26:
                    75:c4:ab:38:9d:d5:82:7e:61:af:c2:c7:27:07:51:
                    e6:eb:04:3e:75:c6:f0:43:1a:27:e1:bc:2c:1f:0d:
                    0e:6b:ab:fc:af:a8:f2:da:ab:f9:29:12:7a:31:27:
                    75:fa:96:1e:56:b6:59:90:65:ee:30:12:66:37:76:
                    49:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:2E:7F:BB:6F:54:A5:E9:81:14:81:0F:48:F5:7D:9D:30:E7:D9:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/550daf18-84b0-3f96-a399-ac2375fc6049.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl

            X509v3 Authority Key Identifier:
                keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.51.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:82:b0:09:63:fd:c2:29:db:5a:fb:0d:3f:fc:5f:60:ab:a7:
         7a:7c:1b:7e:ef:59:5c:38:c1:c1:de:1f:96:63:c8:aa:35:22:
         8a:c1:0d:5a:58:99:9c:50:60:2d:56:f8:67:f0:40:71:96:17:
         c2:45:b8:e8:b7:8c:8b:04:d4:51:ed:f2:82:0b:92:0f:bb:90:
         f4:12:0f:df:d1:09:48:49:e0:e3:92:b9:9d:92:fb:b5:54:70:
         0d:59:79:12:5b:3c:84:ff:c9:7b:57:96:c0:89:12:e0:7a:ed:
         c0:ff:74:b5:c7:60:04:e8:74:22:cb:a0:38:77:28:ba:91:84:
         b1:23:8d:1f:7c:13:c9:e2:9b:1a:72:34:73:8b:2e:af:73:92:
         6c:42:b2:9f:a0:fa:c6:c4:26:a0:31:58:bc:ff:78:d0:2e:26:
         4d:b6:45:30:cb:52:ef:42:a0:02:48:7a:d2:69:9e:eb:16:2d:
         9f:4a:9e:3b:64:e0:c9:77:54:74:bf:c3:a4:0a:07:15:de:6b:
         65:5e:bd:38:ff:c5:9b:eb:e3:1e:22:11:dc:c3:21:7a:63:64:
         c3:69:07:b8:62:31:eb:d6:05:6e:d5:87:af:65:c3:08:ba:11:
         c2:2f:da:4f:86:f2:c9:3b:63:dd:05:b1:09:c7:70:26:7b:53:
         cc:f2:30:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 8 16:57:11 2025 by rpki-client