Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/0dfb1c51-5341-326e-9a26-e9c646ed2550.roa
File:                     0dfb1c51-5341-326e-9a26-e9c646ed2550.roa (raw, json)
Hash identifier:          GBKFOKbG3G8Y2lImyPj4TRfjy0XeFj/d0GbQ74M4z0o=
Subject key identifier:   80:AD:55:B0:81:61:81:39:96:A7:39:FD:16:15:4E:EE:F5:EE:93:C3
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F4328584AB220DC16FDAA2A0624FB04B0
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/0dfb1c51-5341-326e-9a26-e9c646ed2550.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     13760
IP address blocks:        209.209.210.0/23 maxlen: 23
                          209.209.212.0/23 maxlen: 23
                          209.209.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:dc:16:fd:aa:2a:06:24:fb:04:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=74e23164-c35e-4560-bdc1-0f328f3f8c00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ff:5b:cc:5e:16:dc:a5:97:a0:c7:2a:2b:2f:
                    b7:38:13:c1:21:d7:16:63:d4:c9:7e:d3:81:dc:cf:
                    e1:32:62:42:3d:4b:52:33:44:49:2c:eb:a1:d0:5e:
                    2b:19:19:1b:a3:78:c6:73:1f:b8:eb:da:b9:6a:c3:
                    13:ff:12:25:9a:01:e6:eb:f2:39:46:6a:a9:27:a5:
                    a8:80:00:3a:b0:eb:01:2e:a3:c9:d7:db:6c:9f:6e:
                    53:33:10:8d:e8:bb:0d:b7:ac:af:74:99:c7:6b:3d:
                    70:9c:cc:56:08:c5:19:84:eb:4d:6d:b6:4c:de:dd:
                    55:8e:d6:8c:a1:ba:86:34:f7:c4:db:c5:c9:3a:9a:
                    a8:c9:6f:84:9b:ec:3a:89:56:99:71:04:56:30:96:
                    4f:f1:54:2e:a5:e4:74:bc:85:e5:ad:e5:84:ee:2a:
                    c2:77:69:12:86:14:77:23:16:21:15:32:1a:25:b8:
                    57:5d:1d:2d:e9:28:95:e2:d2:d2:56:dc:2f:e4:0a:
                    b6:8c:a6:62:f0:72:da:a9:a1:14:6d:70:0b:70:b7:
                    43:a7:67:19:f6:98:4c:99:6a:ed:14:11:fe:6b:18:
                    c3:ec:65:25:73:01:03:d8:ba:20:3d:2a:ef:1b:b9:
                    f3:ea:4f:ec:e6:9e:04:89:83:f7:2c:0f:9d:97:33:
                    7e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:AD:55:B0:81:61:81:39:96:A7:39:FD:16:15:4E:EE:F5:EE:93:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/0dfb1c51-5341-326e-9a26-e9c646ed2550.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.209.210.0-209.209.215.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:42:cf:1a:58:86:62:89:d6:05:62:b7:f7:38:f9:9c:2f:08:
         2a:31:09:60:6f:8c:ac:da:fc:93:08:17:6e:a4:5d:28:90:9f:
         44:7e:cc:be:c4:4a:c9:15:d7:e9:b7:53:0f:d8:b6:d5:89:d1:
         99:e9:1d:6f:85:00:78:e5:a8:38:04:43:f5:50:7c:07:fd:7a:
         44:f3:ec:77:26:63:c8:9e:e0:0d:35:3a:51:06:a9:cd:5d:7b:
         82:ee:4c:38:ae:70:7a:cf:01:be:e1:94:bd:6e:d0:9e:9f:9f:
         6b:da:f9:cb:87:da:1e:16:6d:69:58:c7:95:b2:65:75:d8:2d:
         80:75:05:10:c9:d5:12:24:40:ed:51:06:cf:da:83:07:31:16:
         fc:7b:37:34:ed:d3:cc:f3:3d:5d:32:86:d4:82:b3:6d:df:6a:
         34:a6:4e:6a:ba:f2:59:98:5c:69:9a:ee:b9:e6:49:4a:f9:15:
         fd:69:5b:f2:89:b4:59:f5:70:a1:21:04:fb:39:3c:d7:55:84:
         db:85:ba:32:43:b9:ea:eb:bb:d2:3f:3d:d0:34:f5:66:52:0e:
         ba:fe:eb:c1:6c:e1:8e:30:55:d5:8c:90:3b:93:20:69:c8:56:
         9c:1f:b2:0b:33:ab:6d:04:98:7a:3a:b6:df:ef:3d:f4:fd:f7:
         e5:8e:78:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:47:10 2025 by rpki-client