Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/613fa299-8908-33cb-9007-d2458ea0cfaf.roa
File:                     613fa299-8908-33cb-9007-d2458ea0cfaf.roa (raw, json)
Hash identifier:          PKZ3xeOOAgQ2i0pfNLIqeKVKgNsYqbgQHyU8+uNlAiE=
Subject key identifier:   BB:BA:D1:55:A6:B9:8E:F4:CE:25:24:31:6E:A3:F4:04:52:3F:95:3D
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584ABAB00E9E94B8875BFFCB3900
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/613fa299-8908-33cb-9007-d2458ea0cfaf.roa
Signing time:             Sun 03 Aug 2025 02:35:51 +0000
ROA not before:           Sun 03 Aug 2025 02:35:51 +0000
ROA not after:            Sat 01 Nov 2025 02:35:51 +0000
asID:                     62044
IP address blocks:        209.55.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ba:b0:0e:9e:94:b8:87:5b:ff:cb:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug  3 02:35:51 2025 GMT
            Not After : Nov  1 02:35:51 2025 GMT
        Subject: CN=aa0659c8-bd3d-49c2-bc35-78ee98ae2467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5e:52:32:a1:0d:b0:69:5a:06:20:39:5c:24:
                    64:ee:17:5f:cd:89:7f:67:ef:9e:db:ec:65:ed:42:
                    7b:5e:4e:7d:79:74:5f:54:82:5b:ab:bd:e3:c1:eb:
                    51:7b:f0:76:cd:c3:bc:89:ca:60:5d:94:f3:28:b2:
                    54:dc:2d:01:05:15:e5:b1:b1:d4:4f:3e:3f:a6:fc:
                    93:da:b3:5c:4b:9e:7d:82:ed:bc:1a:ec:45:4d:50:
                    9d:50:ed:44:98:08:98:d7:ad:67:ac:c0:c6:5e:1c:
                    d2:2d:4f:aa:d9:e0:78:98:f2:26:52:96:29:82:94:
                    c2:e9:e0:f3:79:d9:18:41:13:71:7a:45:aa:04:79:
                    7b:ce:c1:c5:99:8d:fe:e2:0e:ab:8f:b2:35:d3:27:
                    89:35:cd:99:b9:41:30:13:a8:99:99:d1:dd:ae:73:
                    e1:c7:dc:6d:0b:8c:1e:88:08:d4:8d:97:9f:53:69:
                    08:ac:77:34:39:24:f7:ae:b6:49:44:6a:d3:24:e3:
                    42:95:df:34:ef:0a:2b:87:a6:53:d7:69:04:56:81:
                    3f:84:30:2a:84:2a:93:58:92:0d:29:0d:d7:0d:43:
                    62:ec:48:d0:13:69:ab:47:c2:39:3f:24:88:58:71:
                    92:b4:eb:d6:b5:53:a8:20:73:5b:ad:81:e0:d1:37:
                    99:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:BA:D1:55:A6:B9:8E:F4:CE:25:24:31:6E:A3:F4:04:52:3F:95:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/613fa299-8908-33cb-9007-d2458ea0cfaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.55.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:7e:3d:f3:a6:c9:57:1e:36:f3:d1:fa:82:c0:03:aa:51:28:
         df:42:2c:26:a5:4b:d2:50:a6:ec:67:aa:a3:a5:89:ee:20:76:
         dd:f5:ea:26:fa:19:93:0c:4d:5c:54:f6:e5:19:ef:1b:5a:d8:
         0c:29:7c:0a:8b:7b:9b:22:03:31:a7:7a:1e:33:d0:4b:15:5e:
         20:78:2b:c9:26:ab:54:1a:e1:6d:44:aa:3f:28:56:f1:77:f2:
         a5:a5:3d:7b:7b:14:c5:32:19:9f:00:46:9b:1b:b3:da:90:c5:
         26:dc:39:ed:14:af:ae:d7:20:7f:a6:fd:d2:10:72:0a:38:70:
         4c:59:2c:97:b2:9a:03:45:9e:8f:8e:a4:d6:98:17:af:6a:04:
         c9:a6:4d:a1:d8:3c:74:95:66:f7:12:1a:9e:76:de:55:17:72:
         58:71:12:e9:ef:b9:ff:96:1c:84:51:fd:25:8d:da:e3:97:fc:
         fa:02:96:f4:8a:24:6b:f0:a7:f1:35:2a:6e:46:f2:74:b4:05:
         9f:19:37:5f:56:1f:3f:43:0f:05:3b:a5:12:dc:b3:ed:0d:ae:
         eb:4d:f6:d6:56:45:d1:14:c4:b3:15:29:88:90:c4:1f:7c:6f:
         b5:78:74:ee:ad:a8:7a:ce:c6:02:ae:f6:27:f6:af:b7:60:9b:
         f6:5a:a9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:42:17 2025 by rpki-client