Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/6fef555d-bf19-352d-af53-061781e04be1.roa
File:                     6fef555d-bf19-352d-af53-061781e04be1.roa (raw, json)
Hash identifier:          qF7gc/ivAZolnzI6+0NMKiLXz2Fy/SeE9sF4ND1ax0k=
Subject key identifier:   AF:13:E9:06:C6:7A:AF:CB:80:6A:62:88:0A:F2:10:C8:7E:00:36:5D
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584D5B4F8B448CF2735560D77E00
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/6fef555d-bf19-352d-af53-061781e04be1.roa
Signing time:             Wed 01 Apr 2026 01:00:23 +0000
ROA not before:           Wed 01 Apr 2026 01:00:23 +0000
ROA not after:            Tue 30 Jun 2026 01:00:23 +0000
asID:                     22616
IP address blocks:        209.55.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5b:4f:8b:44:8c:f2:73:55:60:d7:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Apr  1 01:00:23 2026 GMT
            Not After : Jun 30 01:00:23 2026 GMT
        Subject: CN=90576579-31da-4fc7-bb15-aec8ed525215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:81:9f:55:8c:be:e9:47:f3:7d:51:32:0d:6b:
                    07:34:db:2b:63:cc:38:e6:d8:92:50:53:d4:17:f7:
                    1c:b1:2e:5f:a2:b5:0b:91:09:21:0f:dc:5b:69:6f:
                    62:d6:33:45:6a:e5:f6:a7:d7:46:c9:dd:53:4e:ad:
                    c6:74:d4:b3:00:7a:a0:ed:35:dc:81:28:da:21:2f:
                    fb:db:2f:ce:14:f1:36:65:c6:6a:33:92:c9:cc:b7:
                    09:66:4a:e3:1e:b2:96:8b:54:9f:70:4a:e4:ed:f5:
                    e8:67:0d:40:0c:56:7a:83:86:19:7d:0a:45:a3:ae:
                    cf:3d:4f:ec:3b:67:91:f0:0d:66:6d:cf:b2:7d:9c:
                    14:ac:c9:9c:04:5f:4b:79:a1:bc:2f:09:89:42:08:
                    28:1c:71:80:dd:76:f2:92:10:41:31:c1:ad:d7:3f:
                    52:6c:f6:0f:21:3d:9b:4d:19:6a:9c:87:99:9f:13:
                    be:69:c9:40:47:a6:60:08:eb:71:b1:b1:12:9e:dc:
                    7c:07:18:81:cb:85:6e:81:e2:c3:72:f7:24:1b:b0:
                    c0:c4:ab:03:0a:69:c8:ec:cc:65:f0:bc:ce:93:53:
                    41:39:fc:ad:58:1d:2b:7c:20:02:c0:5c:11:24:dd:
                    2a:38:a8:e9:e8:0e:b6:c3:32:d8:b9:c5:81:fe:d7:
                    cb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:13:E9:06:C6:7A:AF:CB:80:6A:62:88:0A:F2:10:C8:7E:00:36:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/6fef555d-bf19-352d-af53-061781e04be1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.55.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:20:3a:bb:2b:b0:60:3b:ea:2c:c4:45:77:f1:ab:93:5c:c8:
         a0:e8:3a:ee:5c:60:32:fb:d0:c3:0c:3d:90:12:ec:07:22:42:
         31:66:92:da:30:69:2c:11:90:be:cb:eb:6f:a3:71:c3:0b:f3:
         b9:a2:3c:19:71:37:18:76:b8:ed:78:63:13:b1:6b:69:7d:6b:
         89:02:d8:02:94:77:7e:b9:de:eb:d8:71:6a:38:bf:1a:e5:52:
         31:48:1f:9d:bb:40:95:65:6c:05:dc:ea:ed:c8:9f:97:16:b8:
         60:14:7b:78:d9:e0:4c:29:f8:10:43:d8:50:af:27:db:b9:78:
         10:7d:74:a2:c9:80:77:2e:02:29:8d:3a:19:44:d7:68:a3:41:
         44:fb:2c:e1:9a:8e:95:f9:21:44:6c:ec:77:17:f6:55:2c:94:
         00:99:5a:46:43:13:73:3b:a7:13:af:48:90:cd:89:a7:17:45:
         21:0d:80:f9:5b:c9:62:7c:f1:01:61:23:61:46:f4:11:5b:e8:
         1d:af:97:9c:6b:38:30:07:fd:8f:bc:99:29:fc:6f:12:f1:2e:
         0b:79:77:75:c3:00:78:a1:78:da:f5:88:b0:9f:d4:75:58:1d:
         16:9b:85:7c:72:10:05:55:0a:2e:55:ce:04:ac:20:ab:90:c6:
         17:69:b5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:37:50 2026 by rpki-client