Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/82c0cc4b-33e7-3346-850d-a7281a4fea5c.roa
File:                     82c0cc4b-33e7-3346-850d-a7281a4fea5c.roa (raw, json)
Hash identifier:          2es09RnHBdtEZSgl7VV0IHaOkISBhBdicZmUyKIpqBo=
Subject key identifier:   76:63:78:CE:55:09:3C:A6:27:5D:2B:C7:9B:55:F8:60:0B:61:70:A9
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584ABAB00E0B277ABDAF37F79700
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/82c0cc4b-33e7-3346-850d-a7281a4fea5c.roa
Signing time:             Sun 03 Aug 2025 02:35:51 +0000
ROA not before:           Sun 03 Aug 2025 02:35:51 +0000
ROA not after:            Sat 01 Nov 2025 02:35:51 +0000
asID:                     62044
IP address blocks:        209.55.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ba:b0:0e:0b:27:7a:bd:af:37:f7:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug  3 02:35:51 2025 GMT
            Not After : Nov  1 02:35:51 2025 GMT
        Subject: CN=f329d96d-5aef-474a-b147-92666c719ff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:df:60:c3:1b:b2:f0:8d:e2:f8:11:7c:74:42:
                    ad:78:6c:40:54:2c:ce:37:2e:ae:3d:ad:1c:d7:a7:
                    5d:03:5e:a7:21:30:c0:32:48:49:5e:87:d0:19:db:
                    27:69:ca:75:b0:0a:6c:ed:b0:a2:7e:5e:b8:49:a5:
                    79:2f:d9:48:4e:fc:bc:f7:26:c0:51:e5:79:d0:45:
                    46:ed:70:90:15:5e:99:99:82:9f:d3:17:18:70:10:
                    c5:40:f2:15:e2:49:81:58:84:b0:8a:db:42:69:44:
                    48:e3:16:34:26:4c:26:51:90:14:b7:35:a4:d6:ef:
                    f0:fe:e7:13:3d:88:80:27:2c:7f:2e:da:d7:9e:96:
                    07:78:65:01:24:4b:68:be:ca:4e:f7:fd:61:a1:cd:
                    3a:b9:2f:75:e5:8e:59:77:81:50:7c:5b:88:e5:b3:
                    b5:39:02:1d:61:6a:54:06:77:bf:0e:00:36:20:17:
                    01:f2:be:dd:f5:9d:67:53:32:c3:79:67:d4:60:ac:
                    aa:1c:f1:8a:12:4e:96:8a:1a:86:f4:34:4b:03:a5:
                    8d:3a:03:a8:9a:d2:5f:29:b1:9e:a5:5b:15:54:13:
                    0a:c0:75:b8:fc:b5:4a:94:d9:ad:9e:74:49:88:c9:
                    41:61:8b:27:6c:d6:d2:4c:87:b4:1a:19:36:57:d5:
                    48:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:63:78:CE:55:09:3C:A6:27:5D:2B:C7:9B:55:F8:60:0B:61:70:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/82c0cc4b-33e7-3346-850d-a7281a4fea5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.55.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:ac:35:62:0e:4a:5c:68:84:fe:ff:07:48:58:f8:a2:a8:62:
         74:83:ce:2e:f0:ee:ab:23:82:f4:9c:f6:02:36:c6:ef:e9:eb:
         2d:2a:7d:4f:8e:2c:bc:df:67:a0:1a:09:a4:88:cc:2d:ef:41:
         c4:55:14:6e:fc:68:12:c7:5a:d3:63:35:87:83:c8:ff:71:b9:
         e0:f2:a7:81:a0:5c:e5:0e:06:87:97:d1:ba:98:1f:f6:32:75:
         9d:97:ee:4e:02:eb:fc:db:8b:9b:89:13:3d:57:d9:66:ca:1c:
         f7:e6:43:cf:2a:95:ca:cc:43:61:08:05:54:da:9b:f4:c8:ce:
         6e:07:69:38:36:7a:ba:e1:9b:11:1c:f1:57:5b:8c:0a:2c:18:
         1b:5c:57:aa:89:87:e5:22:74:22:3c:06:e4:a2:54:38:f0:80:
         e3:b0:43:b8:d0:ac:4f:eb:9a:58:49:e6:94:e3:0c:89:25:ba:
         6c:37:74:2c:59:c2:34:2e:2b:aa:b6:25:1f:a2:ce:c2:4b:66:
         7c:da:92:3a:11:39:70:6d:ec:cd:fa:c6:80:89:15:5e:5d:f5:
         ca:b9:2f:d8:23:2e:38:d3:89:7e:d2:6b:e4:1a:ba:b4:7f:65:
         e3:96:10:3b:bb:5f:16:ec:6c:4e:73:3a:75:be:f3:5c:be:ec:
         39:7b:1d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:25:25 2025 by rpki-client