Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8a8f67b1-8995-359b-9933-6de9d81fed4e.roa
File:                     8a8f67b1-8995-359b-9933-6de9d81fed4e.roa (raw, json)
Hash identifier:          0dX2EEFbNALqIr2pS0guH1mFv3uhIwlIxFhRTPyefs8=
Subject key identifier:   23:4C:6F:C2:DC:3A:CF:FF:B8:12:37:EE:C8:18:E6:F8:7D:66:EE:CB
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584ABAB00FC696D0042F80455000
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8a8f67b1-8995-359b-9933-6de9d81fed4e.roa
Signing time:             Sun 03 Aug 2025 02:35:51 +0000
ROA not before:           Sun 03 Aug 2025 02:35:51 +0000
ROA not after:            Sat 01 Nov 2025 02:35:51 +0000
asID:                     62044
IP address blocks:        209.55.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ba:b0:0f:c6:96:d0:04:2f:80:45:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug  3 02:35:51 2025 GMT
            Not After : Nov  1 02:35:51 2025 GMT
        Subject: CN=b43cc8a2-b5f6-4a72-98f7-d108c8f802f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:81:dc:a6:9e:ba:6f:93:c1:c9:82:d8:33:66:
                    3f:db:9e:8f:2a:31:91:66:b3:78:20:30:97:93:c3:
                    50:50:a6:27:f1:54:64:59:fb:b3:16:31:53:ef:52:
                    2c:c3:a9:23:bf:44:e5:df:df:40:0b:d1:7d:b1:b0:
                    16:19:66:74:c2:e8:c3:d5:ed:2f:e1:d6:25:22:cd:
                    aa:27:94:b9:78:88:7d:e0:45:36:94:e1:df:cd:ce:
                    6e:9e:03:67:b8:71:2a:a9:2a:c1:32:c3:5e:30:a5:
                    fb:3f:0c:12:03:2f:a4:00:79:bf:73:82:72:ba:7f:
                    7c:c5:19:1b:00:70:70:71:a5:33:18:b2:11:17:74:
                    c7:ea:15:e2:4c:26:8b:ea:57:fb:8d:42:5b:1c:ac:
                    bc:43:6d:68:47:af:31:6a:4a:c4:5b:a3:69:ba:d2:
                    c4:ce:87:e0:57:ab:a7:46:8b:eb:98:3b:fa:04:67:
                    10:71:eb:a9:e6:5e:15:ca:fb:c7:de:38:b3:72:99:
                    46:06:4a:17:0a:9d:1b:f0:af:91:54:16:07:0f:c3:
                    eb:13:45:ee:2c:9d:5b:6b:97:26:e6:3c:d1:9a:98:
                    48:71:b1:fc:f3:b1:51:76:e3:8e:4f:bf:cb:bf:76:
                    85:42:40:91:e9:0a:53:74:ac:39:e2:43:6c:40:88:
                    33:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:4C:6F:C2:DC:3A:CF:FF:B8:12:37:EE:C8:18:E6:F8:7D:66:EE:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8a8f67b1-8995-359b-9933-6de9d81fed4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.55.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:db:d1:ee:b3:89:ec:bf:6d:d2:10:5c:d5:38:65:fa:6c:a2:
         15:c1:fe:04:d7:e7:a5:b0:83:e1:f1:bb:ae:99:fa:9d:37:6c:
         57:fa:e5:ab:95:fd:da:fb:cb:cb:1b:19:9a:1a:8a:f8:f1:df:
         29:ef:3f:3a:82:d3:b3:b8:46:0f:c1:78:f2:6c:2c:2e:1b:86:
         d0:66:a6:9b:93:15:18:2f:a7:47:51:88:bf:30:ef:b2:6f:c9:
         44:bc:12:ef:c0:32:b4:3f:ef:02:5b:b2:99:ff:85:fc:39:80:
         09:e2:a4:cd:c4:1d:62:89:47:39:70:1a:ec:ab:f8:d7:cb:1a:
         96:e6:2a:24:38:42:20:e5:f8:ad:43:f2:44:09:e8:7a:91:66:
         e5:c3:28:ba:88:dd:3f:73:60:08:8a:6a:d2:3a:e9:9a:23:22:
         27:ed:5a:d0:52:57:0e:51:21:e6:26:86:b8:b8:94:42:0c:ad:
         0b:b0:ec:94:a8:95:82:06:1a:0a:db:11:0c:98:c7:fe:8a:5a:
         91:80:83:08:e4:b8:a7:0c:26:c9:08:88:62:16:0a:a7:00:f7:
         a6:3d:93:8a:c8:2f:8b:9a:7d:52:20:23:c0:27:d1:35:a2:3a:
         84:df:a6:8c:84:19:64:f7:37:84:a3:8e:7b:ba:af:13:d2:b5:
         c9:cf:e5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:30:53 2025 by rpki-client