Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a91b3e0f-509a-34e7-aa0d-751c60c5e629.roa
File:                     a91b3e0f-509a-34e7-aa0d-751c60c5e629.roa (raw, json)
Hash identifier:          EQM1GFvN0YDJBu6FGTJhb8d07WVvdt+dWHFcFrEVac0=
Subject key identifier:   AC:E8:8A:03:CD:C0:F3:F3:F2:9C:D3:17:D5:A8:13:AD:20:2F:68:A2
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584ABAB00FF396D9323EBA1EA300
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a91b3e0f-509a-34e7-aa0d-751c60c5e629.roa
Signing time:             Sun 03 Aug 2025 02:35:52 +0000
ROA not before:           Sun 03 Aug 2025 02:35:52 +0000
ROA not after:            Sat 01 Nov 2025 02:35:52 +0000
asID:                     22616
IP address blocks:        209.55.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ba:b0:0f:f3:96:d9:32:3e:ba:1e:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug  3 02:35:52 2025 GMT
            Not After : Nov  1 02:35:52 2025 GMT
        Subject: CN=773f53d1-8f40-41c5-b858-0e873ff4d7ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bc:1c:a4:8d:94:23:15:8e:13:fd:bb:cf:98:
                    e9:ec:ad:b1:ef:da:45:68:fd:ce:5c:0c:27:64:e4:
                    c3:f4:70:6e:87:fd:75:56:61:d9:34:8a:ca:9d:48:
                    c2:bf:c3:6a:27:db:92:e2:e9:98:78:9e:c1:08:12:
                    e4:98:89:52:7b:75:05:57:0b:57:0c:0b:41:04:dd:
                    89:2e:f3:33:a9:33:a7:c9:fd:d3:4e:e5:34:cc:c1:
                    b2:c2:15:bd:d4:c5:ff:f2:6c:21:78:30:d8:39:bd:
                    c6:46:93:f9:df:9d:eb:83:8e:2c:0f:ed:69:4e:d8:
                    db:35:b4:c8:63:a2:e7:22:c0:d3:20:c7:87:bd:a7:
                    b6:1e:2c:28:ec:78:17:26:f3:4a:32:6d:fb:f3:e2:
                    15:ae:7b:93:46:bd:91:6d:22:e9:dd:f8:d5:0d:37:
                    b3:a2:7c:b9:b0:f5:0b:c8:c6:d3:a2:fa:b7:d8:e0:
                    2c:b2:e0:c0:4d:e8:85:e2:fb:19:0f:30:35:16:fb:
                    45:d7:b6:08:3d:38:7e:c6:fe:f4:49:c1:b4:31:07:
                    f4:5e:71:de:4e:22:fd:67:24:16:52:c3:2e:3b:67:
                    5c:68:55:66:26:bc:e6:38:2d:51:c1:cc:62:93:d2:
                    9d:d4:5d:b9:df:02:7f:e4:46:a1:44:e3:5e:0d:ea:
                    0c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:E8:8A:03:CD:C0:F3:F3:F2:9C:D3:17:D5:A8:13:AD:20:2F:68:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a91b3e0f-509a-34e7-aa0d-751c60c5e629.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.55.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:7f:e8:ce:dd:8c:98:1c:d0:42:ea:cd:0e:b7:df:af:5b:d4:
         f4:d2:c2:98:da:c0:f4:5c:44:11:7d:40:1e:22:84:b8:02:74:
         e8:1e:6d:c0:12:d0:8c:db:84:5c:0f:a0:81:c8:d7:86:1f:80:
         51:7c:16:bd:78:fc:54:e7:4e:96:3f:c3:26:ef:39:74:c4:19:
         66:18:5a:1a:fd:f7:ed:95:e8:cb:95:7a:52:b9:cd:d4:ce:b0:
         8b:75:7d:c3:3f:f1:f3:68:e5:99:93:de:bc:f4:ec:33:39:93:
         0d:21:06:e0:b1:35:0c:d0:85:85:53:90:f9:49:5c:e3:2e:99:
         b4:9a:cb:47:77:4c:03:3d:2d:23:7d:24:de:5d:18:d9:79:72:
         db:4a:38:0c:8f:9b:ae:c5:b5:d7:3e:76:7a:fc:f6:69:03:cc:
         61:82:43:90:37:aa:56:e3:26:08:ea:9f:9d:4d:9b:79:f1:99:
         99:f9:3e:95:b0:4e:c7:0e:c9:61:24:9b:e8:8c:bc:3d:b4:68:
         32:69:d9:53:e0:88:88:9c:18:6b:10:04:11:29:44:33:10:27:
         17:d5:34:b2:d2:61:82:6f:cf:6c:54:1a:4f:d4:c3:12:59:15:
         b9:3c:14:1b:5c:60:55:63:3f:bf:d8:54:a1:03:ec:7b:54:d3:
         ff:24:f1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:27:04 2025 by rpki-client