Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00052731-d272-365d-a193-0e95c04ab7e6.roa
File:                     00052731-d272-365d-a193-0e95c04ab7e6.roa (raw, json)
Hash identifier:          /o+El7yksgv2s3Ou8v7OcpmkS9O4bMrRA6fIINlf5Qs=
Subject key identifier:   17:53:A3:CB:C7:86:D1:D3:16:92:B5:C5:85:65:C4:52:30:31:41:4B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BBA105610EBEAE1892949DA80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00052731-d272-365d-a193-0e95c04ab7e6.roa
Signing time:             Sun 02 Nov 2025 14:00:38 +0000
ROA not before:           Sun 02 Nov 2025 14:00:38 +0000
ROA not after:            Sat 31 Jan 2026 14:00:38 +0000
asID:                     7342
IP address blocks:        209.131.184.7/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ba:10:56:10:eb:ea:e1:89:29:49:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  2 14:00:38 2025 GMT
            Not After : Jan 31 14:00:38 2026 GMT
        Subject: CN=913516b2-c074-40b5-921c-5f31fda8bfee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:95:df:de:15:19:3c:f4:a9:2d:0b:4a:e6:2c:
                    e8:07:94:d4:9d:28:cf:b8:18:98:f6:86:4c:66:03:
                    dc:9b:e4:ad:be:48:f8:1c:10:32:7d:fd:e7:01:21:
                    a8:1f:49:e1:6d:0c:5a:47:c3:51:ff:0a:2e:ad:45:
                    dc:b7:0a:4e:cd:1a:06:c0:ed:f5:eb:d3:43:13:37:
                    7e:b9:ed:a4:fe:70:f5:e6:86:57:bb:1d:f5:18:4b:
                    8b:eb:73:3a:5d:3d:29:ee:d2:05:11:bd:6b:27:dd:
                    2e:eb:df:66:37:19:da:0e:5d:f5:f3:fe:69:20:43:
                    08:42:bb:d7:35:5f:af:17:22:48:a4:a0:14:3f:2a:
                    29:ff:8b:f6:70:5b:2e:e6:64:76:bc:dd:6d:a7:eb:
                    f4:5f:66:c3:51:17:48:1f:5d:c2:dd:36:70:79:2d:
                    1e:1a:6c:65:8e:06:f9:4c:d5:1e:03:02:93:0f:ac:
                    30:99:71:88:31:1f:6e:99:b7:16:8e:b3:51:ed:7b:
                    88:24:cf:29:ee:79:98:a7:1c:21:c0:bb:14:11:c5:
                    5a:03:44:9b:bd:3d:58:b9:1d:70:2d:93:49:55:3a:
                    a7:8a:f6:ea:07:7f:1c:b5:ba:12:15:a4:c3:5c:2d:
                    22:cf:33:33:c3:21:ad:4f:61:cb:dc:db:2a:22:af:
                    c7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:53:A3:CB:C7:86:D1:D3:16:92:B5:C5:85:65:C4:52:30:31:41:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00052731-d272-365d-a193-0e95c04ab7e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.131.184.7/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:c1:8c:b2:2a:81:77:21:25:e8:1f:f5:87:9a:01:2d:b4:eb:
         5a:c6:98:3b:10:de:79:cd:26:0a:0c:84:85:ea:11:83:ec:9e:
         3f:fb:b0:66:4c:58:cb:b7:08:1d:4f:c9:79:4a:0e:9e:5b:44:
         17:15:38:d9:fa:48:b1:d2:04:bc:5e:5f:ec:db:46:6f:cc:97:
         14:3c:e7:ff:0d:af:cb:03:e4:ea:9c:0f:de:54:2f:71:cd:f4:
         d1:81:ca:ec:58:db:4c:10:02:21:6e:8f:41:c4:0c:c0:63:d7:
         a6:bf:02:e4:42:47:b2:aa:03:00:60:c1:62:33:ec:fb:fc:33:
         db:3f:c7:fb:5e:28:77:30:fd:06:b4:f2:de:83:0c:62:f0:70:
         92:a9:3e:f4:fc:f5:4c:55:de:85:ea:9d:f6:8c:75:f4:7e:9b:
         38:09:18:7b:34:ad:3d:fc:02:d1:d7:89:27:f3:b0:ab:5b:6e:
         47:2c:da:0d:df:26:47:33:b3:24:23:1c:2e:05:04:f0:d6:dd:
         7e:53:c5:5d:3a:98:ed:fb:a1:57:14:a7:74:95:20:c7:6e:c8:
         9f:2c:ad:66:80:ee:83:6f:e0:75:bf:7c:6a:e1:c5:95:4a:f8:
         20:61:9d:af:6f:3c:f1:5f:6a:6e:1f:c3:d1:3a:b1:7d:de:d6:
         7c:b6:a8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:49:09 2025 by rpki-client