Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/2932acef-5b18-3b72-8370-606f054ed25b.roa
File:                     2932acef-5b18-3b72-8370-606f054ed25b.roa (raw, json)
Hash identifier:          A+VvLjvwOrzaKDMO9SoNLOAhmPe43MIb+vq1lpBO0tg=
Subject key identifier:   60:F7:74:F3:02:E1:3A:30:5E:88:00:F6:77:4E:F0:7C:AF:CA:F0:02
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584A936B5A8FAC138C0FAE1FA580
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/2932acef-5b18-3b72-8370-606f054ed25b.roa
Signing time:             Sun 20 Jul 2025 01:00:50 +0000
ROA not before:           Sun 20 Jul 2025 01:00:50 +0000
ROA not after:            Sat 18 Oct 2025 01:00:50 +0000
asID:                     271
IP address blocks:        209.87.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:93:6b:5a:8f:ac:13:8c:0f:ae:1f:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Jul 20 01:00:50 2025 GMT
            Not After : Oct 18 01:00:50 2025 GMT
        Subject: CN=f4139c3a-7238-4985-aec0-52f376ef4e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:eb:8c:42:ef:76:a9:3a:12:f2:e0:37:2f:09:
                    7a:4e:6f:42:69:c9:57:fe:91:8a:4f:38:4d:2a:1b:
                    ff:3f:b0:5b:11:e2:61:67:25:6b:10:0e:ad:71:6d:
                    1e:8c:8b:4e:58:2a:95:4c:c2:bf:12:b5:ca:2b:66:
                    20:87:28:a1:d2:46:9c:fe:2e:09:b9:8a:e5:76:c8:
                    81:ac:fe:8b:c3:2d:68:c6:ff:57:36:2f:91:64:43:
                    92:5e:db:2b:1e:6a:16:6c:52:5d:48:2d:32:77:62:
                    2c:7f:a0:53:1f:62:59:14:2e:5c:ce:b5:7a:f9:c0:
                    12:ca:82:13:ab:2c:2e:76:9b:0c:a0:77:e7:90:2b:
                    d6:15:4a:cb:46:7c:7e:aa:6b:f3:e1:98:f9:b0:fe:
                    2a:cc:eb:05:e3:aa:d2:6f:4a:c4:6c:d3:37:49:bb:
                    61:c8:73:33:67:7d:de:c8:26:1b:5f:d0:fd:37:a7:
                    9c:82:10:71:5c:6f:39:52:8f:58:e5:87:0c:10:fb:
                    1a:2c:21:f7:16:d9:7a:07:90:4c:8b:52:4a:60:19:
                    3f:ba:58:10:8d:53:8e:b8:07:03:82:6b:38:bd:2b:
                    f9:51:3c:92:a3:e5:de:bf:3d:f5:08:f9:0a:b1:52:
                    c9:77:5d:9a:c3:5c:64:4c:8f:6f:6f:3b:3b:f6:df:
                    ea:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F7:74:F3:02:E1:3A:30:5E:88:00:F6:77:4E:F0:7C:AF:CA:F0:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/2932acef-5b18-3b72-8370-606f054ed25b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:55:c4:e2:bb:06:3b:08:82:4f:c4:db:e2:f4:40:7b:c5:53:
         67:2e:39:ea:9f:6d:df:26:b1:51:db:ff:cd:bc:57:8b:d2:58:
         a7:d1:26:f4:c1:30:b3:b0:d6:92:aa:3f:b9:b9:b0:3a:f3:48:
         4d:d1:75:5e:33:2d:14:72:48:33:14:5d:c2:b4:52:cd:eb:6c:
         f6:e6:6c:48:d0:dc:7a:ad:08:56:f4:1d:7c:04:47:db:14:17:
         da:60:97:b7:fb:1a:78:d1:4e:3c:75:93:39:92:a4:1b:74:ee:
         6f:cc:27:52:c1:48:20:15:83:d7:f0:a1:bd:96:dd:a3:dd:13:
         0b:16:c9:c9:10:6b:26:12:4d:04:d6:6d:99:53:80:4c:57:91:
         10:ea:04:b7:8d:f2:08:4b:ba:c4:37:39:e4:a8:6a:97:c7:5a:
         55:1f:12:96:11:c5:21:11:9c:7e:6a:ec:c4:53:89:07:12:90:
         81:c2:00:2a:96:c1:5e:b9:ba:55:06:84:01:79:9d:e6:41:e7:
         66:ed:22:eb:e7:66:a6:d7:4c:59:b7:b7:f9:e8:21:6b:78:51:
         52:01:08:d7:b4:9d:49:65:68:df:40:f6:1d:46:46:5b:a0:21:
         0c:f5:a4:9d:43:97:a9:ef:b3:ce:d7:4d:07:4d:f6:41:8f:08:
         74:1e:78:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:18:30 2025 by rpki-client