Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/55def5d3-9a78-38e3-8d01-52365e73d1a5.roa
File:                     55def5d3-9a78-38e3-8d01-52365e73d1a5.roa (raw, json)
Hash identifier:          GlOEYaGxu/i4Hck/fbfjOElxxNwN96QjE6ylZWjxY8Q=
Subject key identifier:   9A:F1:3F:55:DB:73:D7:F0:92:EA:CA:56:63:CE:2C:93:DB:D6:BE:57
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584BB2F81A87AA8DF39B6F3C1300
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/55def5d3-9a78-38e3-8d01-52365e73d1a5.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     397234
IP address blocks:        2001:502:2eda::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f8:1a:87:aa:8d:f3:9b:6f:3c:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=98cc47c5-a8f7-4432-9de4-1d4fe9383be6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:28:90:e5:cc:8b:fa:9b:3f:55:f0:80:65:ce:
                    93:7c:ca:c3:09:3b:46:00:bf:41:c3:b9:92:2a:2b:
                    8a:0e:fe:f5:56:7c:3d:a2:f0:65:89:b8:cd:60:97:
                    1c:67:4f:ed:29:87:95:7b:78:c9:92:69:29:4a:0f:
                    ef:b7:c0:72:f2:a7:fa:f8:22:e0:5f:b0:ef:1b:09:
                    89:cb:02:7c:6c:77:47:b5:7a:51:3e:c9:2c:e5:97:
                    81:28:8d:6b:97:90:c6:f8:71:3a:15:38:23:bc:a1:
                    c8:e9:87:e5:05:bd:ef:96:74:b1:a5:64:e5:e6:7b:
                    eb:db:c4:5f:ca:83:62:17:16:3a:77:c2:f0:8c:66:
                    dd:72:42:13:84:14:34:21:5e:ca:76:73:9c:d6:78:
                    78:3a:90:75:79:0f:a4:1f:e1:3a:3c:20:9b:3a:25:
                    89:2b:3e:c1:cf:5e:96:89:34:8d:6b:ea:15:71:ae:
                    81:c0:f5:e8:82:da:60:6a:1c:11:b8:36:84:e6:28:
                    77:a8:5d:62:41:1b:c7:2e:86:04:29:ad:a4:7e:cf:
                    ff:ca:a7:75:03:38:ee:01:00:09:9c:6f:bc:01:32:
                    e6:f6:ca:f9:8a:e2:fa:a7:46:92:f3:fe:81:e5:03:
                    37:dd:4d:d2:57:c8:64:4a:a4:5a:42:f4:3a:86:31:
                    54:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F1:3F:55:DB:73:D7:F0:92:EA:CA:56:63:CE:2C:93:DB:D6:BE:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/55def5d3-9a78-38e3-8d01-52365e73d1a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:2eda::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:e4:c7:82:82:a0:d2:86:68:7f:10:ec:6f:1e:ca:6b:0b:71:
         11:04:49:8e:d7:b9:18:61:d8:93:a1:ed:1b:a7:93:f2:39:7b:
         58:c8:76:5b:f8:57:6e:3b:aa:be:5f:34:af:d9:ab:67:be:8e:
         44:f8:55:d0:86:1f:93:bb:bf:2f:fa:fa:a0:4c:6a:a9:42:0f:
         48:58:0e:ba:62:8a:30:30:28:a1:7d:68:b9:c6:de:3f:8c:e6:
         2c:ed:ff:d4:5d:8c:12:48:ae:24:74:1d:4b:39:06:a2:1e:0a:
         c3:be:8a:e5:fe:73:ca:09:f5:eb:51:0d:fe:05:c9:13:2e:28:
         25:90:90:d2:37:eb:3f:68:d1:8d:f1:ce:e7:30:af:d1:68:57:
         37:49:63:c3:c7:0c:26:fd:23:b2:bd:68:0e:fe:1d:c5:ee:58:
         5d:d5:59:2b:2a:19:6a:f5:e0:c0:2f:cc:4c:b9:5f:e4:68:6f:
         f1:53:f8:18:30:a2:50:48:d2:af:90:8f:94:73:c5:84:23:84:
         09:f9:c2:2a:59:cf:5c:76:52:42:af:e1:d8:e3:1e:88:7e:33:
         47:ee:8a:8f:b8:d9:dd:a2:f3:31:f0:65:fb:a9:01:7c:bc:1c:
         fd:b2:e6:b0:57:7b:c8:b6:31:70:b9:25:7c:0d:ed:35:03:a7:
         0b:31:16:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:43:37 2025 by rpki-client