Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/bc2fc334-31ae-306b-8ff8-a2cef7670ddf.roa
File:                     bc2fc334-31ae-306b-8ff8-a2cef7670ddf.roa (raw, json)
Hash identifier:          lh8rJAVS1ZPyHcVTEe/a85sSo7NUiS3Hxi5nbBS1jHo=
Subject key identifier:   40:83:39:00:C3:C4:BA:6E:4D:B3:FB:16:C6:A4:1C:00:55:FF:5D:D8
Certificate issuer:       /CN=55feeaf5-abfd-4f9c-9707-9236ce5397bd
Certificate serial:       010D0C9F4328584AA160DADD6287DD1845518D80
Authority key identifier: C9:EF:4B:01:33:02:5C:34:66:53:86:01:A7:05:AC:03:48:05:9A:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/bc2fc334-31ae-306b-8ff8-a2cef7670ddf.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     54392
IP address blocks:        136.239.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:da:dd:62:87:dd:18:45:51:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55feeaf5-abfd-4f9c-9707-9236ce5397bd
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=e9eca24b-e8be-4ddd-9689-cdfa8241277e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:09:39:ff:e7:7b:97:68:f6:c8:1c:18:93:b7:
                    b0:4b:ba:3b:63:0c:42:75:57:cc:31:a8:54:2f:65:
                    45:93:2d:9e:e9:e6:d2:2b:6f:31:30:3c:7d:72:0e:
                    9d:ca:ec:a1:66:82:ec:a8:d5:62:7d:b0:a6:b9:d4:
                    41:54:17:93:ac:ca:fa:87:c1:f8:98:b5:12:b8:3b:
                    c2:7d:82:bb:0f:a3:b9:23:68:ca:99:65:6d:fa:13:
                    0b:1b:35:f8:80:df:98:22:85:63:7d:41:5f:b0:1e:
                    44:56:86:8a:92:23:ec:cd:69:bd:7d:60:50:dd:ed:
                    46:2a:3d:6f:d1:73:51:da:79:ca:5d:3f:e8:30:7c:
                    d1:cc:13:e7:3a:41:65:20:3b:87:04:dd:be:ae:c1:
                    9a:f2:92:bc:71:ab:ac:20:79:68:5b:f2:d4:56:97:
                    c8:0d:9e:26:06:d6:a4:43:10:26:01:83:35:18:ae:
                    9d:6f:86:3b:d2:63:3d:7d:e5:dd:ba:5d:18:48:43:
                    00:5d:2c:65:40:67:dc:df:d0:6f:be:0a:a3:fa:2d:
                    aa:a7:1a:6d:0c:b6:39:45:f2:bd:10:77:11:a2:61:
                    d8:ba:ce:5f:03:d4:ff:3c:35:b2:8f:b1:57:37:97:
                    03:b5:6f:01:03:c9:2c:2a:e5:9f:83:a3:3c:66:e9:
                    97:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:83:39:00:C3:C4:BA:6E:4D:B3:FB:16:C6:A4:1C:00:55:FF:5D:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/bc2fc334-31ae-306b-8ff8-a2cef7670ddf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.crl

            X509v3 Authority Key Identifier:
                keyid:C9:EF:4B:01:33:02:5C:34:66:53:86:01:A7:05:AC:03:48:05:9A:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.239.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:40:c4:48:d8:a1:c1:07:cf:62:9a:53:96:b4:cb:4f:4c:90:
         74:57:c0:78:a4:5f:3d:68:e2:38:f7:e3:b2:e1:eb:d5:3f:0a:
         5f:13:dc:8c:98:b1:d7:74:14:bc:ff:cd:cc:1d:fe:22:56:c4:
         4e:af:72:12:c3:9b:0f:6f:bc:75:1f:9a:a5:e1:fe:78:f5:be:
         be:89:38:04:f8:6c:ae:24:f0:f9:c6:d4:49:98:90:53:b1:b2:
         dc:ca:68:ae:f0:d9:50:c0:0a:4d:ad:bc:07:88:d8:12:01:9f:
         22:99:fc:4a:07:3f:c5:35:a2:fe:60:53:30:15:8d:f9:6f:f4:
         a4:f5:b4:33:fa:42:c9:d7:78:0d:c9:7a:0a:fc:e6:8c:03:2b:
         c0:b7:a3:3a:86:32:14:4b:a2:4a:e7:1b:d9:82:25:97:8c:95:
         c1:b9:29:2b:74:75:a9:d7:3c:3b:ce:fb:aa:e6:29:95:62:e9:
         12:40:ad:6e:c4:d8:2e:36:72:5f:98:d3:2f:aa:ae:21:45:1f:
         31:6e:13:0b:b4:84:ce:3a:1e:31:60:8e:35:c0:ac:4d:cf:6f:
         8e:66:1a:ae:8d:85:73:0c:58:9f:43:93:9f:b0:fd:6e:97:a1:
         78:45:3d:a1:ec:3b:7f:c8:79:dd:88:be:85:e5:21:9b:16:d5:
         4a:57:93:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:42:46 2025 by rpki-client