Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/f28e6c58-5862-3506-b2ae-e886f5d0b8b2.roa
File:                     f28e6c58-5862-3506-b2ae-e886f5d0b8b2.roa (raw, json)
Hash identifier:          pLCxUgyNQ1vkh+DtgFoVx31ZJFUdq7LFJQBfvvg/r8s=
Subject key identifier:   F9:E4:53:77:4A:46:31:5C:DE:6D:17:07:A4:8C:FA:A0:9A:EA:EA:3C
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584B03169B0692C9B7E9A1C52B00
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/f28e6c58-5862-3506-b2ae-e886f5d0b8b2.roa
Signing time:             Fri 29 Aug 2025 01:00:32 +0000
ROA not before:           Fri 29 Aug 2025 01:00:32 +0000
ROA not after:            Thu 27 Nov 2025 02:00:32 +0000
asID:                     3477
IP address blocks:        161.55.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:03:16:9b:06:92:c9:b7:e9:a1:c5:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Aug 29 01:00:32 2025 GMT
            Not After : Nov 27 02:00:32 2025 GMT
        Subject: CN=cfbdd057-e96a-4134-8729-680b969ef8de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:45:a3:96:2f:93:98:84:84:45:78:ac:94:d8:
                    cc:d3:e6:ba:73:3b:79:65:84:33:7c:a4:55:9f:a6:
                    60:c3:4b:2e:36:c2:10:52:26:46:ca:ab:76:f3:18:
                    b4:1b:a5:c5:ba:6c:c1:5b:7f:3d:4e:57:42:7e:43:
                    f8:4f:a7:3e:c3:1e:e1:9e:8e:25:20:25:c6:25:68:
                    36:d1:00:71:2b:c0:77:b2:53:cb:89:2d:b1:3b:66:
                    24:27:b4:d7:15:a3:d3:22:b7:8e:a0:ac:06:2c:b0:
                    62:c7:b8:5a:d6:48:e0:51:8b:4e:cf:18:68:d3:67:
                    ac:2d:ce:1b:16:9d:cf:af:72:47:2d:ef:4b:63:6f:
                    8e:ae:46:e6:36:07:1f:54:ea:75:cb:c2:0f:d4:65:
                    ef:98:78:35:cc:06:80:e5:31:e1:73:02:5b:2b:13:
                    58:a8:25:7f:73:f8:b2:bd:a8:a4:fe:fd:d1:7f:54:
                    14:ae:6f:58:ef:b1:11:cc:17:18:07:ae:15:51:8b:
                    3d:11:9e:70:1a:17:33:c0:e7:df:49:e7:0b:48:cc:
                    b7:a9:ed:52:9f:2d:05:02:75:30:e3:71:80:89:0d:
                    4c:f1:5b:09:a7:d4:e3:57:c4:65:27:af:46:bd:7f:
                    3f:c1:dc:63:7c:cb:ed:09:c8:f2:a6:06:c5:1b:06:
                    7a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E4:53:77:4A:46:31:5C:DE:6D:17:07:A4:8C:FA:A0:9A:EA:EA:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/f28e6c58-5862-3506-b2ae-e886f5d0b8b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.55.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:c4:dc:25:7c:da:d9:12:96:22:f3:2b:6c:33:26:d9:61:a4:
         bc:7b:e6:c0:95:ee:eb:23:d5:be:8e:72:cd:0e:e9:fd:a7:32:
         e4:69:b5:78:8f:46:06:a2:a5:c7:e3:bc:c0:cd:8b:c3:90:57:
         ac:7c:da:80:3c:fc:6c:f3:f1:2f:d3:db:13:30:00:04:96:c8:
         20:f7:92:ad:a4:2f:2b:de:27:58:6f:45:4c:ef:90:06:99:ad:
         d9:5d:f0:51:6a:be:54:4e:ca:ab:b6:69:73:4e:5c:69:37:5c:
         48:f1:10:59:e0:9e:38:4a:7b:d8:a0:6e:af:f4:0a:1e:a7:02:
         94:b5:67:48:20:c9:ef:d1:24:fe:83:1b:62:79:72:5c:e8:da:
         f6:8c:35:10:c9:99:91:6b:5c:61:f7:4a:d1:66:a7:34:ff:00:
         e7:8d:15:d8:ff:c8:7c:a3:02:90:ae:fb:f9:2e:fb:00:24:aa:
         21:30:14:0a:c9:a8:bd:fd:57:a9:f4:7d:3f:49:d1:47:c9:d7:
         d3:68:4a:bc:44:75:d1:82:25:b8:bd:6e:47:34:58:f3:96:c4:
         e0:ad:f4:fa:0f:9d:03:1e:b8:14:3b:b7:f2:e1:03:5c:3b:10:
         fb:1f:65:a4:02:bb:ff:8c:7b:82:5b:73:a8:4a:9e:fd:57:f8:
         1e:bf:d2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:38:29 2025 by rpki-client