Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0ce580ec-95b4-3ed3-96aa-4562af701562.roa
File:                     0ce580ec-95b4-3ed3-96aa-4562af701562.roa (raw, json)
Hash identifier:          /+HQ6Vz0akJ4cwXpBC1APDQFp3V6lro9Eqs3sk8FUrg=
Subject key identifier:   31:3A:D2:35:13:15:86:C6:2A:8A:6A:64:5D:F5:D8:51:09:D0:64:7B
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584E3B94742F03EC79C535D9C740
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0ce580ec-95b4-3ed3-96aa-4562af701562.roa
Signing time:             Sat 20 Jun 2026 09:00:13 +0000
ROA not before:           Sat 20 Jun 2026 09:00:13 +0000
ROA not after:            Fri 18 Sep 2026 09:00:13 +0000
asID:                     62044
IP address blocks:        209.55.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3b:94:74:2f:03:ec:79:c5:35:d9:c7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Jun 20 09:00:13 2026 GMT
            Not After : Sep 18 09:00:13 2026 GMT
        Subject: CN=90c5b908-49e0-4abe-9fa4-b2afe9a13324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c0:f9:e8:d2:0f:64:cc:95:b9:dd:6a:9b:80:
                    e1:a5:9e:d3:3f:80:a5:c0:d1:9f:3c:ae:0a:73:e7:
                    94:67:6e:98:3c:50:e5:80:cf:d6:e6:03:ed:9e:df:
                    58:7a:c8:cd:ec:73:9e:33:f8:93:20:de:65:1e:6c:
                    e6:2b:83:de:30:bd:15:28:68:4f:9a:80:1e:95:40:
                    f2:4e:1d:8e:1b:6e:02:df:17:07:a8:ba:d3:35:d6:
                    68:c1:6d:56:f3:68:10:87:fb:f4:0c:b6:80:84:6d:
                    71:38:5d:a8:d4:4d:ce:70:98:23:56:f5:ac:33:83:
                    c2:b5:17:55:dc:e3:17:ba:76:17:f3:64:91:12:7f:
                    5e:bb:0f:68:7a:e7:68:c4:49:ec:d1:e9:57:95:65:
                    7c:ea:54:7b:0a:31:11:fd:77:2c:fb:34:fb:4e:fe:
                    a8:7b:d3:4c:4f:8c:eb:50:ff:18:d5:d9:29:af:e9:
                    33:67:f8:ef:70:73:1a:13:71:f8:9a:38:10:82:fe:
                    be:08:8b:a5:87:3e:55:4a:72:2e:d0:c2:93:3e:d9:
                    01:90:ce:d3:2e:99:1a:2d:96:15:75:79:c4:b4:a1:
                    97:3b:2e:05:ef:ca:ab:64:d5:6b:2a:81:2f:82:d8:
                    c6:8b:b2:7c:94:24:e1:38:a4:f4:6c:bd:0f:96:99:
                    ac:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:3A:D2:35:13:15:86:C6:2A:8A:6A:64:5D:F5:D8:51:09:D0:64:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0ce580ec-95b4-3ed3-96aa-4562af701562.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.55.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:3e:fc:62:12:63:55:6c:38:b8:28:65:f0:f5:82:ef:6d:48:
         c6:34:7b:ea:ef:c5:d3:b4:87:59:63:e3:ff:00:65:74:30:b4:
         1a:bc:d8:2c:db:73:c7:bd:46:e4:4e:cc:67:bc:1e:d4:73:e4:
         53:cf:71:1b:f9:4a:15:6f:a5:40:75:53:da:a5:13:34:19:95:
         9f:ff:73:1f:07:50:60:92:74:d8:c5:be:ca:d6:a6:77:c4:50:
         55:56:ec:55:5e:04:14:ef:68:dd:0b:9d:55:36:e0:a9:4a:82:
         f9:dd:4e:dd:83:13:dc:a7:17:dd:2f:31:1c:c8:86:da:5b:9f:
         89:cc:4e:b6:90:10:fb:21:c8:06:c6:db:c3:37:f5:a9:b5:01:
         1e:f9:b3:bf:b2:3f:5d:37:68:cc:f6:a9:15:30:6f:d7:8a:1c:
         93:f6:42:a2:95:e0:2d:44:21:92:67:7f:27:ae:76:37:f3:28:
         2d:2c:00:e9:83:9f:97:c6:07:a0:95:a8:1f:07:9f:81:7c:5b:
         3c:c6:ba:bf:0e:b2:b3:e6:dd:81:3e:73:d6:24:47:ce:11:9c:
         d0:88:3f:3f:5f:e9:58:09:04:52:71:b7:6e:02:60:df:3b:25:
         2f:23:a6:ae:92:20:f8:e7:d6:81:a5:52:f4:d3:8f:02:14:57:
         00:78:81:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:03:30 2026 by rpki-client