Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0f9a3968-1572-3d7a-af92-d15e80eb7fe6.roa
File:                     0f9a3968-1572-3d7a-af92-d15e80eb7fe6.roa (raw, json)
Hash identifier:          b8UppJBbshEPLwgf1aAZ1qGMnAVc1pugWhOtGzty/y0=
Subject key identifier:   C6:CA:A2:E6:DD:1F:D0:CA:A4:99:37:5A:B9:9F:68:88:2F:E6:CE:7A
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584ADECBD7C4350AFD820CD10300
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0f9a3968-1572-3d7a-af92-d15e80eb7fe6.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     53813
IP address blocks:        209.55.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:d7:c4:35:0a:fd:82:0c:d1:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=95ba4e46-1dc7-4a6f-9ff0-ab1063d17574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:65:88:98:60:69:f9:3d:d4:1e:f5:27:79:3e:
                    ac:2f:71:9b:84:7f:5c:56:00:bc:d3:1a:62:4f:0c:
                    25:51:3b:58:a6:2a:7e:7e:bb:39:5b:3e:1a:8a:68:
                    39:0b:29:38:15:29:92:33:d0:31:23:a4:3f:6e:60:
                    0b:88:ab:98:67:af:ee:bb:4b:61:a7:30:b6:cc:88:
                    b9:72:35:b2:f9:23:e8:88:ea:21:e4:93:8c:ba:83:
                    cd:96:73:52:74:bc:9e:2d:5c:29:26:62:a4:84:74:
                    ea:d3:db:45:3b:f7:f9:35:fe:46:9f:1f:fc:f2:1d:
                    a5:32:7a:cb:01:28:55:df:29:8d:2a:e0:29:d6:3d:
                    d8:cc:9c:0c:ee:a3:c9:a9:e5:4c:92:9c:fb:a1:ad:
                    ce:c6:4c:09:3f:b0:a9:64:94:63:06:9e:1b:be:25:
                    f5:b2:c4:4b:e4:ca:8a:b9:f3:4b:f6:d9:42:d0:f2:
                    e7:67:e7:bc:d1:18:a2:ff:77:1e:a6:68:69:bf:04:
                    93:7a:02:1f:3c:77:d1:da:af:66:b0:aa:60:ce:b4:
                    a5:b4:c7:16:42:d1:8a:80:97:83:0b:24:75:fb:d1:
                    6a:0c:1c:5b:5d:a5:71:66:90:66:7f:06:bf:b3:0e:
                    ac:6f:cb:d7:da:b2:71:a3:e5:d3:13:b3:15:2f:af:
                    c9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:CA:A2:E6:DD:1F:D0:CA:A4:99:37:5A:B9:9F:68:88:2F:E6:CE:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0f9a3968-1572-3d7a-af92-d15e80eb7fe6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.55.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:f8:6c:a7:ba:67:46:1a:eb:27:b6:ca:ba:60:7e:a1:e1:16:
         1e:1e:0c:99:94:74:39:90:00:e5:1a:66:da:86:d2:1d:b5:b5:
         9f:e5:bb:c3:fc:12:75:75:4f:89:a8:23:5a:d6:10:9b:83:38:
         25:c8:58:cd:da:18:c4:82:d0:35:7b:a1:d0:34:2c:ea:2d:2f:
         e8:0b:ab:78:5d:f3:64:ae:7a:fa:f2:5f:e5:29:eb:62:2a:91:
         c7:82:2c:b7:98:ff:48:53:82:3b:10:5b:7a:38:fd:52:da:e6:
         aa:2d:30:ff:a8:5c:ef:11:dc:7b:b7:b4:89:6c:e5:da:26:fe:
         36:a4:6e:6f:f8:25:89:9b:fd:e1:ef:8c:2d:db:51:a5:f3:10:
         e1:65:85:e3:df:78:dd:21:56:0e:fa:f3:e8:b7:80:0c:42:cb:
         34:6a:43:12:92:30:3c:d5:32:3d:a6:8c:93:a2:15:64:31:9a:
         3e:0a:96:dd:29:f0:c3:4f:03:48:65:e9:cb:50:a7:ce:b3:9a:
         73:ac:2d:f0:85:96:99:49:d1:09:ab:4a:60:32:e0:c5:19:11:
         b9:10:ca:49:64:5f:e6:27:c8:75:46:27:aa:37:f3:3b:da:ac:
         cc:33:0e:2d:c7:30:ea:59:53:a4:e8:75:c5:c7:36:e1:41:f5:
         14:e0:2f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:59:33 2025 by rpki-client