Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/51d3ada2-a449-3854-8c76-b066b8ac2408.roa
File:                     51d3ada2-a449-3854-8c76-b066b8ac2408.roa (raw, json)
Hash identifier:          m+f/WmchvDGdj6wPufdltxTDhfb40JEtH0DjUrf/FYk=
Subject key identifier:   A1:19:F7:1A:8A:EC:78:12:1D:85:9F:64:13:DA:01:39:C7:24:6D:E7
Certificate issuer:       /CN=56a75261-4e27-478a-8f9e-71a9915ce9b4
Certificate serial:       010D0C9F4328584B80B7683E323A6A539F0DF380
Authority key identifier: A4:3E:16:F9:E5:FB:77:F5:09:85:40:70:E7:45:BA:62:3D:AE:1B:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/51d3ada2-a449-3854-8c76-b066b8ac2408.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     55091
IP address blocks:        198.73.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:68:3e:32:3a:6a:53:9f:0d:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56a75261-4e27-478a-8f9e-71a9915ce9b4
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=61fc5453-9849-4e75-9bdf-5574b2c78a2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2f:f7:94:9c:fe:c7:3b:af:8e:cc:b1:4b:73:
                    28:b5:3b:61:cc:1a:f4:ca:70:7a:1b:66:89:df:da:
                    46:ff:c5:3d:b4:e4:7d:e6:61:bf:4e:d7:84:f9:c6:
                    5f:90:3f:fa:9b:0c:88:06:d6:df:6a:86:75:79:32:
                    99:49:15:31:ed:e8:27:32:61:09:41:91:98:21:fd:
                    e3:07:a6:2d:53:58:c1:f6:be:a2:f0:be:c3:95:29:
                    a5:c2:b1:de:a2:b8:38:e2:99:c3:7b:a8:80:0a:02:
                    3d:03:ab:0f:a9:ca:0c:6b:26:35:39:ef:ab:bc:9e:
                    56:31:d2:15:a0:8a:6a:02:04:f9:d8:88:d7:76:87:
                    03:7f:00:5f:f5:85:c0:34:ee:14:7d:8a:ec:33:74:
                    04:26:9c:17:dc:fd:36:13:bb:f6:9b:91:be:a4:c7:
                    bf:74:ae:68:3c:91:08:84:1e:f6:a9:3f:cc:4a:22:
                    13:21:f4:ee:e1:b4:64:6a:db:44:72:5a:fc:5e:ae:
                    3a:af:2a:26:83:77:14:e3:eb:77:28:09:77:a1:d8:
                    5c:db:d5:8b:9b:6a:6e:98:cc:50:75:eb:a0:35:97:
                    6b:44:7f:45:14:f6:ff:4e:55:c5:a6:8a:1e:62:b9:
                    ac:ed:6c:b7:9a:ec:4d:e1:8b:bb:fd:63:ad:e4:7a:
                    87:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:19:F7:1A:8A:EC:78:12:1D:85:9F:64:13:DA:01:39:C7:24:6D:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/51d3ada2-a449-3854-8c76-b066b8ac2408.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.crl

            X509v3 Authority Key Identifier:
                keyid:A4:3E:16:F9:E5:FB:77:F5:09:85:40:70:E7:45:BA:62:3D:AE:1B:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.73.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:3b:99:ae:57:29:fc:20:b7:8e:43:14:bb:9a:e4:af:82:68:
         d1:a8:47:3c:38:7e:a5:d3:dd:65:15:49:0b:0a:71:fe:29:85:
         dc:34:e5:f5:14:61:d0:f0:23:1e:e9:8d:b6:c5:ea:95:2a:ea:
         11:06:cb:31:db:84:87:f7:13:88:19:b2:2b:1f:ae:30:a4:4b:
         f8:ca:23:35:fb:f7:ea:9c:f5:90:23:96:97:fd:a5:c4:dc:fd:
         e4:05:2e:c0:58:41:78:d3:c0:80:2f:81:3c:13:ac:8a:8a:45:
         5f:ce:d3:6a:cc:af:36:73:74:ae:71:47:67:77:d3:aa:49:66:
         71:c1:0a:15:96:e1:9c:db:91:e4:0a:9f:f7:b8:d6:bc:71:49:
         ec:f4:8d:21:b1:ce:0f:4f:32:67:54:63:a8:88:88:c2:c1:74:
         bc:9a:54:59:59:82:fb:37:c2:67:1e:3b:e4:02:d4:1d:1b:cb:
         fc:79:4e:fe:8d:14:45:d2:4e:80:98:6f:d1:b4:62:85:79:d9:
         e8:b8:1e:c4:4b:35:4b:9c:10:97:e1:c7:4a:e4:aa:17:94:83:
         69:9a:ea:5c:ad:06:3b:a3:76:73:84:28:78:02:c2:ea:c9:fa:
         d4:08:86:e3:3c:6f:e2:3c:bc:e7:00:f8:d4:09:73:06:36:44:
         07:ac:cb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:46:22 2025 by rpki-client