Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/9f16564b-13e0-3a41-a755-f475fe240546.roa
File:                     9f16564b-13e0-3a41-a755-f475fe240546.roa (raw, json)
Hash identifier:          rCyyOZt/mafNKNQjUl0yz25IQU/uNNHthGWRyIvm97I=
Subject key identifier:   4E:54:5F:EA:02:C2:0E:8A:E8:EA:54:07:2E:E8:DA:64:FC:30:97:F4
Certificate issuer:       /CN=faabd4d2-d007-47ce-aeb1-098f9db2cc81
Certificate serial:       010D0C9F4328584B6A61E081858CAEC76FA7FB70
Authority key identifier: C5:47:D5:4C:44:B0:70:3E:68:55:8F:06:AE:EB:D2:FC:2D:D0:69:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/9f16564b-13e0-3a41-a755-f475fe240546.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     62695
IP address blocks:        155.254.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/faabd4d2-d007-47ce-aeb1-098f9db2cc81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/faabd4d2-d007-47ce-aeb1-098f9db2cc81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:61:e0:81:85:8c:ae:c7:6f:a7:fb:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faabd4d2-d007-47ce-aeb1-098f9db2cc81
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=09a3bf4e-ccfc-456c-bb7f-bcb9b04fcec8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9f:41:65:6b:c5:f5:10:e5:36:be:12:36:7c:
                    be:21:7d:28:3b:0c:06:7e:da:02:4f:5c:54:bf:34:
                    4a:e9:00:7e:df:5b:6b:d6:69:bd:26:b5:ff:85:a3:
                    89:c0:27:66:6e:8d:15:a7:2f:cf:09:71:7b:74:de:
                    c9:e6:62:fc:50:7a:e5:70:20:e9:cf:cf:e0:53:a4:
                    0e:3a:fe:c0:8d:14:fc:01:76:9e:a2:40:38:b3:43:
                    a4:9f:25:6c:3a:dd:30:73:7e:6e:e2:17:da:ca:86:
                    37:fd:88:5b:ca:4e:bd:c8:76:4c:bf:08:1e:ee:2b:
                    64:b7:f6:45:79:2a:d5:d6:0c:20:ac:07:b9:8f:e8:
                    d4:07:e5:02:bf:b8:69:19:73:08:7e:6e:ee:3a:ba:
                    b7:18:b4:df:58:90:a1:eb:a3:89:43:d9:1d:61:f5:
                    af:ce:c3:b8:bf:b3:6d:41:de:3f:8f:e9:da:94:92:
                    ba:b3:10:94:74:92:2f:5c:57:4b:5c:b3:f2:6f:b5:
                    fe:b5:2a:dc:19:c8:3c:3f:05:6b:8b:d0:ca:b4:cc:
                    6f:09:49:0f:75:e7:57:72:c8:42:6c:01:02:68:8b:
                    c9:ca:17:1e:dc:cb:c5:c8:78:d4:20:78:08:25:0d:
                    5f:ed:b8:6b:6c:20:b7:d9:99:cf:6d:a0:cf:56:d6:
                    59:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:54:5F:EA:02:C2:0E:8A:E8:EA:54:07:2E:E8:DA:64:FC:30:97:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/9f16564b-13e0-3a41-a755-f475fe240546.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/faabd4d2-d007-47ce-aeb1-098f9db2cc81.crl

            X509v3 Authority Key Identifier:
                keyid:C5:47:D5:4C:44:B0:70:3E:68:55:8F:06:AE:EB:D2:FC:2D:D0:69:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.254.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:9d:01:7f:8c:3a:28:a7:23:68:88:b6:07:cb:98:c3:59:24:
         6d:94:ac:b3:f4:09:e7:a7:57:30:3a:31:20:28:ef:12:a8:84:
         43:80:fd:f9:cd:b3:ae:ac:9f:db:06:01:97:88:7d:67:98:b9:
         7c:55:2f:7c:8d:1a:e1:65:62:37:ce:63:9b:ad:8b:fa:27:64:
         de:23:d4:7b:e4:af:95:ab:f0:8e:e0:8d:74:f7:fe:d2:40:22:
         e1:d3:e0:fc:0a:42:9a:e5:da:a4:38:8f:c7:ee:e8:d7:f6:24:
         9e:93:fc:fc:1c:4e:6a:90:dc:f1:5c:73:62:2c:1d:e6:92:38:
         d5:ec:fe:dc:a7:b2:17:0b:06:4d:f6:97:94:65:40:46:51:9c:
         40:b6:cf:32:14:d2:da:c2:c2:2c:c8:f8:9f:0e:a8:df:35:95:
         7a:0d:65:40:8a:d8:e6:94:2b:42:ef:be:b7:d1:af:e8:98:3a:
         2e:e4:d5:e1:05:86:98:4c:89:b6:2d:42:26:47:92:56:e7:2a:
         b3:f9:fd:1d:b4:a6:af:65:19:b4:13:c3:3b:70:39:c5:32:b4:
         28:18:9b:55:92:7e:53:4d:9c:25:2a:fb:3b:bd:ff:d9:33:7e:
         a3:e2:06:a1:26:e1:09:13:c7:af:3c:98:f5:4e:96:d5:70:05:
         31:88:cd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:05:56 2025 by rpki-client