Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/6b955808-a91b-3cc3-9b3c-a2e723cf04a7.roa
File:                     6b955808-a91b-3cc3-9b3c-a2e723cf04a7.roa (raw, json)
Hash identifier:          3qCHgMVPAHOYVAEw/YlzoUzM0vXjjS20UfPItlnrWdw=
Subject key identifier:   48:EB:AA:8B:F0:F5:32:99:71:C5:56:BD:26:9F:8F:12:22:8C:93:3F
Certificate issuer:       /CN=2f9f859b-6735-4c5f-8f00-0526da777ec4
Certificate serial:       010D0C9F4328584B758C93CA6793389631911180
Authority key identifier: 58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/6b955808-a91b-3cc3-9b3c-a2e723cf04a7.roa
Signing time:             Thu 09 Oct 2025 01:00:28 +0000
ROA not before:           Thu 09 Oct 2025 01:00:28 +0000
ROA not after:            Wed 07 Jan 2026 02:00:28 +0000
asID:                     140543
IP address blocks:        170.205.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:8c:93:ca:67:93:38:96:31:91:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f9f859b-6735-4c5f-8f00-0526da777ec4
        Validity
            Not Before: Oct  9 01:00:28 2025 GMT
            Not After : Jan  7 02:00:28 2026 GMT
        Subject: CN=7c0526a3-6f7c-4244-9488-0ee640646302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e6:e9:82:86:c2:00:02:19:85:cf:5c:6f:08:
                    8b:84:0e:00:31:94:db:5f:d1:b8:bb:40:2d:e8:70:
                    48:08:2a:f7:ec:a2:b7:3f:91:9f:9a:d0:28:45:92:
                    08:19:20:f5:92:90:0e:72:e0:d6:14:91:a9:d0:92:
                    a8:f8:2d:4a:12:2c:85:54:4b:6f:78:8f:e5:82:ab:
                    cc:e3:34:b0:fb:3a:25:95:3e:39:ca:b7:9a:0f:ae:
                    1a:d3:63:a0:95:2e:28:ba:77:5f:9e:dc:a8:3c:26:
                    d4:3b:4d:78:d7:42:e2:5d:f6:69:a9:13:34:2c:dc:
                    70:b2:fe:6e:05:97:5a:8c:0c:c3:02:41:78:18:e1:
                    df:4b:99:77:d9:ba:18:1e:72:7d:83:88:37:f8:22:
                    a5:23:34:9d:ee:55:93:45:7f:0a:3d:17:ac:48:fa:
                    ae:db:e6:e1:d4:f1:84:a0:df:55:6b:38:9f:46:cd:
                    f0:80:ac:2c:3b:e9:a4:2f:ac:53:72:88:c3:61:87:
                    84:c9:b7:43:ea:15:a9:2a:31:8e:b6:1c:23:04:07:
                    99:92:e0:8c:e8:b2:64:ed:e7:9f:3e:c2:f9:21:54:
                    f6:23:71:4a:0d:a5:8d:96:d3:5a:ca:6f:fa:44:ab:
                    69:1b:8c:02:58:3e:bd:ca:c7:fe:a4:ec:fb:cc:a5:
                    e8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:EB:AA:8B:F0:F5:32:99:71:C5:56:BD:26:9F:8F:12:22:8C:93:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/6b955808-a91b-3cc3-9b3c-a2e723cf04a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.crl

            X509v3 Authority Key Identifier:
                keyid:58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.205.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:cd:ee:be:65:a3:54:89:67:e0:bf:f6:6c:13:56:92:90:ec:
         0c:b3:fe:71:ec:3f:39:f1:dc:98:6a:a2:e8:3a:24:41:2d:a5:
         93:c0:a8:9c:0c:91:19:e4:c5:97:43:0f:a5:d0:73:97:a2:f6:
         36:e3:0e:2c:e2:e0:4d:7c:26:fd:90:39:05:37:60:96:a3:a5:
         67:dc:10:c5:d9:66:b3:60:8d:ed:8a:dd:7a:d3:70:84:62:d3:
         81:d7:53:df:6b:3d:94:63:e7:74:f4:c0:07:a9:3b:dc:04:e6:
         97:22:df:0a:59:4e:3e:2a:b0:2a:d2:6d:3f:f7:17:e4:ed:e9:
         a0:01:24:3b:b2:d3:05:cb:1c:29:98:89:62:6c:ce:0e:3e:95:
         06:35:1f:28:d3:96:f4:d6:9e:9e:78:53:4a:73:a4:9a:f9:e9:
         7e:a2:02:83:ea:4e:17:83:77:67:f9:bb:c2:2e:d0:a3:3f:dc:
         63:79:41:1d:2d:c7:a4:dc:77:bd:a8:97:16:cb:c7:05:3e:f1:
         22:0d:0a:3a:64:a6:61:0a:72:a2:30:85:33:84:8b:3e:5c:3e:
         76:98:1c:88:01:4d:ad:1e:de:53:38:76:34:7d:7e:17:d2:17:
         56:29:e0:46:e7:c5:5f:4d:8b:14:2e:69:ba:ee:dd:c6:38:fd:
         ca:a3:b1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:08:27 2025 by rpki-client