Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/46441bb3-a367-33ff-b1c2-c03b56079469.roa
File:                     46441bb3-a367-33ff-b1c2-c03b56079469.roa (raw, json)
Hash identifier:          DgoA9gD11PLeQitejK9YOjuDT5QRUF7j+FdIkpwI59E=
Subject key identifier:   C5:75:72:87:EB:F4:0C:BF:B2:0A:08:C2:F5:FB:6F:07:23:8B:39:B7
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584A8C70E6162115E883B43AA740
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/46441bb3-a367-33ff-b1c2-c03b56079469.roa
Signing time:             Thu 17 Jul 2025 13:01:04 +0000
ROA not before:           Thu 17 Jul 2025 13:01:04 +0000
ROA not after:            Wed 15 Oct 2025 13:01:04 +0000
asID:                     36623
IP address blocks:        216.168.228.53/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8c:70:e6:16:21:15:e8:83:b4:3a:a7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul 17 13:01:04 2025 GMT
            Not After : Oct 15 13:01:04 2025 GMT
        Subject: CN=1a308130-7ec8-4b7c-bd1d-e8e3f9f24ed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3d:cb:e0:7c:04:81:0d:16:a8:c4:dd:3a:4c:
                    9f:f9:7c:dd:8c:32:ab:1c:b4:90:96:eb:b1:38:ad:
                    b1:14:b5:31:9d:7a:3a:b5:4e:03:b2:11:30:35:4e:
                    23:f3:50:1a:4b:d0:5e:06:98:a9:bd:b9:77:59:c0:
                    c4:f4:77:42:d2:5f:f3:4f:0d:86:54:4d:5a:8e:be:
                    c2:54:96:11:ed:4b:23:21:e7:01:23:52:dc:40:14:
                    5f:43:df:88:95:c7:27:e2:22:10:30:66:81:ff:15:
                    86:18:c4:9c:69:67:f5:ba:f2:ce:fe:a4:ee:e1:99:
                    b0:ca:2a:9a:04:6b:74:3f:9b:77:16:98:29:91:0d:
                    b9:1f:18:14:07:da:05:e0:ff:7c:d2:49:67:1e:c3:
                    15:64:a8:0d:ba:e0:07:bc:58:8b:64:35:ac:cf:ef:
                    15:65:a9:02:4d:0d:8c:0c:ad:b5:ac:2c:6a:d7:f5:
                    3c:87:06:c7:bc:5b:f8:d5:32:fc:a4:be:11:a8:07:
                    70:c8:ce:ee:c3:be:6c:ae:a5:9b:41:7a:a1:df:87:
                    0c:f2:54:14:e6:d5:37:ab:8d:53:a7:89:9a:06:97:
                    72:b6:5f:4c:4d:13:bd:69:f6:ec:b7:b5:d9:ed:d7:
                    df:49:45:53:31:04:aa:94:b9:d1:a9:25:67:12:7e:
                    07:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:75:72:87:EB:F4:0C:BF:B2:0A:08:C2:F5:FB:6F:07:23:8B:39:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/46441bb3-a367-33ff-b1c2-c03b56079469.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.168.228.53/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:87:b2:34:65:96:a5:a4:10:e5:c1:58:45:15:4a:1f:51:a8:
         c0:0c:ad:03:c6:9c:fb:27:db:e5:11:9a:2b:6f:2c:e2:c5:9b:
         53:1c:e8:94:aa:bf:fd:e4:f7:4d:bd:89:23:4f:06:de:c9:cb:
         1d:93:58:61:25:00:2a:ac:e0:12:c3:55:59:2d:fd:a0:1a:d8:
         56:95:c4:50:5b:c2:00:bd:0a:ab:5d:48:29:41:30:a9:cb:13:
         3a:13:b6:6c:05:14:54:a5:3e:ff:7d:d0:11:d8:fd:85:94:0f:
         68:9e:6f:9e:9a:e6:56:99:9b:1a:f2:5c:f1:5e:8a:77:16:0b:
         a9:4b:15:1b:b3:99:5b:89:90:ad:b4:c3:a7:e5:21:01:57:fe:
         8c:7b:78:d2:24:fb:ff:2b:ad:7c:a0:79:9e:86:a7:cb:be:fa:
         ab:52:b8:38:31:a7:0a:ea:31:bc:24:53:11:af:21:1c:b9:ca:
         7f:e0:32:a9:44:c3:21:d5:1b:53:4e:0d:20:8a:d2:17:89:03:
         c1:fe:e7:16:da:06:b1:a1:b2:69:e2:fc:ac:9d:cc:7a:22:17:
         ab:e4:26:95:90:bb:7d:22:ee:21:9b:59:3b:fc:a5:40:fc:75:
         6f:fe:cc:99:dc:fb:3b:0f:79:d8:8d:bb:d2:f3:c9:0b:bf:18:
         f3:69:dc:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:20:58 2025 by rpki-client