Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/53e525d4-39a8-3e09-a5e2-111cbb592081.roa
File:                     53e525d4-39a8-3e09-a5e2-111cbb592081.roa (raw, json)
Hash identifier:          2qO5QBH642E+nMnPMv2VTqwLjX35LOcfvJk5ZJctNPA=
Subject key identifier:   57:FC:AF:74:6A:8C:43:CF:99:BF:D0:5B:1A:1E:BB:4B:7F:24:35:60
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584A8B0B62DF45B93C77F9A6F880
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/53e525d4-39a8-3e09-a5e2-111cbb592081.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     45671
IP address blocks:        172.94.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:62:df:45:b9:3c:77:f9:a6:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=0184022a-4141-4af9-89ca-b42904ecef15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f6:3b:54:b8:57:1a:68:5d:10:2e:cc:f8:5d:
                    d1:88:aa:f9:f2:69:07:5f:96:98:7e:e7:8e:d0:c8:
                    3d:67:fa:4d:70:18:12:41:b0:0e:a4:3e:17:ee:67:
                    b9:a5:13:11:a8:2b:5d:fa:14:34:6c:97:a3:51:c5:
                    25:a7:bc:8a:73:8d:12:f5:1c:ef:e6:11:dc:95:b6:
                    f6:87:bd:49:38:f5:20:18:53:7a:09:82:d8:f4:f5:
                    55:9d:7b:45:ef:f3:de:44:1d:95:57:9e:46:50:c9:
                    15:18:ac:14:6c:ec:8e:47:03:97:84:f2:85:b4:80:
                    bc:bb:a2:a8:d8:6f:f0:47:c6:31:fe:d8:70:b3:e7:
                    05:b3:a7:55:b2:11:ab:93:db:4c:84:3b:37:82:e7:
                    37:c8:25:1a:3c:57:79:94:6e:83:a7:b9:e3:45:83:
                    0d:e5:d0:a9:8c:35:2e:02:83:98:cd:3d:09:1c:38:
                    de:b9:2b:be:68:7c:4b:ce:77:d2:12:26:e4:6e:4e:
                    4c:ec:58:71:04:44:e1:83:ab:ec:de:ae:a4:92:5a:
                    7c:1d:b5:d6:3a:5c:4d:e7:46:89:ea:36:99:9a:eb:
                    69:01:6c:15:b8:df:f6:ce:8d:18:91:e8:2b:70:9e:
                    01:6f:75:09:5d:16:a3:dc:87:5e:b8:b1:dd:4f:cb:
                    e0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:FC:AF:74:6A:8C:43:CF:99:BF:D0:5B:1A:1E:BB:4B:7F:24:35:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/53e525d4-39a8-3e09-a5e2-111cbb592081.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:1c:96:21:2f:c2:1a:6c:70:c8:54:4d:75:ef:44:b5:8b:08:
         4e:cf:63:9a:bb:92:98:98:83:28:64:f9:a2:06:48:53:18:bc:
         fd:e5:81:17:bd:e4:50:f9:2f:55:92:e1:62:0e:ff:ca:e8:3a:
         28:f9:9f:89:4c:e2:4b:18:a3:a1:d8:8b:7e:ba:0d:65:15:e8:
         69:72:74:ac:f5:47:fc:bf:57:43:2a:95:ea:14:5c:bb:31:c8:
         6a:b0:36:df:fe:00:2d:7d:54:44:dc:94:99:2c:63:61:fe:6b:
         6e:17:13:b4:19:0d:24:58:5f:81:75:c8:cc:64:30:98:55:00:
         db:5b:6f:62:ca:88:12:e8:29:b6:a5:80:23:9a:72:38:aa:39:
         de:00:7f:d1:88:a4:4c:47:1d:90:90:78:aa:3a:4c:95:56:8a:
         39:e8:ec:56:a9:0b:1e:1a:a9:54:41:85:9e:01:3a:8e:67:e8:
         a8:74:f4:78:66:99:8b:44:cd:78:be:07:eb:2f:21:32:60:ef:
         fb:47:fd:ca:ba:16:fa:c1:63:c7:02:c0:25:c0:fc:77:dd:fa:
         6c:f0:ca:fb:a4:ec:7a:51:f1:7c:36:80:3a:67:fe:fe:20:2f:
         82:da:5c:55:5b:ae:4b:5d:99:c5:bc:1c:b2:45:aa:e4:5a:e3:
         25:36:ec:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:14:59 2025 by rpki-client