Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/5e5970c0-f1b7-3996-b82b-51c865473a6f.roa
File:                     5e5970c0-f1b7-3996-b82b-51c865473a6f.roa (raw, json)
Hash identifier:          YhsK5AvxVXm3FGitbitb0ZsmYDvn2tZ4rL2poxveg0E=
Subject key identifier:   43:72:DD:C8:2B:7D:A8:39:9F:D3:BD:6B:36:F5:9B:EE:68:7E:0D:87
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F43285849CD34BFD5ED5F02E15451A780
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/5e5970c0-f1b7-3996-b82b-51c865473a6f.roa
Signing time:             Sat 10 May 2025 01:00:47 +0000
ROA not before:           Sat 10 May 2025 01:00:47 +0000
ROA not after:            Fri 08 Aug 2025 01:00:47 +0000
asID:                     5769
IP address blocks:        199.7.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cd:34:bf:d5:ed:5f:02:e1:54:51:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: May 10 01:00:47 2025 GMT
            Not After : Aug  8 01:00:47 2025 GMT
        Subject: CN=105184e6-bb6b-4851-a22d-7a46dbec4b6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:38:3a:14:81:70:56:8a:2d:75:70:13:a1:da:
                    75:a7:c4:ff:7d:7c:4e:04:d0:92:e6:f9:b2:44:a0:
                    65:1e:ed:1f:1f:bf:2e:ba:91:4c:89:7c:5b:74:29:
                    d3:c1:87:d0:ed:b6:6c:54:a9:7c:40:83:2d:d7:9f:
                    f5:da:2e:bf:0e:24:22:28:54:e6:11:92:96:84:e2:
                    dc:23:ee:90:d9:6a:66:57:4e:79:14:29:29:8c:2d:
                    b3:70:40:2c:97:27:cd:dc:52:f4:cf:05:2f:a0:60:
                    76:fb:6c:42:1a:7a:1d:d7:ee:09:ba:1b:72:1c:a2:
                    3b:e5:29:16:d6:53:0b:60:26:06:42:8c:29:11:e1:
                    99:2b:29:ba:78:d8:2c:5a:ea:08:b9:0b:19:a5:9d:
                    6c:ec:0a:7c:78:a4:a6:85:9a:06:08:b2:6f:5f:f6:
                    f8:10:d7:6c:6d:a6:5b:73:8f:99:24:1d:bc:99:68:
                    45:a7:92:14:db:1b:62:81:71:39:2e:9f:85:2f:ff:
                    fd:09:98:cb:67:fd:04:4a:bb:35:95:18:a0:5b:00:
                    61:bb:04:a7:85:48:4b:56:bb:c5:21:66:ed:8b:8b:
                    7c:0d:79:15:49:29:89:65:74:22:aa:41:9e:d6:33:
                    70:ad:27:c4:72:56:bf:78:e2:4a:e5:1e:2b:87:4a:
                    97:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:72:DD:C8:2B:7D:A8:39:9F:D3:BD:6B:36:F5:9B:EE:68:7E:0D:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/5e5970c0-f1b7-3996-b82b-51c865473a6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:8f:cd:ce:df:e5:32:07:8e:4c:ea:db:0a:c7:5f:d4:87:4d:
         09:8e:59:44:8a:aa:7e:92:89:ff:8d:40:4b:06:52:72:39:fa:
         39:62:e3:99:af:b7:26:08:d5:0d:65:25:4c:9a:2a:19:77:73:
         64:0a:12:d2:5b:73:17:3a:a8:4a:9d:91:71:38:4e:c6:86:88:
         36:eb:1b:43:82:b7:57:da:1c:5e:05:ab:05:7f:a7:64:57:c4:
         c2:1a:9d:f9:a8:52:8f:57:dd:55:af:d4:07:8b:64:28:e8:7c:
         2c:59:07:e2:e0:d3:cd:1b:52:40:ac:15:8d:d7:42:24:09:ea:
         76:e2:bd:16:f9:5d:bc:eb:9c:b5:01:af:fc:29:8e:78:23:87:
         86:f2:6f:75:9f:da:d0:82:85:d8:c9:bb:09:87:4c:ea:59:f0:
         63:87:a3:a2:c5:fc:ac:2c:b6:c1:3d:2c:c0:21:66:03:11:e8:
         48:32:4a:97:63:af:9c:8e:76:91:4e:fe:c4:34:2f:51:b4:34:
         6c:0d:99:44:2a:fd:1e:44:61:ac:cf:ad:e3:34:d1:09:87:bc:
         8f:69:5e:16:b6:11:8e:d8:c6:9e:f3:e6:22:bf:54:de:1f:ee:
         b7:13:c6:df:5f:99:68:56:8d:7b:f6:b8:b8:87:04:5f:13:fb:
         7a:b3:f9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:17:31 2025 by rpki-client