Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/901bd122-193b-490a-b1a9-e65fca4c589d/73aadfd9-0d70-32a2-8d33-6f0e6a9f3652.roa
File:                     73aadfd9-0d70-32a2-8d33-6f0e6a9f3652.roa (raw, json)
Hash identifier:          pP9N7nNasgU/WYYUVYRSYEKJFZ1sCNHELmq0gqJ09N0=
Subject key identifier:   79:F3:7A:8E:A5:D9:DB:1C:3B:A8:F5:FF:35:10:C7:E5:FB:F2:30:1F
Certificate issuer:       /CN=901bd122-193b-490a-b1a9-e65fca4c589d
Certificate serial:       010D0C9F4328584A612B0FF25E95A3D1D29A6180
Authority key identifier: 10:D4:6B:F7:7F:13:EC:FA:03:35:06:08:F5:65:3B:82:0F:8C:59:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/901bd122-193b-490a-b1a9-e65fca4c589d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/901bd122-193b-490a-b1a9-e65fca4c589d/73aadfd9-0d70-32a2-8d33-6f0e6a9f3652.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     7922
IP address blocks:        162.208.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/901bd122-193b-490a-b1a9-e65fca4c589d/901bd122-193b-490a-b1a9-e65fca4c589d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/901bd122-193b-490a-b1a9-e65fca4c589d/901bd122-193b-490a-b1a9-e65fca4c589d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/901bd122-193b-490a-b1a9-e65fca4c589d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:0f:f2:5e:95:a3:d1:d2:9a:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=901bd122-193b-490a-b1a9-e65fca4c589d
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=239cb305-54e7-4814-ae70-5f7fdbbebeb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b8:2f:ea:e3:5a:43:bc:15:f8:30:15:c3:5e:
                    7c:aa:60:16:9e:20:ec:ec:0c:ec:2c:5b:95:97:f6:
                    78:e1:cd:13:2e:48:ff:f1:bd:67:70:c0:b5:b1:8d:
                    e2:21:49:19:af:64:33:2e:d1:a3:78:ef:37:ea:a6:
                    0b:fa:45:22:42:00:c9:06:95:15:62:3b:02:6e:34:
                    3d:cc:b7:a9:80:00:e2:37:fa:d0:14:69:f2:7c:7f:
                    e5:ca:52:5d:43:ea:41:de:ad:f5:71:66:04:ab:ca:
                    2c:ac:3b:94:48:e9:8d:6e:34:b6:58:1c:13:2a:4b:
                    2b:90:45:81:2c:f3:e6:fa:8a:c3:87:da:a0:b4:c4:
                    da:6d:8b:68:c3:6e:11:57:28:a3:55:8a:2b:45:28:
                    1d:4f:41:81:0d:2e:ee:35:53:a8:d4:27:7e:44:49:
                    29:c0:25:83:af:ed:92:69:8f:2b:54:28:84:ce:83:
                    aa:d9:e9:50:5e:1d:93:b4:bf:6d:5a:fb:5c:89:7b:
                    d0:e0:69:50:74:f3:3a:5c:d2:5a:7f:bf:81:13:9f:
                    14:32:8e:ea:f0:92:32:39:97:e9:93:65:74:8c:b6:
                    43:f7:66:6b:ea:d5:46:e6:13:aa:a2:4a:ba:dc:68:
                    49:aa:21:d0:44:7d:7b:ab:6c:89:1f:e7:3f:10:4c:
                    8a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:F3:7A:8E:A5:D9:DB:1C:3B:A8:F5:FF:35:10:C7:E5:FB:F2:30:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/901bd122-193b-490a-b1a9-e65fca4c589d/73aadfd9-0d70-32a2-8d33-6f0e6a9f3652.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/901bd122-193b-490a-b1a9-e65fca4c589d/901bd122-193b-490a-b1a9-e65fca4c589d.crl

            X509v3 Authority Key Identifier:
                keyid:10:D4:6B:F7:7F:13:EC:FA:03:35:06:08:F5:65:3B:82:0F:8C:59:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/901bd122-193b-490a-b1a9-e65fca4c589d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.208.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:9d:95:3c:64:db:a5:0d:29:9b:0e:87:f9:61:f1:f4:ec:df:
         64:f0:e5:8e:63:b4:6b:7d:bf:53:39:81:c6:8d:bf:b7:cf:d0:
         eb:40:80:0a:dd:5d:56:15:89:87:28:3f:05:c0:15:5b:25:89:
         27:7c:37:be:1b:d1:e5:28:9f:58:dd:84:5d:ec:62:da:d0:eb:
         a2:51:cc:08:c8:dd:5a:7c:bc:1a:30:5d:80:4e:7e:e7:6f:be:
         9a:86:bf:65:66:89:01:ed:e6:2e:5b:63:87:89:b5:68:2b:05:
         39:52:d9:5d:6f:3f:d0:83:42:5e:87:b4:3e:65:88:82:7b:75:
         26:a2:4c:e3:dd:73:57:d6:a2:75:21:96:77:e5:bb:e2:42:05:
         d9:2a:cb:98:37:6d:92:78:a8:e3:4e:d4:4f:2d:a1:67:fb:35:
         66:06:a4:e7:38:a5:df:86:1e:3c:9e:97:b8:65:42:8a:05:11:
         5b:7d:07:c8:6b:09:e7:9f:8c:9d:17:74:95:0e:92:52:ff:9d:
         40:3e:4e:29:fe:0c:fb:5e:af:70:d5:60:4b:03:59:b6:81:02:
         29:26:99:89:03:7e:31:96:e4:f1:84:6c:fc:51:f7:4c:78:30:
         08:07:55:c1:af:bc:16:0a:35:ec:ce:56:f0:91:fc:24:db:92:
         22:51:f6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 22:13:22 2025 by rpki-client