Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/67f63d2b-fc42-331c-97eb-334fc8604895.roa
File:                     67f63d2b-fc42-331c-97eb-334fc8604895.roa (raw, json)
Hash identifier:          8guVmbgZuz+FY+8ek+UZ0v7xqWyVq6uWTq/bhiimlLc=
Subject key identifier:   0F:5F:50:E0:56:C5:32:6C:BA:CB:A0:61:E6:EC:FD:60:C3:6A:C6:CD
Certificate issuer:       /CN=5b6fd262-94ea-4e33-af3e-212abe0fc628
Certificate serial:       010D0C9F4328584A77808D47A7318359AACB3C30
Authority key identifier: 36:3C:C8:50:79:A5:6C:A5:32:F4:78:54:FF:FC:3C:FC:18:F8:33:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/67f63d2b-fc42-331c-97eb-334fc8604895.roa
Signing time:             Thu 10 Jul 2025 01:00:51 +0000
ROA not before:           Thu 10 Jul 2025 01:00:51 +0000
ROA not after:            Wed 08 Oct 2025 01:00:51 +0000
asID:                     23341
IP address blocks:        143.55.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5b6fd262-94ea-4e33-af3e-212abe0fc628.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5b6fd262-94ea-4e33-af3e-212abe0fc628.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 03 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:77:80:8d:47:a7:31:83:59:aa:cb:3c:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b6fd262-94ea-4e33-af3e-212abe0fc628
        Validity
            Not Before: Jul 10 01:00:51 2025 GMT
            Not After : Oct  8 01:00:51 2025 GMT
        Subject: CN=116e5988-e26a-46e3-a4d7-84059a881902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b2:39:ed:76:fb:f4:bc:af:81:ee:ec:94:91:
                    58:8d:94:a9:0a:6c:b8:da:4a:9b:81:f5:c7:1d:f1:
                    06:6f:c9:e1:77:a3:1b:79:97:07:3d:44:37:5d:cf:
                    fe:21:6f:61:8b:a4:86:7c:23:f0:13:f3:78:87:2b:
                    a0:d4:e8:64:60:69:4b:bd:ba:1e:46:68:55:a1:55:
                    3b:c1:07:90:d6:da:6f:b2:29:cf:23:76:b8:fc:16:
                    1f:d6:f3:a4:b8:19:59:d0:99:d5:8d:f3:14:da:ff:
                    ce:c8:d2:55:be:be:3a:a1:17:b3:16:f0:78:9b:76:
                    54:cb:f2:26:48:25:6a:46:5b:a9:04:95:1b:1c:06:
                    0c:ab:93:79:36:6b:52:04:6b:54:32:a8:9e:15:8b:
                    e9:fa:e8:49:1f:db:63:d4:fc:f3:e1:03:df:0e:19:
                    bd:ee:c5:4c:2d:b0:c6:31:1f:e9:53:05:39:1d:ac:
                    a9:b3:55:5f:41:cb:47:dd:f1:27:75:5d:d5:61:33:
                    cc:0f:4f:f0:27:14:9f:27:4f:26:b6:17:c2:18:c5:
                    9e:f2:55:99:10:8c:06:d5:b3:0c:ed:97:a0:3c:78:
                    42:2e:b7:30:2e:e1:40:83:0e:f0:d2:ae:09:cc:4b:
                    41:28:4a:3f:7e:2d:1f:bc:92:15:a7:2e:8e:29:25:
                    27:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:5F:50:E0:56:C5:32:6C:BA:CB:A0:61:E6:EC:FD:60:C3:6A:C6:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/67f63d2b-fc42-331c-97eb-334fc8604895.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5b6fd262-94ea-4e33-af3e-212abe0fc628.crl

            X509v3 Authority Key Identifier:
                keyid:36:3C:C8:50:79:A5:6C:A5:32:F4:78:54:FF:FC:3C:FC:18:F8:33:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.55.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:91:d8:44:bc:6e:fa:e8:08:df:93:ee:b1:9c:a1:cf:90:0f:
         62:69:39:57:7d:d0:cd:70:2e:3e:8a:47:02:7b:5a:55:b2:b5:
         6b:8c:c4:6a:2c:ee:19:6f:fb:df:58:84:4e:e8:7e:ce:81:37:
         c2:21:f9:9f:ff:1c:24:d8:a1:5b:81:10:04:98:c4:9b:87:61:
         bc:cd:57:49:f0:3c:bb:2e:d6:b0:3d:5c:ae:99:24:b6:d2:ba:
         de:64:8f:9d:ee:90:ab:01:f0:86:55:98:68:e8:81:28:99:bf:
         1a:c6:52:4a:1c:6b:11:35:40:88:74:53:5d:c9:10:b9:f9:89:
         07:b3:c5:45:99:6f:0b:52:da:dd:12:d9:1b:b8:14:e2:c1:52:
         74:04:85:2c:43:aa:fc:e4:8f:44:41:8f:bf:6f:55:b8:0a:76:
         7a:8a:1e:ae:7b:f4:f9:69:81:7a:b2:0e:28:95:42:29:16:8f:
         4b:8b:6a:a1:38:2f:6f:44:d8:01:a2:09:4f:91:8c:bf:cd:46:
         51:f9:52:3e:c0:43:4d:ca:6e:e6:7d:13:68:2e:1f:34:e1:04:
         6f:68:84:3c:9f:cd:7b:3a:cc:93:4f:fa:cc:b7:58:b1:db:78:
         0a:0e:0b:11:ac:fd:5c:b5:76:e4:10:f0:1e:fa:a9:d2:fe:42:
         43:c1:9e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 2 05:30:35 2025 by rpki-client