Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/9db45839-c1f2-3b49-8510-c6bdefaddcbc.roa
File:                     9db45839-c1f2-3b49-8510-c6bdefaddcbc.roa (raw, json)
Hash identifier:          rOYgYlQ9Wxl60c5QCbZ2s1mRyvZeHOUmspQ46NUROqk=
Subject key identifier:   AA:CA:EE:36:52:18:B6:99:F3:FC:05:9B:B2:A0:3B:7D:27:F6:0D:7C
Certificate issuer:       /CN=5b6fd262-94ea-4e33-af3e-212abe0fc628
Certificate serial:       010D0C9F4328584A7A4B4B6F8B9C22C6ACE0D900
Authority key identifier: 36:3C:C8:50:79:A5:6C:A5:32:F4:78:54:FF:FC:3C:FC:18:F8:33:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/9db45839-c1f2-3b49-8510-c6bdefaddcbc.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     23341
IP address blocks:        143.55.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5b6fd262-94ea-4e33-af3e-212abe0fc628.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5b6fd262-94ea-4e33-af3e-212abe0fc628.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 03 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:4b:6f:8b:9c:22:c6:ac:e0:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b6fd262-94ea-4e33-af3e-212abe0fc628
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=44bbb5e5-b0b1-4207-9fca-fe82ebfec4f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:50:5b:0d:bf:2d:5e:c1:34:28:21:62:a2:a0:
                    0c:f9:ed:64:e0:06:49:4e:b9:39:8e:0f:68:2a:1a:
                    d6:e2:4a:44:e7:d0:f2:ff:68:42:69:46:78:09:51:
                    1f:16:37:9d:75:76:bc:aa:dd:f4:5a:d6:42:86:b4:
                    b6:23:cb:d3:78:5e:67:dc:3f:1b:e0:37:d6:d5:55:
                    bd:32:53:ae:f8:24:b0:75:94:52:03:0c:a8:57:6b:
                    bc:9a:05:de:c6:0b:a9:e0:95:7f:70:5f:ce:33:4b:
                    e3:de:56:67:f3:d8:cb:61:98:a2:62:31:c5:c9:5f:
                    78:64:06:73:b6:b4:86:02:55:4d:f1:b1:ef:f4:13:
                    e1:4f:1d:4d:26:39:97:4e:aa:96:b7:7c:bd:14:08:
                    ec:f2:fc:13:01:61:23:0f:3a:95:90:35:03:18:d8:
                    6d:fc:e8:f5:71:ce:4a:16:2c:cc:1e:0b:2c:dd:13:
                    4b:53:a0:30:db:84:78:75:47:ba:e1:ff:7e:2f:0c:
                    8e:19:c7:5f:44:ce:ef:b3:3b:e0:75:25:54:27:bb:
                    92:8d:c5:fd:2d:98:86:20:50:be:50:8f:22:1f:1e:
                    7d:96:95:f0:41:de:52:b1:9a:23:86:2f:e3:f1:bf:
                    2c:f6:83:9b:9e:75:c7:04:bd:65:af:f3:e1:ea:8c:
                    59:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:CA:EE:36:52:18:B6:99:F3:FC:05:9B:B2:A0:3B:7D:27:F6:0D:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/9db45839-c1f2-3b49-8510-c6bdefaddcbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5b6fd262-94ea-4e33-af3e-212abe0fc628.crl

            X509v3 Authority Key Identifier:
                keyid:36:3C:C8:50:79:A5:6C:A5:32:F4:78:54:FF:FC:3C:FC:18:F8:33:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.55.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:9c:1f:35:b3:f9:cc:f4:1d:ed:19:ec:f7:32:47:8c:de:af:
         6f:c1:4b:dd:cf:96:f6:25:7a:e5:46:fe:da:ec:04:6d:bb:b5:
         e9:6a:4a:e9:ab:e2:54:7f:c5:80:58:2e:02:e0:f1:e4:46:3f:
         3f:7f:c7:b8:c4:23:e2:a7:b7:2c:2d:dc:71:a1:a3:7f:ae:54:
         f2:8a:99:90:ca:3c:93:0f:09:99:24:4a:6b:ff:7b:6c:5d:5f:
         f7:ad:c4:3b:ea:d0:75:f0:4e:a5:72:3c:10:f3:b7:e4:d7:05:
         0e:aa:8c:12:81:d7:30:6c:e5:b6:05:47:ab:cb:80:82:5c:21:
         bf:b9:a0:dd:23:2d:e4:fe:e2:d0:07:21:a2:62:a0:7d:44:ab:
         d6:2a:79:1f:44:b9:ee:e6:81:d3:87:3f:b5:e9:64:e1:33:1d:
         60:37:bf:4b:b3:5a:b5:d4:63:70:7a:4c:eb:cd:cb:ec:04:70:
         cf:a8:83:69:cf:78:9a:1b:eb:fb:77:7b:6a:6f:67:27:c3:73:
         bd:99:c3:18:22:ac:35:10:ca:0e:17:fe:e4:42:08:da:40:a1:
         5b:1c:88:43:4d:02:71:01:5b:73:8d:14:00:fc:68:8c:e3:5e:
         f7:15:50:95:59:14:c1:f3:48:81:cf:4e:f8:6f:44:06:64:b8:
         55:88:10:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 2 05:24:55 2025 by rpki-client