Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/9f83846a-ab72-3e0a-839b-d7f346b74e34.roa
File:                     9f83846a-ab72-3e0a-839b-d7f346b74e34.roa (raw, json)
Hash identifier:          3BMxgikZap5VE5hQfZMYeTSEJlsEj5OZd9iBtHM0u98=
Subject key identifier:   B5:40:11:89:F4:70:1C:49:5C:30:39:17:ED:10:6F:7B:32:79:FF:D1
Certificate issuer:       /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial:       010D0C9F4328584A1895468792EA1B4B894D5F80
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/9f83846a-ab72-3e0a-839b-d7f346b74e34.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     18434
IP address blocks:        156.55.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:46:87:92:ea:1b:4b:89:4d:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=4e270673-134d-4cda-81fa-aee586fbb7d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:73:2e:99:70:2a:b2:84:2d:47:b8:eb:7b:bd:
                    d7:63:4c:b2:19:fc:5f:b8:0a:19:58:90:1d:d0:f5:
                    69:8f:b9:e0:c9:56:46:ad:5a:2f:5d:48:ed:27:98:
                    90:46:88:90:64:ac:84:90:dd:59:1d:0f:a0:d6:92:
                    c2:35:16:de:60:6f:08:3d:52:77:24:83:bb:15:e1:
                    bd:22:7b:de:27:a0:f2:52:13:37:0a:d2:4e:57:f9:
                    20:bf:94:59:c3:1e:4e:4d:6b:3f:94:60:d5:8e:87:
                    69:a3:49:fc:d9:5a:f9:7a:27:90:7f:cc:63:1d:04:
                    2c:9f:11:12:28:e7:f6:44:01:ca:44:90:9e:9e:d8:
                    bf:7e:12:1c:f6:f7:61:c7:c4:00:18:25:9b:00:2c:
                    e8:07:0b:c4:4d:70:f3:24:cf:00:98:d0:d0:55:a2:
                    aa:90:ad:4a:12:02:a9:60:30:32:59:a9:f3:0d:9f:
                    85:ee:d9:a3:69:bf:3b:83:4e:8e:bd:40:e3:35:3b:
                    ab:cb:b6:f0:65:98:31:6e:68:63:33:21:12:17:e0:
                    31:90:55:6f:fe:5c:18:31:61:d9:f1:6d:cd:e6:2c:
                    ae:cd:ba:2e:21:af:bd:41:fb:bf:65:87:f2:c5:b6:
                    e3:4b:a5:45:54:24:58:0a:30:79:55:50:03:87:dc:
                    f3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:40:11:89:F4:70:1C:49:5C:30:39:17:ED:10:6F:7B:32:79:FF:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/9f83846a-ab72-3e0a-839b-d7f346b74e34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl

            X509v3 Authority Key Identifier:
                keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.55.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:54:e8:64:10:ad:8c:63:8a:a6:34:ba:c9:27:95:ce:28:b7:
         f4:66:97:78:c3:a3:dc:11:7f:c5:0a:56:8c:49:be:b4:6a:95:
         96:7a:51:e8:ea:36:61:48:a9:03:02:3a:16:e0:07:25:4c:44:
         09:ab:bd:25:8a:73:b1:9e:e7:86:e8:a8:2b:96:fa:cb:17:d0:
         82:6b:43:c1:09:3a:3e:a4:c4:43:91:c0:33:40:c6:90:93:43:
         be:24:c5:9d:0a:db:ee:29:39:4c:20:67:d2:ec:19:66:6c:12:
         0b:4b:ea:f2:aa:50:37:16:63:9b:9a:0c:9d:2e:9f:2e:4a:6a:
         64:89:b7:6a:d1:1f:65:40:d1:ce:85:37:73:d2:e7:58:a3:b2:
         0b:1c:cf:63:c3:e8:54:58:47:aa:b3:0a:61:48:63:75:c1:08:
         36:94:c2:a1:39:92:1c:ec:aa:3b:42:7e:7b:50:bb:d8:5a:09:
         75:fa:f5:f2:14:17:ce:b4:15:43:03:9c:51:dd:79:02:58:84:
         51:b7:16:0a:ff:ad:b6:a4:88:59:93:d3:44:da:b0:56:41:a4:
         0e:1b:11:6c:cc:46:b5:26:fb:87:89:10:e0:1c:0b:4d:df:a1:
         32:4e:35:8f:d9:47:ca:98:75:5e:dc:9b:ac:41:c3:d0:dd:7a:
         d8:18:37:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:08:42 2025 by rpki-client