Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/837fbbc1-1e56-3a6f-b60f-f2aba2f03f45.roa
File:                     837fbbc1-1e56-3a6f-b60f-f2aba2f03f45.roa (raw, json)
Hash identifier:          rL2CMAghKlqpnNQe3wbYQiGo//AprlOTeW0cF1psZT0=
Subject key identifier:   14:82:21:0D:A4:26:54:90:F9:5C:EE:6C:02:D8:48:87:3E:D7:28:49
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584A06703C9230BA76DF1B8AFF80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/837fbbc1-1e56-3a6f-b60f-f2aba2f03f45.roa
Signing time:             Fri 30 May 2025 13:01:45 +0000
ROA not before:           Fri 30 May 2025 13:01:45 +0000
ROA not after:            Thu 28 Aug 2025 13:01:45 +0000
asID:                     208485
IP address blocks:        172.94.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:06:70:3c:92:30:ba:76:df:1b:8a:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: May 30 13:01:45 2025 GMT
            Not After : Aug 28 13:01:45 2025 GMT
        Subject: CN=d6f813e3-11a1-4049-af89-ecf21d511de9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4e:be:a7:31:5a:a6:75:41:88:5a:b6:cd:5d:
                    bd:2c:d8:22:00:55:92:94:2c:f4:e0:96:2c:72:d8:
                    82:1a:2b:01:07:ee:e4:8d:e8:29:8d:8e:6c:b0:ac:
                    cf:f2:c4:86:08:5c:fc:74:65:d4:ef:d6:ce:c5:0a:
                    eb:93:98:af:b3:af:c4:93:e2:35:24:bc:44:55:ea:
                    9d:95:b3:44:17:e2:a2:15:d3:7e:90:a4:7f:59:86:
                    9c:98:82:9a:20:b8:d1:21:7d:7f:00:5c:17:27:1b:
                    20:c8:ec:e8:33:71:72:67:b5:f8:cf:de:c8:98:46:
                    ef:dd:f7:e5:4a:a7:e8:ef:60:73:c7:93:ef:2d:ba:
                    1d:51:76:0d:c9:66:99:4f:e0:5c:67:5c:9a:00:69:
                    5e:e7:f9:da:ce:bc:4f:f9:8d:6c:4b:63:40:cd:2e:
                    b5:90:75:9b:18:6b:5b:1c:fa:ad:71:97:48:7e:d1:
                    b1:e8:5e:da:7c:16:03:1a:05:c2:71:a1:2d:60:d2:
                    8b:06:57:50:57:d5:53:52:61:2d:94:56:d8:00:ec:
                    90:be:da:f0:96:70:f1:46:e7:50:a7:b3:9b:2c:47:
                    fd:1f:19:f9:7e:55:6e:99:d7:26:f8:69:e2:a2:c2:
                    26:01:a1:db:f7:78:72:1a:62:a1:ac:15:f6:d3:08:
                    87:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:82:21:0D:A4:26:54:90:F9:5C:EE:6C:02:D8:48:87:3E:D7:28:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/837fbbc1-1e56-3a6f-b60f-f2aba2f03f45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:0b:63:50:0c:07:d2:09:d5:0f:09:8b:a4:fc:db:8f:4f:94:
         cd:ce:12:12:fa:e6:be:07:4d:86:5f:a8:19:80:e9:42:dd:0b:
         3d:94:ca:b7:5e:36:8a:81:42:5b:da:e5:28:77:fb:97:4c:3c:
         de:65:81:77:97:d5:96:74:38:69:30:bc:69:59:62:0b:55:34:
         28:e9:7e:f5:e5:7e:b4:78:8f:67:d6:b7:a7:09:03:0a:d0:f3:
         71:82:85:bd:dc:59:7e:7a:75:ac:bc:cc:05:8e:8b:25:b7:27:
         6c:7b:21:9b:3d:09:93:96:df:ac:47:8b:d9:4a:62:2c:9c:8a:
         89:20:92:b4:4f:b3:22:96:db:5f:d8:71:4e:e8:6b:42:89:58:
         c2:50:16:d3:4c:f0:76:cc:3a:5d:bc:2d:64:40:4f:63:05:21:
         95:c9:af:8c:2d:3d:aa:47:d8:cf:02:b7:2e:2f:d8:f6:a5:e6:
         ff:39:79:18:31:88:58:2b:bc:87:41:94:3f:6e:a6:c8:4c:2d:
         1c:30:05:56:ef:ea:4b:e9:22:6f:ea:00:96:87:ac:de:be:ff:
         8a:cf:e7:c1:ab:27:c6:81:87:83:1b:eb:74:ba:5d:a8:a6:b8:
         d6:e0:a9:7c:e8:3e:14:9b:c5:b8:18:51:9e:8e:b9:44:00:ad:
         95:7a:15:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:25:47 2025 by rpki-client