Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/5503f1bc-b934-3420-9985-dfb62f4a1612.roa
File:                     5503f1bc-b934-3420-9985-dfb62f4a1612.roa (raw, json)
Hash identifier:          AF4100txp5PVpXKltnFKaew50hzlFqZCcBmu46zPFew=
Subject key identifier:   CD:2E:56:C4:8D:CA:F5:B4:5D:DB:93:B3:F2:E3:18:17:80:16:76:10
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584B3126EC43FE4A720B824036C0
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/5503f1bc-b934-3420-9985-dfb62f4a1612.roa
Signing time:             Sun 14 Sep 2025 13:00:42 +0000
ROA not before:           Sun 14 Sep 2025 13:00:42 +0000
ROA not after:            Sat 13 Dec 2025 14:00:42 +0000
asID:                     5769
IP address blocks:        216.113.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:31:26:ec:43:fe:4a:72:0b:82:40:36:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Sep 14 13:00:42 2025 GMT
            Not After : Dec 13 14:00:42 2025 GMT
        Subject: CN=cff956ee-0873-4aa1-9942-ef5e9a1d838a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a5:b9:87:7e:e8:8c:09:24:c6:57:83:63:73:
                    f7:ca:0a:51:9e:2d:ab:3c:62:b9:20:31:ff:bd:a9:
                    12:40:7c:31:f3:14:41:5c:a4:a7:fa:f9:49:ff:04:
                    47:8a:87:d4:94:52:bd:73:3c:09:ef:c2:8f:ba:f8:
                    db:16:ce:bf:88:f7:18:a7:4b:84:d2:5d:57:0d:63:
                    1f:69:24:6d:fe:e4:a5:75:61:63:08:d4:8a:11:8c:
                    a1:7b:d0:4b:8d:a3:7b:40:5f:1d:a5:26:8e:58:51:
                    15:53:7a:c1:f8:5a:83:24:0d:46:91:14:cf:35:4f:
                    6f:48:c3:e4:c3:40:5e:65:d9:98:5c:4e:1b:31:3c:
                    29:51:bb:86:ad:7d:e4:f4:a6:5c:d0:58:02:f6:c6:
                    5e:a3:6b:d6:dc:1a:34:6a:06:a9:fc:a1:91:ea:6b:
                    bb:1f:65:a9:b7:c5:21:c3:34:66:81:61:7c:e0:be:
                    d1:36:bb:f2:bf:f3:51:5b:86:50:00:db:ec:6a:bf:
                    22:cb:4d:02:b7:18:d2:b2:0b:01:c6:e8:1f:3d:96:
                    ef:fc:1c:6c:33:91:c9:8e:4d:18:c4:a4:21:c2:75:
                    d8:05:1f:69:b0:44:c9:9a:24:6c:b1:ed:6a:28:f5:
                    5d:a7:6e:14:6d:9c:24:16:c6:b6:a9:9a:9a:02:f8:
                    b8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:2E:56:C4:8D:CA:F5:B4:5D:DB:93:B3:F2:E3:18:17:80:16:76:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/5503f1bc-b934-3420-9985-dfb62f4a1612.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.113.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:ad:37:d8:c5:31:1e:d8:57:85:65:e7:44:99:7c:bc:e4:49:
         f8:13:12:18:bc:19:f9:79:36:4a:6e:d8:ad:2b:5d:af:6a:15:
         22:fe:e7:a8:66:d4:4c:86:e9:6e:61:f0:38:bc:ce:dc:fc:5e:
         26:05:4c:6f:0d:77:77:be:9b:bd:9d:9d:17:c5:57:37:e7:a4:
         d1:2f:c3:9b:33:89:7c:f8:6a:22:d7:c5:2b:e3:12:e5:ab:ef:
         f8:70:ba:d3:96:a9:05:ec:d7:f0:2b:15:ab:b7:9c:fe:a2:61:
         43:38:6c:49:e2:f9:e8:01:a3:3f:73:15:02:55:35:59:f6:ef:
         e4:66:ad:bf:a9:0b:f0:8f:0f:c9:93:83:34:a0:ea:8a:95:d6:
         05:b4:17:fd:47:a8:f0:6f:ef:3d:ec:2c:27:27:f5:45:e9:6d:
         53:3a:96:22:e5:57:af:d5:ff:6f:10:be:14:9a:46:6f:c3:9c:
         35:11:de:f0:f8:1f:08:be:45:1a:f9:1a:c0:4e:c7:14:22:39:
         b4:f9:04:56:74:d1:d7:be:05:b6:cb:0a:29:90:e1:14:cb:00:
         de:5f:bf:5e:b3:1f:4f:9b:0f:0d:11:d6:e0:06:04:4d:49:59:
         3a:99:78:e0:3d:36:e0:ac:8f:4f:76:ac:de:1b:ce:4a:06:77:
         b2:3e:9e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 08:40:44 2025 by rpki-client