Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/e667c5dd-d722-3d40-ba59-95b2adb19266.roa
File:                     e667c5dd-d722-3d40-ba59-95b2adb19266.roa (raw, json)
Hash identifier:          x8hqO9OveOLY003INIMSf0eT1hhJTuYcrVa1oYw0Hy4=
Subject key identifier:   1D:8A:FF:A3:03:1B:CC:F0:CC:0D:74:C6:55:9B:62:B4:5B:91:48:2E
Certificate issuer:       /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
Certificate serial:       010D0C9F4328584BBA10469257AC81B6BABA8500
Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/e667c5dd-d722-3d40-ba59-95b2adb19266.roa
Signing time:             Sun 02 Nov 2025 14:00:38 +0000
ROA not before:           Sun 02 Nov 2025 14:00:38 +0000
ROA not after:            Sat 31 Jan 2026 14:00:38 +0000
asID:                     22765
IP address blocks:        72.20.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ba:10:46:92:57:ac:81:b6:ba:ba:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
        Validity
            Not Before: Nov  2 14:00:38 2025 GMT
            Not After : Jan 31 14:00:38 2026 GMT
        Subject: CN=af7bc637-5359-469b-b1f9-e19391813900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3b:1b:59:29:8e:67:9b:cc:4c:c3:39:81:49:
                    53:60:3b:35:f5:b9:8d:73:e5:46:2e:c7:01:05:85:
                    46:9d:32:8b:6e:6c:ec:5f:71:c0:f1:15:0f:04:f2:
                    ed:02:a0:16:64:78:66:7c:d5:92:a1:b1:c1:d6:e3:
                    11:07:e1:1b:82:81:9e:fc:de:03:8c:f4:96:03:5f:
                    56:e2:69:4b:13:a5:7f:bd:c7:50:70:a7:4c:b2:e3:
                    71:b9:84:60:44:6e:d1:44:b8:27:e7:14:fb:94:f4:
                    7f:f3:0a:f6:8c:6b:92:94:ef:73:78:d2:bd:3a:8e:
                    18:bf:67:a4:9a:c3:16:9b:39:c7:58:0d:cc:6b:2f:
                    84:d5:4f:47:76:47:0f:b3:53:72:66:23:b2:cd:f1:
                    f2:63:e0:90:b4:b8:ea:75:20:e3:88:e6:91:6d:29:
                    17:d0:78:5b:b9:99:82:75:2d:9b:e1:62:e3:92:1d:
                    64:e2:1b:6b:fe:9a:34:99:d2:d3:ed:de:88:7f:f2:
                    fd:0e:44:9d:8a:51:6e:86:b2:8a:18:b0:ab:7a:48:
                    e6:6b:84:31:b8:51:97:d5:e2:fc:1a:14:0a:35:4a:
                    ee:5d:cd:c3:09:cb:92:60:d6:f7:23:40:54:e8:ed:
                    c6:d2:f3:c7:24:bd:cc:bf:39:0f:55:a9:e4:a8:52:
                    93:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:8A:FF:A3:03:1B:CC:F0:CC:0D:74:C6:55:9B:62:B4:5B:91:48:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/e667c5dd-d722-3d40-ba59-95b2adb19266.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl

            X509v3 Authority Key Identifier:
                keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.20.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:c5:08:9b:69:68:98:6e:ff:5d:ec:fe:56:1e:4e:aa:c4:a2:
         0f:71:e6:51:02:c5:bc:64:38:e9:83:b6:6a:a7:93:39:d0:d1:
         72:5c:47:d7:33:09:d9:f6:3b:fe:57:ff:f0:2a:39:91:3e:3a:
         60:1e:4e:a4:93:67:07:3c:f6:0c:e9:b3:e7:8e:44:1d:26:f0:
         07:06:e6:b0:f3:07:29:f3:c4:4a:ad:18:cd:95:d1:af:94:d2:
         3d:20:9b:65:ca:15:86:e7:42:c8:47:a6:3a:25:7a:eb:2d:57:
         69:90:3b:d6:78:d9:8f:5f:27:fc:33:9c:19:d0:9e:88:2f:4b:
         6d:ca:fb:5d:35:99:a3:0a:23:b9:e6:57:54:a7:a0:c5:98:39:
         41:3c:da:a1:53:d2:b0:aa:f4:ec:62:5b:b9:b8:91:31:45:64:
         55:48:90:d4:73:35:2f:e5:24:85:11:5b:19:73:59:95:fc:25:
         2d:82:2a:f3:35:5f:3f:09:3e:a0:5b:7d:e5:28:53:9d:18:90:
         3b:be:6e:5e:27:04:6d:22:47:97:5f:9b:66:1f:d7:96:11:e7:
         fa:4a:00:06:9b:44:98:32:9d:46:c1:59:45:0b:b5:dc:c1:fd:
         4c:a8:09:91:1f:f5:f7:31:34:7b:ce:db:e7:e1:92:65:73:ab:
         5d:da:d6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 14:34:53 2025 by rpki-client