Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/956f8675-a9b9-3539-bb3b-c281d2d58d9c.roa
File:                     956f8675-a9b9-3539-bb3b-c281d2d58d9c.roa (raw, json)
Hash identifier:          r9zMTZyKyAjeTBbT3WzWps7ckyh+o/VAWLX4m81sWLY=
Subject key identifier:   F1:59:E7:FE:F9:BB:70:7C:5D:C2:C2:E3:D7:A9:5F:C2:B5:AF:94:49
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F43285849F9DFCEB0DF7A9FC3DCB5AB60
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/956f8675-a9b9-3539-bb3b-c281d2d58d9c.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     7385
IP address blocks:        216.123.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:ce:b0:df:7a:9f:c3:dc:b5:ab:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=553d626b-c708-4ac6-ab16-84e730872b2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:46:96:5b:24:79:fc:f7:54:77:1b:e6:21:37:
                    e6:75:16:7d:a1:35:6b:d6:02:76:18:a1:cd:10:f5:
                    01:93:5c:8d:02:3c:2f:f2:82:40:aa:6b:00:74:86:
                    b7:d6:13:a9:30:20:05:97:96:c7:41:48:9d:7d:49:
                    85:bd:5a:c6:d8:04:ec:94:6e:2c:73:1a:13:b8:e4:
                    ee:4f:6d:70:93:c5:6d:3f:f9:9e:4b:48:4a:79:f4:
                    4c:15:24:c7:1c:98:bc:85:a1:b5:ee:85:a6:13:6d:
                    6d:57:08:3f:f9:9d:03:37:77:8a:4a:8e:20:cf:9b:
                    44:23:44:d4:2b:15:7a:79:7b:25:66:5e:b2:e7:00:
                    33:6a:9e:de:21:44:9c:b5:00:93:a2:a5:55:58:37:
                    d0:82:96:6f:e3:b0:7f:40:3c:4c:a2:c9:a6:02:c9:
                    7b:c3:e4:46:0a:ba:c4:4e:b3:69:28:15:63:54:6a:
                    d3:3e:0b:f6:2d:4f:e9:72:61:be:17:c8:27:a0:e6:
                    43:53:52:06:1e:95:b4:ed:c0:3f:43:a5:27:1c:c1:
                    4d:9f:9d:82:6d:f1:91:0f:57:6f:42:1b:dd:99:b5:
                    53:f2:da:26:34:86:7f:60:af:46:bd:17:a8:e5:b6:
                    a4:1f:56:8e:e3:a9:10:7c:4d:33:24:b4:a4:c8:1f:
                    00:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:59:E7:FE:F9:BB:70:7C:5D:C2:C2:E3:D7:A9:5F:C2:B5:AF:94:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/956f8675-a9b9-3539-bb3b-c281d2d58d9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.123.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:fb:15:0a:88:ce:26:74:9c:ee:af:e4:22:2e:25:93:43:26:
         ae:c2:e5:64:b9:6e:2f:97:7f:9c:86:30:5b:9c:78:b2:b3:cd:
         c4:5f:5d:b9:7c:6e:87:a0:4f:0f:2e:dc:23:39:56:4c:86:35:
         73:91:34:54:56:aa:42:06:45:2e:84:64:9d:96:7d:c2:b8:bc:
         47:a9:2b:de:f5:51:04:8d:37:51:d9:2e:88:be:a3:ff:00:37:
         8d:b5:59:11:39:a1:b7:1e:e5:73:af:25:aa:74:c7:cc:1c:f0:
         25:c7:4d:7c:85:1d:73:de:d4:6c:11:e6:1b:ab:0f:11:8c:90:
         27:38:87:8a:a3:8d:74:75:85:7d:31:b0:97:58:55:72:7a:53:
         71:82:17:b2:05:8c:4c:09:08:ba:c6:72:4f:f3:26:81:41:73:
         57:dd:29:bb:48:bb:a1:5f:38:82:d2:22:65:4b:aa:44:89:52:
         a6:5e:e9:11:8e:93:36:6d:47:0d:ab:a0:25:78:2f:98:73:b9:
         7a:82:af:73:59:db:50:0f:3e:20:37:4b:f1:6b:be:55:de:93:
         8d:6a:d5:19:31:b2:e2:33:13:c3:8d:1f:60:7b:ae:67:4f:cc:
         10:be:7b:84:9b:82:a6:a8:f1:73:2e:a7:24:dc:c5:e1:62:2e:
         91:25:56:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 04:31:06 2025 by rpki-client