Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/56839789-9117-3bbe-a93a-9673ed9152fd.roa
File:                     56839789-9117-3bbe-a93a-9673ed9152fd.roa (raw, json)
Hash identifier:          873nSMPOKC5pi0tCsGthiTTdi0IedX0MRKNFNoh/ogM=
Subject key identifier:   24:97:95:9A:E2:B6:9E:A0:72:49:6D:77:C9:6A:77:67:C3:2F:E3:BD
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F43285849C904EB0C7A6DFDFED47CB780
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/56839789-9117-3bbe-a93a-9673ed9152fd.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     25899
IP address blocks:        208.56.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:eb:0c:7a:6d:fd:fe:d4:7c:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=f8cfe8ff-779c-473c-a040-e31d8c1a78b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b5:29:b5:53:ee:e4:35:29:51:26:17:c1:ae:
                    b2:bd:7f:f8:04:1e:4a:e4:04:af:eb:93:7f:10:01:
                    11:d4:24:19:c3:93:13:e0:97:12:ed:e3:e7:4d:ab:
                    10:10:d4:44:ed:75:b7:d6:b5:81:ad:3f:0c:a3:77:
                    ef:d2:41:0d:90:9a:a5:55:fb:a0:a8:78:4b:73:70:
                    63:b8:3f:fd:e1:92:6d:f9:3a:e2:1f:b3:42:a5:3e:
                    e3:21:08:91:cc:8f:a9:81:23:dd:30:19:d9:ee:cb:
                    e0:c8:e4:de:16:9a:23:91:34:b2:84:f6:25:e8:03:
                    d7:8e:b6:7a:b5:67:d2:aa:e0:a0:38:9c:e0:8c:4c:
                    fa:d1:eb:2e:d0:65:e0:69:fa:0f:77:16:72:90:df:
                    a3:bc:85:ee:2c:1e:a6:21:12:bf:c5:9e:1b:95:56:
                    27:12:57:18:3b:ae:90:65:15:36:53:e2:14:ec:60:
                    de:00:9d:d1:a3:48:8c:f2:0a:3d:32:eb:a6:e7:1e:
                    77:9e:1e:00:63:39:7d:67:15:5c:b6:94:27:a7:8a:
                    f6:6a:55:14:c1:60:7a:23:9a:f2:08:4d:61:11:fc:
                    12:66:77:64:59:90:84:90:57:07:03:61:ce:48:4f:
                    d6:f9:5d:cc:b0:4b:66:e3:ac:fa:42:38:1b:d6:ea:
                    66:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:97:95:9A:E2:B6:9E:A0:72:49:6D:77:C9:6A:77:67:C3:2F:E3:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/56839789-9117-3bbe-a93a-9673ed9152fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.56.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:75:64:4c:54:e5:b9:84:7f:a6:a9:8a:65:75:fe:e0:62:c8:
         36:b0:60:f1:49:8c:0c:64:a0:be:34:9f:8f:e5:a4:8f:1c:06:
         6a:94:f2:8f:40:11:f9:8a:9e:c0:fa:b8:a9:a0:23:2c:00:fa:
         b3:ea:9b:78:c2:f8:44:ee:5d:65:f9:f9:31:32:87:3e:e2:68:
         44:d5:db:62:95:d3:73:1e:1b:b4:8f:2f:cd:0e:92:ef:e5:cc:
         67:1f:59:58:6b:2a:69:f9:6d:1e:d7:f5:36:56:07:06:be:c0:
         a2:66:fd:70:53:b4:02:b7:01:cd:6e:ed:49:8f:19:f4:91:0d:
         b3:f1:b2:f4:bf:8d:5c:ba:29:35:a9:11:63:c5:b7:ef:31:f0:
         53:40:8f:50:96:cf:00:8b:c6:9b:de:3f:f2:ce:77:17:7c:40:
         01:44:74:9b:9b:fc:fa:4c:dd:17:10:d1:b1:32:9c:fe:c4:a7:
         b1:60:1d:52:6b:1e:8d:18:1d:f5:de:fb:8e:66:53:24:d3:a4:
         71:38:71:03:62:83:52:20:bf:4d:03:f3:d7:9b:67:9c:f0:7b:
         80:a3:e5:16:18:92:83:fa:f0:ed:c1:63:2c:ff:e2:bb:b8:53:
         4d:53:d8:df:00:94:cc:b5:d4:16:d2:cd:40:36:5a:c2:f2:27:
         1f:64:c7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:20:54 2025 by rpki-client