Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/cd719756-0df4-31fa-93da-84a2e19bde13.roa
File:                     cd719756-0df4-31fa-93da-84a2e19bde13.roa (raw, json)
Hash identifier:          gacyyotPtGhm+oiwgNeWCGu/bvOIH94qlkzQF7SgLfg=
Subject key identifier:   69:01:5A:26:16:45:7E:9F:5A:1D:CF:DF:5A:59:67:63:B7:48:A6:47
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584A0727CD0E0BCF6741FC1A7800
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/cd719756-0df4-31fa-93da-84a2e19bde13.roa
Signing time:             Fri 30 May 2025 19:11:37 +0000
ROA not before:           Fri 30 May 2025 19:11:37 +0000
ROA not after:            Thu 28 Aug 2025 19:11:37 +0000
asID:                     81
IP address blocks:        192.154.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:27:cd:0e:0b:cf:67:41:fc:1a:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: May 30 19:11:37 2025 GMT
            Not After : Aug 28 19:11:37 2025 GMT
        Subject: CN=66c4cc2c-b3b2-4005-9fa6-67b75e0c7056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c9:d2:2f:90:26:6f:e3:37:65:dc:ed:9f:78:
                    12:d4:af:39:5a:93:f9:27:d4:a1:50:a5:71:71:14:
                    e2:0d:5a:cd:3f:c0:a1:2d:bb:8e:25:7a:69:dc:ca:
                    bb:b4:76:72:b1:4b:26:ca:9b:a9:80:6e:74:40:9b:
                    14:7b:3e:b6:3e:d2:b0:b9:a5:af:07:7f:70:ef:b4:
                    32:fc:36:ef:a3:fe:00:24:72:bd:7f:dd:39:53:89:
                    d3:d2:45:75:ae:09:82:f8:b7:62:83:8b:43:f3:34:
                    a2:71:58:e8:f7:5c:8c:1d:6c:5d:7c:7b:ba:55:08:
                    aa:d4:21:01:45:b3:03:48:e7:4c:3a:b3:c8:df:f5:
                    7e:69:0b:b1:c1:e1:ea:e5:11:f7:9d:ad:89:7e:89:
                    ac:4e:a4:d3:d3:69:16:53:02:1d:e1:cc:d6:3e:ee:
                    f9:d3:28:ba:95:16:0e:b7:fe:e5:f0:26:02:51:d4:
                    41:63:2f:81:5d:03:b2:76:e3:97:b9:b3:23:86:1c:
                    9b:d6:8a:db:a7:77:62:05:07:66:48:8a:26:ea:c7:
                    31:c4:26:96:7b:28:7e:91:3a:6d:97:4f:52:a7:65:
                    46:22:e9:27:c1:1f:5a:9e:01:cf:38:b1:19:da:96:
                    3f:ff:79:35:19:04:80:de:44:35:5e:a5:24:a3:ae:
                    49:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:01:5A:26:16:45:7E:9F:5A:1D:CF:DF:5A:59:67:63:B7:48:A6:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/cd719756-0df4-31fa-93da-84a2e19bde13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.154.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:18:ea:0a:89:a7:14:38:7c:5f:83:22:0a:ab:b6:70:7a:2b:
         6a:e2:4e:44:b7:68:b4:4d:ba:3e:60:b3:bf:86:7b:34:0b:b2:
         08:53:41:90:37:7d:6a:de:e2:27:7e:64:5f:c0:72:9b:bd:3e:
         ef:3f:04:26:f2:7e:d2:82:89:0b:8e:7a:63:7f:11:dd:92:4a:
         ad:1c:3e:d2:0a:53:6b:2b:0d:db:d2:9f:9d:3d:b4:51:c5:60:
         85:77:89:7b:5b:3a:b1:98:77:c9:51:e8:e3:0e:11:c1:dd:ff:
         51:22:36:43:11:74:21:2a:36:23:93:01:df:68:a7:75:b0:18:
         41:00:03:10:b6:ea:85:d6:bf:16:a5:3d:bd:24:2f:a1:29:a3:
         0f:18:ed:c7:3a:a7:ac:e2:42:03:70:68:0e:b7:af:2c:cf:52:
         00:61:dd:0e:e6:a4:37:84:a4:31:86:18:67:4c:18:73:d6:5d:
         71:89:71:e9:ce:dc:17:a2:a5:87:d8:4b:2b:22:08:51:a3:94:
         a0:31:a8:b3:71:3b:64:7b:c0:c2:93:81:77:91:d7:ca:a5:9d:
         fe:fb:75:21:53:49:75:4d:55:a5:41:59:69:30:db:d9:6f:80:
         78:f7:ff:df:72:a6:01:88:0f:08:53:13:e5:5a:32:8d:95:10:
         9d:2d:84:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:34:54 2025 by rpki-client