Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/c6c72ae4-63be-3d8f-a9a0-fcfb4abfeba0.roa
File:                     c6c72ae4-63be-3d8f-a9a0-fcfb4abfeba0.roa (raw, json)
Hash identifier:          3DnGS+8zRLCD/ZdCDvOO2wmjFsfjR51EmfQEafToRBk=
Subject key identifier:   48:93:2C:01:9B:0B:B3:1C:E3:2A:2E:BD:25:5E:30:FC:F6:E9:0D:19
Certificate issuer:       /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
Certificate serial:       010D0C9F4328584B36BC5370741BE93488A73700
Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/c6c72ae4-63be-3d8f-a9a0-fcfb4abfeba0.roa
Signing time:             Tue 16 Sep 2025 13:00:41 +0000
ROA not before:           Tue 16 Sep 2025 13:00:41 +0000
ROA not after:            Mon 15 Dec 2025 14:00:41 +0000
asID:                     11377
IP address blocks:        159.183.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:36:bc:53:70:74:1b:e9:34:88:a7:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
        Validity
            Not Before: Sep 16 13:00:41 2025 GMT
            Not After : Dec 15 14:00:41 2025 GMT
        Subject: CN=23aae571-978f-41ad-8ace-d10b5b08af96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:65:16:42:1f:a9:f8:26:d1:5a:79:ff:b1:24:
                    b8:d6:6f:28:dd:81:cb:dd:b4:f8:39:33:29:e8:88:
                    bd:52:1e:d6:22:fa:e1:4a:d1:d9:21:16:64:4c:2c:
                    94:6d:14:82:b0:a3:22:8c:b7:c3:25:88:ee:31:49:
                    af:aa:20:95:c5:5f:48:f3:f8:99:48:25:98:6e:2b:
                    8c:a7:f9:57:13:10:73:7a:c5:6b:1b:40:6c:d6:c1:
                    92:b6:df:28:45:18:de:40:42:22:2f:d6:25:21:c6:
                    ad:fe:25:c7:78:dd:a3:55:c3:3a:6e:be:35:5f:fb:
                    03:34:71:ae:98:73:f6:9d:3b:c7:e1:b3:53:e1:a2:
                    c3:7f:90:b0:e9:3a:a0:fb:59:fe:7e:8c:eb:aa:c0:
                    97:31:92:13:9b:f6:6e:9b:06:d7:a2:5d:3d:88:50:
                    fa:06:46:32:9e:3c:67:ea:3c:96:9e:eb:7c:03:bd:
                    cc:96:7f:aa:2d:fe:51:52:46:e8:98:fc:80:1f:15:
                    fa:49:fc:e2:d5:36:89:f3:ce:dc:80:15:05:2f:af:
                    d9:70:80:74:5b:a2:18:51:63:e2:30:84:d8:19:47:
                    63:7e:4e:1d:55:c3:bb:f8:14:97:89:de:9c:28:49:
                    df:48:7a:41:43:b5:d2:1a:1a:e5:c1:a3:2f:8a:95:
                    0a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:93:2C:01:9B:0B:B3:1C:E3:2A:2E:BD:25:5E:30:FC:F6:E9:0D:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/c6c72ae4-63be-3d8f-a9a0-fcfb4abfeba0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl

            X509v3 Authority Key Identifier:
                keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.183.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:5e:53:8d:d1:61:b6:ca:19:0a:f5:e4:ad:0d:d3:1f:93:45:
         79:98:45:3f:3b:a8:e0:fb:12:93:40:b9:3c:98:fc:77:57:5e:
         1f:6d:3d:d7:4d:54:5b:a7:13:77:07:56:95:b9:11:4c:67:05:
         04:4a:79:a7:4d:4e:67:ab:4a:9f:b7:57:c8:7f:ca:91:0e:a3:
         3b:0a:55:37:6d:d8:86:62:a5:a4:19:1f:e9:da:06:b2:be:9a:
         af:be:78:92:f1:f3:3e:42:59:56:62:69:13:9c:01:78:2d:b5:
         ae:96:df:e7:7b:1a:3a:8e:88:85:79:fb:89:d3:d1:bc:35:07:
         55:a5:25:41:07:70:29:72:48:37:ae:3a:9c:ff:4b:80:f1:42:
         87:05:1d:1a:53:9e:1b:bb:3d:12:80:e5:85:27:9d:ae:dd:31:
         28:0c:dd:94:c9:99:e8:74:e5:ff:6c:3a:e2:af:29:36:c5:41:
         a9:d7:23:ed:d4:7d:80:ad:c2:be:dc:03:9e:4a:e3:01:0e:9d:
         87:a9:be:c0:61:23:4e:b1:91:da:f5:64:5a:d1:2c:80:79:4b:
         7f:af:a6:dd:ce:ab:af:f6:c5:85:0a:59:82:d9:80:4e:7d:95:
         6a:f9:35:ca:13:29:e5:e4:ba:4f:df:a2:ef:e7:c3:d3:0f:e7:
         1e:2d:cc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 12:40:33 2025 by rpki-client