Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab23a37f-2663-4683-a4bb-fd721130fe8e/56d01446-96cd-35a9-83df-8181fd06dc38.roa
File:                     56d01446-96cd-35a9-83df-8181fd06dc38.roa (raw, json)
Hash identifier:          pKyd8k/uPDif+vQ874lNK/SmEsqf+Kok7V1e/JfnIGY=
Subject key identifier:   40:18:4D:37:B8:90:6E:80:42:DE:70:84:BB:B5:E2:B7:61:C9:98:8E
Certificate issuer:       /CN=ab23a37f-2663-4683-a4bb-fd721130fe8e
Certificate serial:       010D0C9F4328584A63F5B6B51D12EB9D875AD800
Authority key identifier: 64:EA:88:5D:49:D2:42:7A:C8:60:08:B5:66:10:AE:82:AF:68:C8:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab23a37f-2663-4683-a4bb-fd721130fe8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab23a37f-2663-4683-a4bb-fd721130fe8e/56d01446-96cd-35a9-83df-8181fd06dc38.roa
Signing time:             Thu 03 Jul 2025 01:00:48 +0000
ROA not before:           Thu 03 Jul 2025 01:00:48 +0000
ROA not after:            Wed 01 Oct 2025 01:00:48 +0000
asID:                     53282
IP address blocks:        64.49.40.0/22 maxlen: 24
                          104.37.136.0/21 maxlen: 24
                          162.221.48.0/21 maxlen: 24
                          2602:ff59::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab23a37f-2663-4683-a4bb-fd721130fe8e/ab23a37f-2663-4683-a4bb-fd721130fe8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab23a37f-2663-4683-a4bb-fd721130fe8e/ab23a37f-2663-4683-a4bb-fd721130fe8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab23a37f-2663-4683-a4bb-fd721130fe8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:63:f5:b6:b5:1d:12:eb:9d:87:5a:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab23a37f-2663-4683-a4bb-fd721130fe8e
        Validity
            Not Before: Jul  3 01:00:48 2025 GMT
            Not After : Oct  1 01:00:48 2025 GMT
        Subject: CN=39526a67-bac0-4094-9179-46832e98778c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a9:0d:5e:c0:2a:16:8f:44:72:00:1b:af:5f:
                    c1:52:2c:77:3d:8e:51:5f:8c:77:0f:1c:09:a6:ab:
                    3c:38:92:6d:45:eb:2d:eb:c9:dd:ce:28:65:04:90:
                    51:c3:dc:c8:55:bb:f4:2b:4d:7c:96:2f:07:ac:18:
                    4f:3c:fd:b7:83:41:b6:6b:33:cc:bf:31:d4:cf:a1:
                    fc:4b:08:be:2f:4b:5a:7f:10:18:ca:f9:5d:59:d3:
                    6d:45:dc:a8:8c:66:8e:1e:90:48:1e:12:ae:ad:1a:
                    fc:75:9f:7a:a5:11:4f:9f:af:e2:53:9f:58:e8:46:
                    cb:f9:15:66:45:ce:31:da:62:45:6c:e5:00:14:66:
                    47:96:80:0d:de:df:61:7d:8b:1f:56:28:c4:07:1a:
                    90:6a:49:1c:f0:1e:06:d5:9a:19:5c:31:b5:f4:4c:
                    fa:74:47:f0:bb:92:0f:f3:00:19:54:21:ec:12:5b:
                    6a:46:30:86:dc:fc:5a:0f:e6:dd:4b:5e:56:cb:09:
                    79:b7:cc:c3:08:bb:f9:ba:23:e7:a6:e9:b6:a0:35:
                    e6:3d:b7:f0:9a:7f:85:24:d9:a0:f3:69:68:df:80:
                    a3:df:fd:7f:a5:8e:16:cc:f2:7c:22:6d:ba:c1:8b:
                    cf:b5:da:27:a6:99:cd:2b:da:8b:b6:b6:f8:2d:f0:
                    9e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:18:4D:37:B8:90:6E:80:42:DE:70:84:BB:B5:E2:B7:61:C9:98:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab23a37f-2663-4683-a4bb-fd721130fe8e/56d01446-96cd-35a9-83df-8181fd06dc38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab23a37f-2663-4683-a4bb-fd721130fe8e/ab23a37f-2663-4683-a4bb-fd721130fe8e.crl

            X509v3 Authority Key Identifier:
                keyid:64:EA:88:5D:49:D2:42:7A:C8:60:08:B5:66:10:AE:82:AF:68:C8:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab23a37f-2663-4683-a4bb-fd721130fe8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.49.40.0/22
                  104.37.136.0/21
                  162.221.48.0/21
                IPv6:
                  2602:ff59::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:3e:bc:b6:5a:0d:87:d2:7d:43:a4:22:96:e5:33:bf:5a:b5:
         81:b3:02:4c:3b:48:91:54:11:7b:bc:8b:fe:fa:56:17:78:17:
         18:69:35:7a:a6:32:6e:71:a4:f8:a6:02:d5:61:f0:da:79:db:
         ef:4c:1e:6f:1b:10:2a:04:7e:6b:4f:69:e0:01:c5:3c:dd:3c:
         87:1d:04:1e:e0:dd:ea:4a:a7:e0:f1:0b:0d:e2:5d:68:13:ba:
         f4:20:35:e5:96:68:17:d5:b0:96:73:45:03:44:cd:bb:53:25:
         ee:23:d3:a3:f7:c1:57:c4:8e:7a:c5:2e:55:18:86:36:fe:29:
         de:4b:42:46:94:c0:96:ad:e8:fe:8c:de:51:84:4a:e8:21:3e:
         df:46:f6:24:4f:84:88:63:17:9f:ad:4d:66:47:a7:d5:65:c9:
         8a:be:57:c7:7e:af:e9:3f:16:5f:6d:a9:10:d8:10:0e:ea:b0:
         ba:ba:c0:a3:b4:99:72:5c:a2:9f:4d:08:38:69:b2:83:a6:e5:
         13:1b:89:b4:a1:d4:b1:d1:c1:91:0c:70:49:1f:e6:0f:65:0f:
         c6:e3:5d:c4:5f:ff:73:23:a8:1c:73:5a:29:04:74:92:0c:ce:
         ed:9a:78:ab:1f:ad:b7:eb:34:f5:0f:a6:82:65:3b:e6:82:44:
         8b:d6:8b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 19:13:13 2025 by rpki-client