Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/22591029-4f23-3b5f-b09f-70785ba04715.roa
File:                     22591029-4f23-3b5f-b09f-70785ba04715.roa (raw, json)
Hash identifier:          wmj4nW1MNT6Cvg155sstZb63l/tLeZcb/VwzF6c7/qk=
Subject key identifier:   0D:21:97:0D:49:9D:2B:BD:4D:5E:C5:1B:CA:5C:D5:4C:31:D5:C0:51
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584AFC9CC1E9A6BE58AC4302EE00
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/22591029-4f23-3b5f-b09f-70785ba04715.roa
Signing time:             Tue 26 Aug 2025 17:20:19 +0000
ROA not before:           Tue 26 Aug 2025 17:20:19 +0000
ROA not after:            Mon 24 Nov 2025 18:20:19 +0000
asID:                     16509
IP address blocks:        170.114.122.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:9c:c1:e9:a6:be:58:ac:43:02:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Aug 26 17:20:19 2025 GMT
            Not After : Nov 24 18:20:19 2025 GMT
        Subject: CN=411df6ac-0675-44a0-8aa5-2b18b7161ca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ce:d8:69:a3:ed:5a:86:dc:61:e6:3d:8d:db:
                    ea:b2:c5:7e:64:19:24:7d:65:72:5f:05:4b:1f:be:
                    3b:a8:2f:df:ee:3d:30:0b:c2:e5:12:b6:2b:fc:e0:
                    ed:b7:72:87:45:93:61:99:ee:fc:49:a0:d1:25:e2:
                    c4:af:e0:28:13:99:63:c0:ab:4c:67:f1:3f:cb:47:
                    12:8b:05:2c:9b:8d:4a:bf:24:d5:51:39:58:0b:1e:
                    49:f2:8d:16:4d:bd:44:cd:86:fe:25:35:85:52:36:
                    c2:60:a9:3c:86:e4:07:b9:5f:db:32:ad:22:4c:f3:
                    29:6d:13:9c:dd:5c:2a:87:c8:f2:18:92:cc:74:34:
                    c4:cc:2e:b5:93:3f:98:49:0c:83:1e:82:41:fe:ac:
                    48:95:16:5b:c7:5e:e5:7c:cb:ab:b5:71:0d:0e:e6:
                    9a:3e:5d:f9:c2:ed:5d:4c:d8:4f:76:6c:c5:74:86:
                    f9:0d:75:18:b0:19:d7:0f:5f:cc:69:66:4e:90:2e:
                    ee:9a:b8:9a:10:fe:30:b3:9e:dd:88:8f:0f:78:95:
                    cc:12:f1:98:85:b9:51:b6:d3:d8:75:00:c1:f0:02:
                    61:93:8c:1c:58:90:f4:6a:37:c4:ea:0f:04:88:31:
                    85:3b:03:48:25:78:12:09:4b:6f:65:76:97:b0:15:
                    bb:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:21:97:0D:49:9D:2B:BD:4D:5E:C5:1B:CA:5C:D5:4C:31:D5:C0:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/22591029-4f23-3b5f-b09f-70785ba04715.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:3e:62:7b:50:94:bc:56:4e:27:96:09:b6:c6:f3:f9:b2:04:
         6c:02:6f:a9:28:13:01:2d:7f:e1:ba:e2:01:fc:26:3e:a2:77:
         ab:13:b2:73:2e:8c:fb:3b:f1:bc:47:a1:57:7c:60:2f:0f:f8:
         ec:a7:f3:c2:83:d0:eb:36:66:e0:bc:fa:30:92:ba:eb:3b:80:
         b0:32:41:2c:ee:df:66:89:3a:1e:ef:db:1e:43:b0:4e:bf:1f:
         bf:58:29:65:d3:3a:52:2d:6c:ea:b8:57:60:47:e5:48:fb:5a:
         c0:87:54:b7:57:0e:c9:72:47:e9:0b:89:71:e9:92:31:17:44:
         d2:0e:28:26:7d:a5:e8:1f:04:3a:13:4e:ca:6a:76:0b:fc:3e:
         ab:03:09:09:9d:ce:d4:7e:86:05:2c:1d:18:b6:dd:12:97:18:
         d4:f8:65:2c:01:31:b6:bf:89:1c:17:31:3f:60:92:42:39:58:
         ae:fe:ab:a8:7c:c0:c1:8f:b9:04:61:8c:bd:cc:29:fa:c5:6e:
         64:e8:20:ff:83:9c:83:ed:18:3f:e3:36:c6:42:47:af:b9:b8:
         a3:a6:a6:88:e5:0f:d3:c8:5b:78:b2:54:24:2d:4c:df:d3:cd:
         3f:15:b9:df:6a:17:7c:89:cf:a3:71:b0:3a:43:1c:fc:10:4e:
         5d:04:0d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 13:28:38 2025 by rpki-client