Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/47fee39f-06f2-4714-a822-50bdbfad9dd4/9295a40d-aeb7-3331-b851-3756088ede76.roa
File:                     9295a40d-aeb7-3331-b851-3756088ede76.roa (raw, json)
Hash identifier:          hTtfxkkKKszyOb/Fp0afP0tpsqHWhXByT/zhD2vzyHA=
Subject key identifier:   C2:32:85:3E:AB:4E:98:3F:D7:7A:75:E8:C8:50:81:EB:45:05:25:BA
Certificate issuer:       /CN=47fee39f-06f2-4714-a822-50bdbfad9dd4
Certificate serial:       010D0C9F4328584A7780846E40CBB5647F93FD00
Authority key identifier: 54:1B:9D:D7:68:0C:1A:3C:1E:E8:DF:FF:77:FC:78:79:66:FA:A4:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/47fee39f-06f2-4714-a822-50bdbfad9dd4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/47fee39f-06f2-4714-a822-50bdbfad9dd4/9295a40d-aeb7-3331-b851-3756088ede76.roa
Signing time:             Thu 10 Jul 2025 01:00:51 +0000
ROA not before:           Thu 10 Jul 2025 01:00:51 +0000
ROA not after:            Wed 08 Oct 2025 01:00:51 +0000
asID:                     16509
IP address blocks:        162.136.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/47fee39f-06f2-4714-a822-50bdbfad9dd4/47fee39f-06f2-4714-a822-50bdbfad9dd4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/47fee39f-06f2-4714-a822-50bdbfad9dd4/47fee39f-06f2-4714-a822-50bdbfad9dd4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/47fee39f-06f2-4714-a822-50bdbfad9dd4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:77:80:84:6e:40:cb:b5:64:7f:93:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47fee39f-06f2-4714-a822-50bdbfad9dd4
        Validity
            Not Before: Jul 10 01:00:51 2025 GMT
            Not After : Oct  8 01:00:51 2025 GMT
        Subject: CN=ee71c396-1df0-4ea3-a63e-b227b9ba05ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5a:bd:96:16:52:ad:9b:83:9e:20:d9:8a:85:
                    7f:d9:e1:fe:56:d1:07:8d:50:97:ee:50:6e:9a:db:
                    5e:50:b5:f5:80:b8:66:2b:dc:12:a3:82:81:55:9c:
                    15:01:bc:11:40:e8:05:53:4e:d5:b8:46:18:a4:95:
                    3b:67:74:c3:a3:06:fe:61:cd:79:f3:1e:ea:66:4b:
                    63:fc:f8:d0:bf:08:c2:f6:24:ea:46:d9:2b:b4:0a:
                    1b:99:c3:c2:bf:a2:68:ed:47:21:98:16:b9:a3:2b:
                    d0:b6:12:c4:c4:05:6e:b8:9b:76:e3:fc:ed:fd:4b:
                    73:d4:ac:95:a5:84:20:d6:89:72:42:ff:23:44:d7:
                    08:03:74:8f:35:a6:72:b5:f2:0b:39:32:4e:c6:63:
                    d6:52:61:4b:2a:3f:fe:bc:5a:48:24:d0:c4:4e:31:
                    61:ef:81:f4:44:a0:47:a7:ad:5b:02:6f:66:bc:3a:
                    cd:97:ae:97:63:76:42:ab:5f:38:89:93:dd:77:6b:
                    b4:73:f3:45:c3:74:f4:d9:27:e6:bc:a5:1a:c7:bf:
                    43:dd:14:72:cb:1a:47:fc:b6:95:0f:eb:00:32:89:
                    0f:0b:02:30:01:dc:a7:8b:2b:68:2a:db:dd:79:24:
                    83:ec:b1:09:34:a1:e8:a0:35:b1:70:22:d9:b3:4d:
                    18:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:32:85:3E:AB:4E:98:3F:D7:7A:75:E8:C8:50:81:EB:45:05:25:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/47fee39f-06f2-4714-a822-50bdbfad9dd4/9295a40d-aeb7-3331-b851-3756088ede76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/47fee39f-06f2-4714-a822-50bdbfad9dd4/47fee39f-06f2-4714-a822-50bdbfad9dd4.crl

            X509v3 Authority Key Identifier:
                keyid:54:1B:9D:D7:68:0C:1A:3C:1E:E8:DF:FF:77:FC:78:79:66:FA:A4:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/47fee39f-06f2-4714-a822-50bdbfad9dd4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.136.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:e8:e0:1f:62:32:c5:15:4e:e0:0e:c2:db:f0:e9:3f:a0:b9:
         40:c7:ff:fd:f1:6c:53:ce:49:5e:2b:a1:8e:56:28:39:f2:5e:
         45:e7:10:73:00:19:68:e5:bd:be:7d:25:4e:66:54:9b:6d:0a:
         32:5e:09:58:80:11:41:e1:9f:7f:89:bf:55:2d:24:9f:3c:be:
         cc:f4:ba:db:26:aa:8b:b8:6b:27:53:5a:71:d1:6e:4e:0b:00:
         78:a3:4b:7b:3e:34:4d:61:a1:75:7d:b2:14:52:8e:e4:f4:7e:
         78:5c:1c:0a:f7:6a:19:ab:e7:f5:cd:59:60:25:dc:df:d8:b9:
         72:ff:07:03:fc:7a:37:c0:af:04:11:eb:8c:e2:a9:df:34:13:
         e9:e3:c1:ea:a2:a8:f9:af:97:8c:83:f8:bb:76:02:5b:f1:ed:
         90:3a:4f:be:1a:6c:bd:f2:2d:dd:58:dc:bd:0d:19:dd:8e:0e:
         49:8c:c6:9b:fb:60:bd:d9:0b:b2:45:a3:ee:6a:24:f6:3e:0e:
         6b:05:50:1d:50:2a:c8:dd:9f:cd:c7:46:ec:07:32:50:ee:59:
         5e:4b:a6:d2:df:c6:63:b5:1f:8c:32:22:26:48:5e:8d:19:5d:
         91:c5:8e:d0:03:a3:56:49:8a:60:54:8f:f4:99:7a:0b:ab:5c:
         8f:bd:c9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:14:06 2025 by rpki-client