Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/f28e6c58-5862-3506-b2ae-e886f5d0b8b2.roa
File:                     f28e6c58-5862-3506-b2ae-e886f5d0b8b2.roa (raw, json)
Hash identifier:          Acvd1QNUGRIltsCOp9OcGVAfRlIArMeUr6skymJemJw=
Subject key identifier:   6B:C6:E4:51:E5:D4:9F:4F:91:D3:07:0F:ED:63:05:88:A9:52:9C:E4
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584A2313FD6EF72020B40AE04880
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/f28e6c58-5862-3506-b2ae-e886f5d0b8b2.roa
Signing time:             Mon 09 Jun 2025 19:14:20 +0000
ROA not before:           Mon 09 Jun 2025 19:14:20 +0000
ROA not after:            Sun 07 Sep 2025 19:14:20 +0000
asID:                     3477
IP address blocks:        161.55.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:13:fd:6e:f7:20:20:b4:0a:e0:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Jun  9 19:14:20 2025 GMT
            Not After : Sep  7 19:14:20 2025 GMT
        Subject: CN=250c4c8f-b782-4674-b664-f5b0eebd4a7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1f:12:78:0b:9e:78:a5:e4:e6:60:af:bf:a2:
                    3a:81:44:44:18:ec:29:13:77:ee:8a:6c:c4:0f:be:
                    4f:03:c6:08:f3:4e:38:b4:fb:f4:32:38:a8:c0:2a:
                    5b:cd:5b:22:cf:e3:09:bd:f2:86:60:9f:37:6c:7b:
                    92:22:ab:ba:1b:76:57:69:f9:0a:1d:60:00:42:62:
                    b6:e9:80:be:4b:47:13:e5:b4:cf:67:83:da:a1:69:
                    35:61:2e:5b:45:9e:4f:74:6f:ec:71:bf:4a:12:9d:
                    1f:45:46:c1:b1:83:fd:b2:9d:da:58:59:9c:53:0e:
                    ee:84:9f:60:ca:6a:1b:3b:c0:da:4e:c5:9a:a5:fe:
                    59:7f:89:6f:c3:6e:b1:a9:c3:bc:03:e3:8d:a6:04:
                    ee:35:89:d8:84:f9:2b:eb:e1:d6:7b:cd:1b:5b:83:
                    44:74:df:5e:a7:58:6d:b7:c8:bf:f9:c1:5b:76:2a:
                    75:4e:7d:a0:00:65:f9:83:5f:7c:29:4a:9d:81:69:
                    b0:01:20:26:5c:e5:b2:d6:9e:91:79:33:e0:dc:fe:
                    fe:7b:63:44:b3:aa:ea:cf:0b:cc:f7:b4:dd:20:57:
                    45:0e:a6:5b:f5:0a:1c:89:28:53:77:95:b0:39:5f:
                    f6:98:6f:9d:69:34:43:f5:db:fb:c3:0a:c1:60:d2:
                    99:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C6:E4:51:E5:D4:9F:4F:91:D3:07:0F:ED:63:05:88:A9:52:9C:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/f28e6c58-5862-3506-b2ae-e886f5d0b8b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.55.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:83:3b:a6:42:4d:cb:d5:d6:c6:06:be:1b:84:57:6c:d5:22:
         72:50:f7:49:55:c5:e2:de:7d:4f:c2:71:78:e2:fd:1f:2a:ef:
         b3:31:b1:9d:7a:8f:45:ad:a5:57:42:79:73:c4:c2:da:d1:d9:
         c0:28:01:31:fc:b4:d1:0a:92:77:dc:0e:75:e5:79:47:04:c9:
         07:8c:65:5b:74:7a:e3:07:5f:0c:94:5f:f8:64:b8:b4:1a:e7:
         b4:6d:96:a5:fb:9f:bd:b0:ac:ac:0b:3a:76:9a:93:7b:d5:5d:
         ef:d3:6c:d6:62:94:d2:9e:72:dd:25:f1:87:a9:a9:1d:4f:f3:
         f7:99:7e:19:0e:7e:9c:bc:e8:7a:29:03:5a:b2:1f:74:f6:18:
         b8:3f:56:1e:69:60:87:a9:ad:b8:8d:bb:68:05:a1:3c:22:40:
         53:f5:8e:01:6f:bf:f9:a8:6d:f3:67:2e:2c:d7:ce:d4:07:e7:
         78:e2:9e:ba:57:92:32:d4:91:89:80:fa:f1:11:20:4c:29:3e:
         80:92:4f:e6:ba:cf:ca:1b:1a:60:fa:39:05:4c:74:86:ea:93:
         c2:ac:be:57:0c:7d:78:28:f4:c7:be:38:0e:6c:38:6e:e5:5b:
         62:54:b6:59:44:6f:a9:a6:b0:00:b5:08:e7:c9:ed:10:01:3a:
         c8:5c:a9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:37:59 2025 by rpki-client