Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c5669750-9e14-39b7-a0fc-71a0f8fd57a9.roa
File:                     c5669750-9e14-39b7-a0fc-71a0f8fd57a9.roa (raw, json)
Hash identifier:          bdd2N+BxYz63vGBgkf/dXCB+JU0eA5aSR6sGlHt5Tpk=
Subject key identifier:   28:BA:66:A0:74:E6:54:D8:B5:63:67:BA:63:9F:AE:EF:3E:91:7C:BE
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DA95561C409B1FB276AB80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c5669750-9e14-39b7-a0fc-71a0f8fd57a9.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     855
IP address blocks:        142.163.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:95:56:1c:40:9b:1f:b2:76:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=b9f3035d-8bbb-4c07-9b2a-39af0e20a00a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d5:eb:c9:00:00:ad:4c:c5:a4:56:2b:ec:1c:
                    6c:fc:3b:f1:e8:bc:b7:12:94:1c:9c:91:5e:e7:8e:
                    24:c0:30:80:26:1b:a7:c2:a0:10:0d:c7:83:76:c2:
                    99:11:21:de:02:75:a4:57:ee:40:93:8b:be:8a:ee:
                    d6:46:08:c2:fe:48:cc:a1:1a:25:11:b7:96:e4:2a:
                    07:7d:76:c2:de:2a:92:6d:64:cb:39:31:e8:e5:d6:
                    75:2e:e3:eb:79:ea:41:29:b1:5c:3c:8c:19:89:2d:
                    a6:91:7f:8b:e6:ad:1d:8e:87:09:da:cf:2f:cf:b4:
                    7f:cc:38:94:b8:01:97:60:7e:2f:68:d0:68:66:de:
                    00:d2:dd:ad:cc:7c:4e:ff:78:22:1f:b9:b7:04:80:
                    10:29:70:d8:36:6a:97:54:c1:7b:6a:fa:f3:30:00:
                    8d:c5:be:a9:7d:99:20:a8:f1:f7:1a:0d:dd:15:ff:
                    f8:9c:01:d9:86:69:49:43:4e:17:77:27:7e:82:75:
                    9c:70:01:23:eb:47:8d:71:c1:ae:da:ad:ca:53:a7:
                    06:23:32:79:91:13:c3:8b:12:a2:a3:4f:c0:29:6e:
                    87:bf:27:b2:11:f0:45:d9:97:bd:82:7c:df:6d:3d:
                    3c:96:5a:ef:ed:48:84:b6:12:79:38:f4:58:3d:87:
                    be:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:BA:66:A0:74:E6:54:D8:B5:63:67:BA:63:9F:AE:EF:3E:91:7C:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c5669750-9e14-39b7-a0fc-71a0f8fd57a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.163.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:a0:00:2b:9a:45:2b:34:87:54:b5:15:53:6d:0c:67:9d:44:
         68:86:42:58:63:d4:f3:01:5d:21:fa:cc:fa:5c:8d:f7:68:a0:
         85:3e:f9:f1:65:a4:5e:48:44:e1:c8:fc:b7:07:f3:ad:8f:c3:
         d9:60:1a:e7:fb:41:77:23:c4:ed:5e:fe:d2:38:8b:53:28:db:
         88:a5:75:5b:84:c0:28:e8:1a:eb:88:4d:98:a2:19:2a:38:de:
         6f:ac:72:31:9e:6c:14:e1:a7:c4:e9:5f:05:75:7f:1e:99:8a:
         20:90:e3:d4:3f:a8:6f:92:07:b3:24:02:50:fd:6e:76:2a:cc:
         3d:4d:30:a9:ba:89:a1:1b:89:95:5b:4d:fa:24:bc:82:03:b5:
         dd:a9:18:7c:cb:bd:c0:b1:f8:8b:db:41:47:34:5e:39:25:24:
         eb:fe:12:79:32:10:c7:9b:8a:5e:b4:84:80:f6:fc:e3:7b:50:
         0d:3e:6c:cb:c3:85:c3:70:d7:c0:f9:eb:99:42:0e:73:ca:78:
         64:74:c7:32:a2:b6:35:4a:9b:af:8f:12:32:6a:72:81:cb:aa:
         c4:21:f1:55:09:5f:80:25:0c:27:c0:f1:4d:5b:77:08:92:0e:
         45:91:bc:26:30:e9:f1:83:84:96:91:b4:dd:04:95:f4:a6:ba:
         a3:6a:d7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:13:23 2025 by rpki-client