Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/517bbca5-17e1-3242-a695-67fa19c954bc.roa
File:                     517bbca5-17e1-3242-a695-67fa19c954bc.roa (raw, json)
Hash identifier:          Oyn4DIT/vzuj72sajHkGgHhMkOnfBRF6zFdaXu+ilLA=
Subject key identifier:   71:25:9A:28:0A:E3:24:8B:B8:1F:2B:23:F9:59:A9:5B:6B:AF:A8:E2
Certificate issuer:       /CN=5b6fd262-94ea-4e33-af3e-212abe0fc628
Certificate serial:       010D0C9F432858499AF48CD59B6EADEDC6068E80
Authority key identifier: 36:3C:C8:50:79:A5:6C:A5:32:F4:78:54:FF:FC:3C:FC:18:F8:33:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/517bbca5-17e1-3242-a695-67fa19c954bc.roa
Signing time:             Tue 22 Apr 2025 01:00:47 +0000
ROA not before:           Tue 22 Apr 2025 01:00:47 +0000
ROA not after:            Mon 21 Jul 2025 01:00:47 +0000
asID:                     23341
IP address blocks:        143.55.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5b6fd262-94ea-4e33-af3e-212abe0fc628.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5b6fd262-94ea-4e33-af3e-212abe0fc628.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:f4:8c:d5:9b:6e:ad:ed:c6:06:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b6fd262-94ea-4e33-af3e-212abe0fc628
        Validity
            Not Before: Apr 22 01:00:47 2025 GMT
            Not After : Jul 21 01:00:47 2025 GMT
        Subject: CN=9aee5df7-b209-4b0a-aeb9-7b905f8b6b20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f7:e3:e3:b7:88:d5:39:7c:68:13:f4:8b:36:
                    6a:8f:a3:3c:a6:55:52:8e:8c:09:d8:42:01:6e:05:
                    22:a3:65:bb:df:1d:b3:33:00:9c:b3:4d:be:5b:03:
                    71:c4:29:03:f9:61:43:94:b8:b1:83:c2:55:93:cb:
                    b0:7a:3d:48:65:65:0f:1e:65:a4:73:7a:cd:06:34:
                    f4:f0:7c:a1:b2:72:6d:d0:da:4a:d6:bb:88:68:39:
                    d6:07:56:33:fb:9d:da:23:b8:a6:f1:84:ed:a3:ba:
                    0c:b5:4e:13:76:de:a4:e0:ec:6a:15:27:08:84:39:
                    16:fc:c4:30:2f:02:da:50:9c:78:8a:33:e2:17:73:
                    c5:26:97:33:5b:a0:0d:d1:b7:e7:56:6b:1d:06:8e:
                    c8:39:d6:d2:fc:5e:27:13:3c:72:ec:c7:72:38:40:
                    5a:f2:b0:16:5c:4e:ab:6d:d2:d6:12:7b:8c:22:e3:
                    46:2f:40:8e:a6:be:88:5b:0b:8b:75:38:ea:8f:aa:
                    c8:c3:4c:5d:2b:56:8c:77:04:20:80:d5:7e:f4:31:
                    49:3a:ff:87:76:86:5e:8f:ee:cb:2c:04:5d:3e:9d:
                    2f:46:71:7f:72:b4:81:4c:f5:54:3f:56:c5:ee:d6:
                    67:87:9a:2e:19:23:f5:67:65:17:e3:75:eb:f9:57:
                    0e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:25:9A:28:0A:E3:24:8B:B8:1F:2B:23:F9:59:A9:5B:6B:AF:A8:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/517bbca5-17e1-3242-a695-67fa19c954bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5b6fd262-94ea-4e33-af3e-212abe0fc628.crl

            X509v3 Authority Key Identifier:
                keyid:36:3C:C8:50:79:A5:6C:A5:32:F4:78:54:FF:FC:3C:FC:18:F8:33:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.55.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:c9:57:c7:63:53:7f:56:c4:d2:34:ef:d3:34:89:fe:af:ac:
         22:e9:be:0b:91:9d:ec:50:2d:df:11:c7:8c:58:6a:67:e2:d4:
         7c:1b:28:b9:3a:a6:55:2a:98:7a:8d:8d:a5:5d:42:c8:d2:29:
         6a:9c:74:26:09:b1:5d:59:1f:0e:75:f5:73:10:9e:5f:b7:8b:
         29:e2:91:0c:64:b3:44:df:68:42:d8:92:0e:4a:39:40:4a:47:
         f0:7f:6f:fd:5c:79:e0:49:12:9a:9e:83:85:30:50:3f:de:18:
         b6:df:52:27:e6:42:e8:e0:94:7b:da:9f:f8:b7:b8:3b:79:ae:
         d1:f0:e6:14:b2:b2:c1:ee:1f:c7:8b:e6:d0:80:c0:0b:a5:ef:
         27:93:51:c5:ba:f2:9a:a2:e0:bd:c1:18:5a:ec:1e:ee:62:df:
         ed:02:1c:64:8d:83:fc:4e:8c:6e:61:ad:78:e9:00:8c:86:eb:
         26:d3:4d:bd:6a:97:7e:91:97:fc:c9:90:90:ed:a4:22:d3:ad:
         a5:62:73:52:73:2d:33:e0:cd:92:33:d7:85:09:61:e4:28:18:
         9f:e2:2e:32:f2:7d:6b:9c:f9:c0:25:0e:ad:06:ad:7c:7e:61:
         83:d7:ea:6a:cf:b4:39:e5:95:76:21:a1:0a:0e:d6:3a:d9:25:
         01:2a:be:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:00:30 2025 by rpki-client