Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d3878a5b-a112-41cb-867c-f6fae3f22d52/56888ec3-91ad-304f-a1c5-2db34a218a54.roa
File:                     56888ec3-91ad-304f-a1c5-2db34a218a54.roa (raw, json)
Hash identifier:          HvH1M1M35NjfJkr5PoP4nyOh9CO38h1lwj4OMmx8ezA=
Subject key identifier:   55:DE:6D:5D:2F:B5:29:34:87:49:22:86:86:BB:A1:CA:0C:E2:90:49
Certificate issuer:       /CN=d3878a5b-a112-41cb-867c-f6fae3f22d52
Certificate serial:       010D0C9F43285849E7BA7D1FD614931245772780
Authority key identifier: 7B:F3:AB:50:8E:44:E2:FC:50:F2:84:43:29:C6:66:F0:82:EA:4E:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d3878a5b-a112-41cb-867c-f6fae3f22d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d3878a5b-a112-41cb-867c-f6fae3f22d52/56888ec3-91ad-304f-a1c5-2db34a218a54.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     54172
IP address blocks:        192.154.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d3878a5b-a112-41cb-867c-f6fae3f22d52/d3878a5b-a112-41cb-867c-f6fae3f22d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d3878a5b-a112-41cb-867c-f6fae3f22d52/d3878a5b-a112-41cb-867c-f6fae3f22d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d3878a5b-a112-41cb-867c-f6fae3f22d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:7d:1f:d6:14:93:12:45:77:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3878a5b-a112-41cb-867c-f6fae3f22d52
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=16a6d545-39e4-454c-bc08-91d1c4445b4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8e:ca:36:0a:b1:ba:4d:55:5a:03:58:fb:a9:
                    4c:db:1d:77:69:d2:79:32:c3:0b:7c:76:f7:55:10:
                    3b:af:1c:b3:49:e0:ee:16:e5:ea:ea:72:49:7c:65:
                    7b:ae:2a:c3:73:94:c1:23:ae:6a:1a:f0:c3:2a:b8:
                    4f:1f:9d:ac:c4:88:05:23:0a:09:4c:66:e3:91:00:
                    45:a7:02:0f:3b:c6:5e:95:05:29:fd:ff:7d:18:7c:
                    fb:7c:75:e9:32:a1:55:f6:1e:8b:50:4a:34:4b:ae:
                    9f:8d:e0:65:b5:99:fb:d1:f2:74:f4:57:3d:ec:c7:
                    02:3b:01:e4:77:4d:3f:85:e6:c6:00:ec:f3:27:15:
                    e0:51:1b:0e:a2:00:1a:eb:6c:f0:c7:28:89:c1:e9:
                    55:56:0e:84:2a:b8:d0:90:4c:88:44:79:c9:9f:e3:
                    21:3c:f9:d8:0f:4f:14:f7:2a:2e:39:fc:e1:89:bf:
                    7f:84:99:8e:21:9d:59:15:83:57:f3:61:3c:b9:46:
                    bf:cd:f7:b1:93:c1:a4:7a:ed:77:b7:1d:ce:1f:a0:
                    1a:91:d0:10:a3:51:c9:b9:a7:fa:e6:6d:59:fe:0b:
                    a4:c0:8f:0f:83:42:1e:b3:2c:18:ae:9e:87:df:53:
                    4d:b6:dd:8c:00:61:ca:d3:f8:78:ac:cf:71:fc:47:
                    6e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:DE:6D:5D:2F:B5:29:34:87:49:22:86:86:BB:A1:CA:0C:E2:90:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d3878a5b-a112-41cb-867c-f6fae3f22d52/56888ec3-91ad-304f-a1c5-2db34a218a54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d3878a5b-a112-41cb-867c-f6fae3f22d52/d3878a5b-a112-41cb-867c-f6fae3f22d52.crl

            X509v3 Authority Key Identifier:
                keyid:7B:F3:AB:50:8E:44:E2:FC:50:F2:84:43:29:C6:66:F0:82:EA:4E:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d3878a5b-a112-41cb-867c-f6fae3f22d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.154.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:28:70:f0:b3:ba:d8:6c:1e:89:eb:33:e7:ac:94:5c:07:cb:
         db:6f:e2:2f:42:70:2e:3d:5c:a2:1c:e1:ae:e2:76:ad:5e:97:
         d1:b1:f7:64:a8:f0:ff:6f:34:59:47:1d:a8:17:23:3c:dd:98:
         70:4a:3c:2a:e3:e2:bf:be:80:b0:74:95:67:4f:64:6b:06:77:
         b9:93:ec:6f:27:26:ac:bd:e4:4e:ce:04:d5:c9:5f:dc:86:31:
         fe:75:39:7f:a8:1a:7a:51:7a:af:a9:90:0a:2f:76:87:c7:09:
         cd:9c:a9:b0:11:be:c1:6d:64:96:68:9b:3f:f3:7e:cf:92:56:
         25:91:22:ac:95:95:2e:b0:c9:39:54:26:11:bf:05:bf:57:cf:
         53:90:92:9a:e9:43:64:66:8b:56:07:af:e3:22:46:3c:75:7a:
         05:e1:a6:e2:dc:9c:a9:92:e3:1e:05:34:35:91:00:a0:b6:df:
         d6:86:fa:b3:f2:ed:fe:e8:b8:60:a8:be:8f:48:96:cf:77:93:
         c6:7d:d5:e2:63:0b:aa:63:d7:86:f2:44:86:a4:fd:b7:c4:c2:
         50:fe:bc:d7:8c:0b:61:29:91:ee:02:6e:ed:2f:18:00:53:45:
         c5:79:59:59:0c:4f:fd:f6:d3:70:0e:cf:64:d7:b6:1a:4f:f9:
         52:54:0d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:01:04 2025 by rpki-client