Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d4d337ac-64ad-496d-856c-8c2412a7cb34/a2591d88-59eb-3578-b8a3-527795687b41.roa
File:                     a2591d88-59eb-3578-b8a3-527795687b41.roa (raw, json)
Hash identifier:          1QsQVg1fKonwgUFlj3l22/wHDuInrx+pUTz237UTiDI=
Subject key identifier:   EF:0E:C5:F5:46:DB:47:FB:73:43:E7:E7:04:54:EB:28:0C:46:87:76
Certificate issuer:       /CN=d4d337ac-64ad-496d-856c-8c2412a7cb34
Certificate serial:       010D0C9F43285849F9DFCFBA8B2F5AF3C7BA2E80
Authority key identifier: 81:6B:03:A6:F5:63:B4:5E:A8:F9:F2:85:57:30:10:96:3B:65:08:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d4d337ac-64ad-496d-856c-8c2412a7cb34.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d4d337ac-64ad-496d-856c-8c2412a7cb34/a2591d88-59eb-3578-b8a3-527795687b41.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     16509
IP address blocks:        162.245.54.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d4d337ac-64ad-496d-856c-8c2412a7cb34/d4d337ac-64ad-496d-856c-8c2412a7cb34.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d4d337ac-64ad-496d-856c-8c2412a7cb34/d4d337ac-64ad-496d-856c-8c2412a7cb34.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d4d337ac-64ad-496d-856c-8c2412a7cb34.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:cf:ba:8b:2f:5a:f3:c7:ba:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4d337ac-64ad-496d-856c-8c2412a7cb34
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=a039d6be-040e-4e05-a313-86f9a6006d15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:29:d3:fc:93:95:98:9e:1b:81:e1:27:d9:1d:
                    17:91:4a:3f:a0:e2:d3:93:58:83:a6:fe:91:38:20:
                    03:02:65:c0:27:75:54:71:de:e4:df:f5:98:96:8b:
                    d6:fc:c1:19:5b:96:a7:58:fc:7b:ab:bf:04:65:77:
                    37:2d:a2:6f:be:d2:fc:59:85:cf:6b:69:4c:93:fa:
                    04:a6:4a:50:e0:e0:94:53:fa:1d:75:ed:80:16:ed:
                    97:4a:d1:23:98:b5:41:3d:5f:94:85:0a:2a:1d:7e:
                    a8:85:91:f2:ef:1f:71:3d:9c:13:4b:2e:f5:12:0f:
                    2e:3d:02:0b:ed:1c:58:f0:e7:fe:f9:fd:14:4a:ed:
                    8b:ad:c0:6b:79:45:00:c1:54:cd:28:2d:38:bf:63:
                    4c:89:17:a9:99:a9:46:eb:06:a0:a3:1c:9d:15:50:
                    69:47:61:6c:85:1a:e3:ea:09:a4:bb:9c:d2:3e:ae:
                    2c:22:09:7d:26:6d:a2:8b:7e:c9:60:9f:49:f2:06:
                    84:e5:35:8e:88:5f:51:c0:d5:94:e5:fa:ac:c0:0a:
                    f3:95:b5:14:33:88:af:74:07:33:61:4c:2f:e9:c9:
                    9a:1d:10:25:4c:47:bb:60:a1:38:1b:6e:67:0f:97:
                    1e:6e:c0:a7:cc:70:cb:a2:35:46:4d:8f:cd:1a:17:
                    16:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:0E:C5:F5:46:DB:47:FB:73:43:E7:E7:04:54:EB:28:0C:46:87:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d4d337ac-64ad-496d-856c-8c2412a7cb34/a2591d88-59eb-3578-b8a3-527795687b41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d4d337ac-64ad-496d-856c-8c2412a7cb34/d4d337ac-64ad-496d-856c-8c2412a7cb34.crl

            X509v3 Authority Key Identifier:
                keyid:81:6B:03:A6:F5:63:B4:5E:A8:F9:F2:85:57:30:10:96:3B:65:08:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d4d337ac-64ad-496d-856c-8c2412a7cb34.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.245.54.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:5d:cc:ed:02:8b:25:be:62:15:2a:f9:f5:5a:d5:57:73:bd:
         93:ee:71:90:fc:c4:9d:a1:fa:7e:49:de:37:03:3d:47:7b:db:
         5e:4b:55:11:89:c8:80:95:82:c5:41:1e:c6:cb:db:61:38:d9:
         9e:14:b2:61:80:ee:08:a4:80:5c:48:63:0d:cc:c5:68:3c:25:
         e4:23:7a:1c:06:45:d4:4f:9e:8d:48:f3:cc:1c:73:f1:32:63:
         8c:c6:5d:57:b5:46:b5:a6:7a:f4:9a:9b:c7:bb:f5:84:7f:78:
         17:ee:a9:53:75:83:05:08:e7:62:b5:73:4e:0b:61:75:27:ec:
         ff:8e:03:d1:ce:65:b7:fb:04:ed:9d:17:f2:57:65:a7:1b:19:
         9b:3f:4e:8f:e9:70:22:71:4e:a7:a4:17:0b:0d:cc:c1:1e:4c:
         e2:a6:65:4f:c0:f1:4e:3b:1c:52:a9:d9:c8:6a:98:9e:7c:80:
         88:c6:04:35:04:84:86:d3:99:8b:76:90:87:14:11:ac:7c:12:
         ea:65:e7:0a:45:19:18:6f:1b:2a:e5:f7:8f:35:d3:15:c8:2e:
         87:84:e0:8c:96:f8:bb:68:19:60:e0:39:9f:24:00:74:25:dd:
         1e:b1:87:23:d8:28:a6:51:b6:d1:ed:1a:b7:90:b4:bc:c3:10:
         eb:4a:4b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 21:39:03 2025 by rpki-client