Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/fc352432-4e67-3899-80a1-ee18ecf984a2.roa
File:                     fc352432-4e67-3899-80a1-ee18ecf984a2.roa (raw, json)
Hash identifier:          uzMm3GAO6vMLJ47O0ivuqLCXiWafJ0pOyBNXCDOZNOs=
Subject key identifier:   D5:C4:D4:47:D7:D5:C5:3B:37:F7:6F:53:B2:C7:FF:DF:E4:65:F6:06
Certificate issuer:       /CN=399fbcba-412a-4e4c-8856-d893d23bdd7b
Certificate serial:       010D0C9F4328584A268AC6D4BCC24212281D3EA0
Authority key identifier: 57:3E:0A:60:D6:16:F9:89:C9:A5:E8:93:58:1A:F9:02:3D:20:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/fc352432-4e67-3899-80a1-ee18ecf984a2.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     19416
IP address blocks:        159.55.213.0/24 maxlen: 24
                          159.55.214.0/23 maxlen: 24
                          159.55.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:c6:d4:bc:c2:42:12:28:1d:3e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=399fbcba-412a-4e4c-8856-d893d23bdd7b
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=27d2c5a7-b839-4a9b-8229-33546750acd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c3:f3:3e:44:b9:e3:41:a1:62:8e:79:b9:ed:
                    68:2e:02:36:3b:42:e9:4f:94:6a:0b:1d:4d:ff:c1:
                    05:fc:e8:1e:18:ad:3e:08:01:46:27:94:13:d6:f5:
                    c3:4d:54:b7:3d:be:9b:2a:8f:f0:98:e1:ef:5a:55:
                    0a:91:81:4e:0b:7b:63:e1:c9:cf:cb:f3:0b:67:9e:
                    2b:5d:fe:e0:41:01:76:bb:5c:ce:d3:d9:ef:9f:8f:
                    29:88:f1:9f:a7:8a:9c:fd:69:8f:65:6d:00:6e:3f:
                    f4:d2:f7:51:69:30:4c:7a:5f:b4:dd:b8:74:0e:83:
                    b0:79:e8:ab:95:4d:1a:0a:22:a9:b0:81:af:2b:c8:
                    ae:e5:9a:df:de:10:e5:d8:fd:24:58:5a:4c:e7:59:
                    c4:a9:82:fe:57:56:6c:7b:ab:83:92:28:05:f8:0c:
                    a1:66:ab:a6:76:74:53:6c:7e:28:f7:85:12:ff:26:
                    06:74:97:af:d2:db:27:b3:76:e5:5b:c4:bd:0c:43:
                    40:43:67:3f:76:21:95:27:b1:49:e1:c2:0e:33:b1:
                    2e:ef:f6:da:4b:97:87:e8:81:ce:78:04:45:96:05:
                    62:3a:9c:d6:3f:b2:4e:70:f6:1c:1d:c1:58:c7:ce:
                    4f:fb:4e:eb:e3:aa:d3:82:61:72:10:98:3e:77:22:
                    fc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C4:D4:47:D7:D5:C5:3B:37:F7:6F:53:B2:C7:FF:DF:E4:65:F6:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/fc352432-4e67-3899-80a1-ee18ecf984a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.crl

            X509v3 Authority Key Identifier:
                keyid:57:3E:0A:60:D6:16:F9:89:C9:A5:E8:93:58:1A:F9:02:3D:20:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.55.213.0-159.55.223.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:be:fe:43:ab:93:a1:db:f1:ee:b9:d0:c8:8c:9b:ac:66:9f:
         3f:66:11:5b:5c:9b:8b:68:27:8d:a5:d4:95:34:74:98:5a:2a:
         7f:a8:a1:81:6c:f9:ed:1b:b9:fa:c0:ca:93:cc:c9:e2:c5:f9:
         94:ef:7b:85:8e:53:d9:34:61:c3:95:32:59:6b:dc:84:52:0f:
         9f:09:07:34:ed:ca:81:d9:57:5d:2e:5d:90:e5:68:51:1f:5c:
         38:27:b8:3e:70:7b:44:95:76:2c:8c:32:72:25:7d:5a:13:bc:
         7e:7f:07:54:94:87:09:b4:47:c3:06:04:67:b1:03:9d:de:89:
         58:55:21:f4:2d:d4:5b:7b:98:0b:cf:dd:e1:ed:3d:23:74:e5:
         6a:73:d0:90:b4:a4:73:9e:24:c0:b4:bd:6c:90:f3:1a:53:cb:
         a3:dd:a9:f5:66:70:6e:d6:15:1e:a4:d0:2c:b2:e2:ea:07:43:
         a0:9f:85:2d:ee:e0:19:17:35:89:99:0b:d3:ee:4e:b9:93:91:
         c8:78:2e:d4:3c:3f:6d:85:f3:f3:af:86:ef:15:7d:b3:bc:7b:
         85:3e:fc:4f:4f:28:da:0d:38:30:3c:ba:68:d5:f8:a6:1d:ac:
         6a:60:68:9b:7b:d6:3f:a9:2d:7e:64:e3:bf:44:7f:34:c6:93:
         0b:d6:6b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 08:39:13 2025 by rpki-client