Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3364c280-cb03-37db-bf51-302d179ee104.roa
File:                     3364c280-cb03-37db-bf51-302d179ee104.roa (raw, json)
Hash identifier:          EdoC339NglWX3Gh/5SZ9wjIJ7aNiSoJ+NCj+tD6Jdjs=
Subject key identifier:   EF:A5:12:8B:E5:F2:FC:30:B2:84:A2:A0:19:AF:8E:8E:0F:13:E8:91
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584A9FFBB49270F17FD514CC9E80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3364c280-cb03-37db-bf51-302d179ee104.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     396612
IP address blocks:        216.87.145.53/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:b4:92:70:f1:7f:d5:14:cc:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=a3af4669-9dd2-4ec5-882c-eadeb9d6d6fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cb:19:42:f3:2e:fe:d1:66:94:02:1b:d3:83:
                    78:c5:ca:72:c9:93:60:40:ef:26:e1:fd:13:e4:68:
                    47:e6:be:3b:36:11:b2:fa:43:55:1a:2d:55:11:16:
                    fa:e0:83:6e:4a:79:77:03:a8:54:e5:eb:a5:2d:12:
                    ed:87:1f:bb:e6:a2:86:74:cb:71:4e:11:87:43:d1:
                    23:cb:5b:2d:dd:fd:5a:aa:38:f2:a7:6f:78:ee:e2:
                    6b:38:19:61:d6:f3:e5:b1:a4:9b:4c:68:52:7c:62:
                    04:bd:d1:02:99:2a:25:be:c9:21:40:69:ad:1d:97:
                    83:69:b8:1b:79:1f:11:12:7d:1a:8c:cc:3e:00:88:
                    a5:6e:89:06:2b:3c:a9:af:be:8c:64:07:72:06:7f:
                    57:a1:92:b2:28:fa:42:9c:29:67:0d:91:93:cb:0a:
                    b0:ea:e6:db:de:2c:99:dd:1c:ce:d3:00:db:22:07:
                    09:5d:31:7f:6b:2f:a9:13:0a:3c:5c:38:8d:66:ec:
                    90:86:52:31:c8:8d:3c:aa:37:36:59:a1:3e:e8:3f:
                    ce:05:3d:50:43:67:73:32:c2:86:83:b8:1f:d1:91:
                    52:62:e4:4d:0e:65:c2:7f:24:25:4a:e6:5c:8d:48:
                    b5:de:c6:62:8a:96:dd:16:2c:6f:33:f8:c3:8c:7e:
                    44:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A5:12:8B:E5:F2:FC:30:B2:84:A2:A0:19:AF:8E:8E:0F:13:E8:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3364c280-cb03-37db-bf51-302d179ee104.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.145.53/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:5f:80:08:91:07:9c:a0:7a:31:b7:7c:51:8e:8b:2d:1d:66:
         94:a2:83:b2:41:90:23:af:01:8a:16:2c:a2:fe:8c:5c:85:49:
         fd:a2:bf:93:3a:d4:4a:29:57:41:5b:78:47:23:a4:48:b4:39:
         c1:39:e7:ef:1f:a1:68:a9:d1:74:8a:aa:f6:e9:2e:a3:89:cd:
         d7:e7:59:8a:8b:aa:46:91:fb:24:0b:86:15:eb:ca:c5:44:86:
         1e:89:c9:36:97:95:2d:85:38:2e:9e:2d:4a:5b:d7:fc:0f:9c:
         5a:d3:d1:d0:71:ba:58:f5:e5:7b:2c:08:9b:39:97:71:82:aa:
         ef:23:10:15:a8:2e:49:d1:de:49:0d:d0:58:0e:8e:ed:2b:e7:
         85:eb:d2:b7:51:40:7e:d9:20:7b:f6:c4:14:b7:66:18:70:4a:
         35:35:31:29:e6:aa:f4:12:3c:4b:17:3c:39:bc:b3:88:55:fb:
         58:4d:d0:fc:d5:81:bc:14:ad:d8:ea:aa:f1:2b:5d:79:72:2c:
         ee:07:fa:a3:14:72:a2:1d:55:fd:8b:2f:f2:f7:33:93:0d:cf:
         8d:f6:82:5b:c5:dd:c9:fd:f1:d5:0b:bd:04:81:4f:c7:c8:79:
         b8:ac:31:72:7f:7b:cd:e0:45:71:78:16:40:5c:e6:ff:47:28:
         f1:75:b5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:28:25 2025 by rpki-client