Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5376d37b-9cc4-3b06-ad60-539847b93d05.roa
File:                     5376d37b-9cc4-3b06-ad60-539847b93d05.roa (raw, json)
Hash identifier:          3Q8hkU5vz2dnekuRFUaTikV3vZRlyLcTRbAkStcuGcE=
Subject key identifier:   99:29:55:F2:E0:03:2B:DB:E4:B4:0C:C1:09:2A:69:A6:07:AB:F7:97
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584A9FFBB2BCFD6D2A35BE3F3600
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5376d37b-9cc4-3b06-ad60-539847b93d05.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     397202
IP address blocks:        216.87.145.53/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:b2:bc:fd:6d:2a:35:be:3f:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=1c276730-a7c1-4baa-948f-18c31dae4ff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3b:2a:fa:5f:e2:a1:ca:87:50:d9:1c:82:35:
                    a7:de:61:1f:b7:fc:4d:88:72:ab:35:33:1b:a3:04:
                    85:ad:cb:45:5b:3e:cd:ef:72:be:ec:93:70:df:94:
                    36:85:72:76:45:3c:70:47:00:59:ed:00:b8:50:be:
                    1f:96:03:9f:f3:43:f5:f8:2b:1c:b3:e2:16:60:07:
                    31:0d:01:9f:3a:db:cf:d9:59:ab:ae:8b:d6:9d:63:
                    28:4d:86:de:f0:bc:3b:14:7f:27:14:d5:38:b9:3f:
                    3f:d3:3f:17:ec:60:71:93:04:37:34:71:f7:df:75:
                    e4:6b:a5:c0:32:19:ac:46:75:b2:bb:6b:21:c3:86:
                    71:ff:98:49:fe:84:8d:34:38:76:73:b3:df:72:a5:
                    1c:d8:e5:69:be:5a:7b:de:15:a4:5f:d8:ba:80:7a:
                    a8:71:a5:28:14:8e:56:d1:ae:4c:cc:bd:f3:8c:df:
                    33:42:0c:8e:91:81:58:55:44:b1:2c:a8:10:34:cd:
                    2f:fc:25:61:9a:da:f0:7b:0f:d0:c1:41:7a:02:82:
                    29:23:fb:c7:57:73:3c:43:9e:5e:cd:92:0b:58:ad:
                    6d:9e:6e:11:d3:76:9a:0a:fb:df:be:7e:bf:40:6d:
                    25:94:ae:5e:1e:06:4f:aa:29:99:6c:7a:73:45:c0:
                    f0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:29:55:F2:E0:03:2B:DB:E4:B4:0C:C1:09:2A:69:A6:07:AB:F7:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5376d37b-9cc4-3b06-ad60-539847b93d05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.145.53/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:c4:c0:2e:0d:d3:99:eb:d9:75:e4:ee:23:8c:7f:60:f0:fc:
         a2:9f:66:30:3d:6e:ba:89:ec:19:90:20:a5:a2:33:43:27:50:
         22:0e:ca:3d:c7:08:8b:f8:bd:4c:95:4e:4a:87:bb:a3:7c:a8:
         3c:07:bf:b1:a5:6a:43:90:14:3d:8b:3e:86:1c:f7:25:9a:e3:
         f4:5e:75:f0:06:e3:ba:05:5a:a8:91:01:7b:6b:e2:bd:4d:8a:
         de:81:e9:b9:00:f3:06:0e:12:76:69:ad:6d:80:c5:b9:97:d9:
         f4:74:6d:28:5a:a2:05:69:30:bf:f3:2a:8f:81:46:1a:8c:29:
         60:ec:4d:92:f9:f7:87:4d:f8:c3:13:33:81:26:17:97:3f:ce:
         e4:48:d6:61:ba:2b:47:ef:d8:27:49:1c:a0:23:5f:17:a3:63:
         94:b9:74:24:85:e5:14:83:80:c5:9f:7f:9b:18:f3:2e:09:88:
         30:6b:74:2e:77:8f:52:ef:11:ff:14:a5:02:32:a2:dd:7c:af:
         f8:71:31:2d:bd:b3:da:cf:78:da:c4:1c:47:22:02:30:b6:15:
         d2:23:14:2b:14:52:b0:89:ee:41:f0:24:9d:b6:8f:ae:ca:3b:
         96:28:a0:47:36:d0:ee:0e:c3:83:23:9c:67:a7:2a:c2:ab:42:
         d9:d8:d1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:13:08 2025 by rpki-client