Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/56af899d-738c-3949-b570-31516d10709c.roa
File:                     56af899d-738c-3949-b570-31516d10709c.roa (raw, json)
Hash identifier:          +m5wkLt2kuBuW86fv9DdKFwfraps9RXGy42veCcmCJY=
Subject key identifier:   0C:BF:69:6D:21:A4:53:95:DF:BF:7B:C4:15:FB:AC:A8:06:6E:35:44
Certificate issuer:       /CN=7496889c-61af-4c61-8157-4b7f2fde690d
Certificate serial:       010D0C9F43285849F17FD1928FF2FCA02A482700
Authority key identifier: 59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/56af899d-738c-3949-b570-31516d10709c.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     855
IP address blocks:        198.164.1.0/24 maxlen: 24
                          198.164.2.0/24 maxlen: 24
                          198.164.4.0/23 maxlen: 24
                          198.164.26.0/23 maxlen: 24
                          198.164.30.0/23 maxlen: 24
                          198.164.67.0/24 maxlen: 24
                          198.164.68.0/24 maxlen: 24
                          198.164.96.0/24 maxlen: 24
                          198.164.97.0/24 maxlen: 24
                          198.164.98.0/24 maxlen: 24
                          198.164.110.0/23 maxlen: 24
                          198.164.121.0/24 maxlen: 24
                          198.164.124.0/24 maxlen: 24
                          198.164.160.0/24 maxlen: 24
                          198.164.171.0/24 maxlen: 24
                          198.164.182.0/24 maxlen: 24
                          198.164.187.0/24 maxlen: 24
                          198.164.188.0/24 maxlen: 24
                          198.164.199.0/24 maxlen: 24
                          198.164.200.0/24 maxlen: 24
                          198.164.201.0/24 maxlen: 24
                          198.164.207.0/24 maxlen: 24
                          198.164.208.0/22 maxlen: 24
                          198.164.219.0/24 maxlen: 24
                          198.164.220.0/24 maxlen: 24
                          198.164.223.0/24 maxlen: 24
                          198.164.225.0/24 maxlen: 24
                          198.164.233.0/24 maxlen: 24
                          198.164.234.0/24 maxlen: 24
                          198.164.241.0/24 maxlen: 24
                          198.164.242.0/23 maxlen: 24
                          198.164.244.0/22 maxlen: 24
                          198.164.249.0/24 maxlen: 24
                          198.164.250.0/23 maxlen: 24
                          198.164.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:d1:92:8f:f2:fc:a0:2a:48:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7496889c-61af-4c61-8157-4b7f2fde690d
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=202b08df-e666-40e4-a081-2e0a6d17e787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3e:9f:8c:44:7b:c4:13:74:90:9a:d2:49:cf:
                    4f:66:0e:77:da:1e:8b:e6:a0:a8:93:f8:4e:b3:c6:
                    4a:13:2b:d1:d8:75:e0:c2:91:fb:43:38:1d:d7:79:
                    6d:bc:82:84:11:cf:1e:32:83:d0:5a:a2:6b:fe:5c:
                    d1:72:62:7f:ff:81:ef:ac:b6:40:b6:a4:0b:d6:ba:
                    5f:2c:c3:4c:ac:53:50:05:e1:32:86:90:9e:c6:6c:
                    ca:00:32:d4:2c:fe:2a:59:5f:af:3f:ef:b7:13:33:
                    f3:e3:49:6e:63:e8:98:28:44:f6:27:9f:a3:37:bb:
                    e1:cc:fc:c5:f2:10:6d:29:7b:ec:5f:e3:79:1b:46:
                    e4:f6:40:15:25:49:84:09:81:ef:c1:e6:79:91:71:
                    c1:da:81:90:74:58:89:82:ed:e9:5b:b6:c1:95:83:
                    08:82:7e:99:16:5b:17:50:81:2c:80:a6:63:5c:cb:
                    98:9e:c6:67:20:0e:33:c9:81:9d:eb:0b:87:a4:55:
                    25:3f:73:ae:b1:0c:5f:98:90:61:ca:b5:ab:eb:dd:
                    20:f0:ef:8f:cb:ba:94:ee:ec:89:d4:81:ad:d5:93:
                    0b:3e:ea:99:77:74:04:bc:2c:38:a0:d5:0f:68:33:
                    fb:be:60:7c:d4:10:b6:7b:bc:af:cf:b8:18:1f:b8:
                    28:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:BF:69:6D:21:A4:53:95:DF:BF:7B:C4:15:FB:AC:A8:06:6E:35:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/56af899d-738c-3949-b570-31516d10709c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl

            X509v3 Authority Key Identifier:
                keyid:59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.164.1.0-198.164.2.255
                  198.164.4.0/23
                  198.164.26.0/23
                  198.164.30.0/23
                  198.164.67.0-198.164.68.255
                  198.164.96.0-198.164.98.255
                  198.164.110.0/23
                  198.164.121.0/24
                  198.164.124.0/24
                  198.164.160.0/24
                  198.164.171.0/24
                  198.164.182.0/24
                  198.164.187.0-198.164.188.255
                  198.164.199.0-198.164.201.255
                  198.164.207.0-198.164.211.255
                  198.164.219.0-198.164.220.255
                  198.164.223.0/24
                  198.164.225.0/24
                  198.164.233.0-198.164.234.255
                  198.164.241.0-198.164.247.255
                  198.164.249.0-198.164.252.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:0d:22:46:b4:21:e3:b4:09:24:81:80:f7:43:4b:a1:a3:dc:
         d2:5a:f4:51:92:7a:e7:79:29:ad:ae:3d:90:b1:b7:fc:46:5d:
         46:2b:99:98:cb:01:0b:3c:5f:e2:af:4e:60:ab:a4:f6:db:d4:
         0b:45:4a:48:f3:ae:ab:68:32:de:c0:1e:73:b7:55:7e:83:66:
         43:7f:fe:22:f8:97:8b:45:f6:0b:65:bc:4d:7f:43:e2:e1:b1:
         84:f1:26:9b:dd:0c:61:2e:c8:5a:bb:72:c0:86:07:b7:92:a9:
         92:ec:29:b9:5b:56:6c:fc:84:36:fc:b3:2f:e0:6b:a1:eb:e6:
         d5:19:f5:01:25:2e:27:99:15:19:9a:ef:9d:aa:38:74:5a:06:
         df:00:25:30:41:9c:97:e9:7f:e4:a3:0c:86:ec:ac:29:c7:6d:
         28:57:16:ba:c6:47:64:23:21:15:09:56:9b:ba:77:ea:39:42:
         9a:73:bc:e8:42:48:83:f3:5a:69:e6:e3:2f:c5:1c:05:c5:3c:
         cf:2b:86:fe:cd:bc:83:18:96:04:c7:29:05:81:fb:12:9b:29:
         43:56:e0:05:5a:97:74:f4:83:e6:12:16:ef:1c:b2:5a:44:90:
         19:2c:48:43:be:06:6d:b9:b1:45:79:70:76:f0:48:0b:b7:67:
         a2:b1:5e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 11:21:56 2025 by rpki-client