Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11/778e9493-fc72-3972-b578-15cd2f03a377.roa
File:                     778e9493-fc72-3972-b578-15cd2f03a377.roa (raw, json)
Hash identifier:          7xJ1TwjnDURVMOA08wF2vUt5dCjh0gHGBIhHtKfLNBw=
Subject key identifier:   3B:3A:C0:ED:CF:9C:A5:DC:57:39:5C:E5:D3:53:31:5D:35:17:4D:DF
Certificate issuer:       /CN=03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11
Certificate serial:       010D0C9F4328584A30503C341164AECC83D35740
Authority key identifier: AE:5B:99:4D:B3:F6:B8:9D:A1:51:94:7E:C1:DF:E6:90:10:A5:CB:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11/778e9493-fc72-3972-b578-15cd2f03a377.roa
Signing time:             Sat 14 Jun 2025 13:01:04 +0000
ROA not before:           Sat 14 Jun 2025 13:01:04 +0000
ROA not after:            Fri 12 Sep 2025 13:01:04 +0000
asID:                     54816
IP address blocks:        158.51.56.0/22 maxlen: 24
                          192.30.192.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:30:50:3c:34:11:64:ae:cc:83:d3:57:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11
        Validity
            Not Before: Jun 14 13:01:04 2025 GMT
            Not After : Sep 12 13:01:04 2025 GMT
        Subject: CN=8d60c62b-0424-4bd0-8cd4-d701ca6a7430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:04:04:b4:10:bf:78:29:a3:a0:c9:91:1c:eb:
                    f9:10:f3:d0:0b:a9:73:2b:29:de:fd:ca:44:af:fb:
                    0b:63:a6:c6:65:d5:e0:5d:9e:f6:ca:b7:f9:7a:71:
                    06:f4:5a:d9:b0:07:07:1b:48:3d:64:ee:5d:64:fe:
                    6e:d9:b2:1d:49:3b:3a:fc:ec:88:36:f7:bd:34:5d:
                    13:13:85:a3:44:c7:88:57:0b:4e:5f:2d:e4:6a:f4:
                    9b:79:31:e6:cc:3b:ed:cc:15:bb:d9:32:27:b4:83:
                    57:12:fd:c1:94:ff:a2:47:59:74:dc:4d:9c:a5:a8:
                    9e:d3:8e:f1:dc:6a:a4:3b:18:18:2a:15:a8:9e:b7:
                    4a:60:73:1d:0e:a6:b7:c2:2c:e7:d7:cf:da:d5:cd:
                    3b:a7:eb:5b:6a:53:14:b3:f8:cc:e4:b3:4c:1b:92:
                    f4:df:e8:77:fa:d5:39:6d:f5:d3:10:2f:05:d9:bf:
                    ed:c5:3d:c0:1f:2e:89:11:53:e7:33:80:f2:9a:51:
                    7a:86:6a:96:bd:c9:fc:5f:3b:c2:36:7c:44:67:20:
                    38:c5:60:fc:3b:34:4e:9e:05:15:b1:71:e6:85:94:
                    b5:fc:d9:57:97:bd:97:e6:90:3a:a2:84:d6:8b:94:
                    30:e8:81:34:9f:2a:7f:0f:5c:f1:c5:8b:9e:cd:fc:
                    ce:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:3A:C0:ED:CF:9C:A5:DC:57:39:5C:E5:D3:53:31:5D:35:17:4D:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11/778e9493-fc72-3972-b578-15cd2f03a377.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11.crl

            X509v3 Authority Key Identifier:
                keyid:AE:5B:99:4D:B3:F6:B8:9D:A1:51:94:7E:C1:DF:E6:90:10:A5:CB:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.56.0/22
                  192.30.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:95:26:73:d0:82:b3:e2:1d:af:7a:a3:4f:9a:a5:56:ab:ff:
         a3:78:04:90:b6:d0:b3:e2:eb:6a:62:76:c7:cc:e8:35:42:17:
         f7:e3:81:f9:2a:8d:e1:64:96:ae:90:90:bf:b3:27:a2:6e:39:
         23:3c:38:27:f9:91:c2:d2:de:ae:29:fe:5a:7c:3a:c9:14:92:
         98:07:45:31:65:43:bf:07:d8:54:cc:5f:9b:18:87:58:0c:2e:
         a2:ef:64:12:0d:f8:78:c9:93:27:8a:86:b3:82:84:45:a1:b3:
         28:a4:69:b0:12:29:4a:8b:17:39:fb:b7:fa:1d:00:cb:75:3d:
         b2:2e:d3:eb:5c:93:92:d1:45:1b:3e:e1:e5:76:f9:16:81:c8:
         ae:59:b5:38:7e:67:85:34:5c:af:57:ec:eb:08:98:6d:2a:e2:
         5f:a7:06:19:b0:0d:b5:d8:da:3f:68:06:47:0c:fb:9c:d6:98:
         aa:0b:14:ef:30:99:47:57:29:40:07:cf:63:91:38:07:77:7a:
         a3:17:3d:9c:c9:11:0d:d8:85:aa:65:48:ff:5f:7f:e9:39:91:
         01:15:22:ba:62:2f:d5:f7:5e:a8:84:bf:11:06:2c:39:8a:55:
         d1:fb:ea:73:e1:e6:ef:30:dc:90:d2:13:91:db:86:7d:d7:53:
         3f:e3:88:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:58:28 2025 by rpki-client