Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d/03311caa-eedc-35f5-b4a3-a502fc212a0b.roa
File:                     03311caa-eedc-35f5-b4a3-a502fc212a0b.roa (raw, json)
Hash identifier:          z5pM82vZB/RemHuyCXsLWaKTwldZjXPLFN9im4RZlhM=
Subject key identifier:   93:85:A5:F0:24:6D:BB:24:38:47:AF:DE:8B:F6:EF:AE:90:D4:8F:A5
Certificate issuer:       /CN=7c6c4fe4-5642-4ad0-8325-69940b2ed04d
Certificate serial:       010D0C9F4328584A8B0B6178E8245A64EAC680DC
Authority key identifier: 83:EA:7B:A7:EC:EF:C3:78:8A:A5:E9:EE:2C:4B:B3:1B:73:73:BC:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d/03311caa-eedc-35f5-b4a3-a502fc212a0b.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     8075
IP address blocks:        156.20.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d/7c6c4fe4-5642-4ad0-8325-69940b2ed04d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d/7c6c4fe4-5642-4ad0-8325-69940b2ed04d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:61:78:e8:24:5a:64:ea:c6:80:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c6c4fe4-5642-4ad0-8325-69940b2ed04d
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=48c0c617-8d41-4198-a351-79c2c7c791cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e5:e4:5b:19:21:26:b9:99:76:67:fd:56:b4:
                    7f:ec:af:a8:c2:6e:de:8a:60:8d:ae:be:ef:5d:55:
                    c1:44:14:0c:ee:fd:2b:ef:52:26:da:0f:40:09:15:
                    40:99:18:15:e5:f3:59:17:92:11:e1:03:52:23:a2:
                    f3:4e:26:3b:21:47:90:db:c1:ef:24:40:88:5d:9b:
                    03:8e:00:61:aa:35:bc:6a:2d:0e:c0:61:2c:fa:3f:
                    73:eb:88:2b:de:ce:fd:ca:37:56:d7:79:7c:3f:58:
                    fa:6b:2a:95:7e:9d:82:cf:6a:db:e6:64:56:0f:59:
                    ec:78:6a:cb:13:96:4a:e0:e3:89:e0:91:6d:4b:02:
                    3c:85:10:de:5f:02:21:1c:ae:5c:0d:f1:dc:04:9a:
                    5e:ef:2c:9a:7a:a2:77:0f:c3:45:b4:61:78:cb:07:
                    2d:3e:48:55:28:e2:5f:36:3b:12:77:f4:48:43:9d:
                    19:a2:9b:8b:80:f7:01:dd:77:9f:ff:c9:ac:32:3a:
                    da:08:22:fd:d0:16:cd:f8:02:58:aa:a7:b6:ec:73:
                    94:c1:22:cc:3e:19:91:99:29:3e:e2:44:de:d0:74:
                    6c:a6:63:14:51:4f:4b:67:7d:96:66:8b:eb:2b:8d:
                    0c:c0:f6:86:6f:73:3a:b1:d6:f6:f0:ea:d7:c0:00:
                    94:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:85:A5:F0:24:6D:BB:24:38:47:AF:DE:8B:F6:EF:AE:90:D4:8F:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d/03311caa-eedc-35f5-b4a3-a502fc212a0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d/7c6c4fe4-5642-4ad0-8325-69940b2ed04d.crl

            X509v3 Authority Key Identifier:
                keyid:83:EA:7B:A7:EC:EF:C3:78:8A:A5:E9:EE:2C:4B:B3:1B:73:73:BC:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.20.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:f1:f2:35:67:f7:9e:2b:7d:f5:d8:3c:1a:c3:ae:77:bb:35:
         48:55:e5:4f:12:73:32:f6:76:ee:b1:6b:c0:04:06:a4:e5:f9:
         cf:7e:cc:01:b5:2a:b8:0c:25:9a:3f:5c:7e:15:44:ee:df:6f:
         a3:6c:03:0e:f4:01:3a:28:57:7f:57:c1:7b:ce:71:c7:36:08:
         35:77:cf:e5:bf:25:fa:0e:6c:a3:d0:63:27:ce:61:e0:39:96:
         42:07:2e:46:a3:fb:dd:7c:84:64:e6:aa:2e:86:11:d8:a8:2d:
         15:7b:81:15:c5:28:6d:0c:4f:3c:16:d7:8c:25:e3:98:5b:da:
         ef:85:fb:17:d7:52:aa:fd:a7:04:8b:ff:3a:62:d2:59:35:37:
         91:d3:1f:30:b0:31:38:96:d9:84:53:f0:7f:fe:50:bd:89:f9:
         34:90:94:ea:62:2c:4e:c0:ac:84:49:c9:26:89:cc:10:4f:02:
         15:08:ed:6d:05:a3:97:ba:a2:46:43:20:d4:bd:07:34:9d:9d:
         71:fb:8f:cc:c1:18:95:ff:c3:8a:ad:ea:84:77:97:d1:85:3b:
         d4:31:7b:32:52:ff:a9:66:57:70:9b:0a:b8:86:ef:62:97:66:
         6a:70:7d:5d:72:3b:c2:2d:75:cc:e6:52:6f:32:e8:5d:46:31:
         ba:c1:93:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:59:04 2025 by rpki-client