Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6c19ecdd-eda4-4041-9b92-0ac7a99fc631/55f7f461-f4c5-3792-bb36-685977464485.roa
File:                     55f7f461-f4c5-3792-bb36-685977464485.roa (raw, json)
Hash identifier:          7FVus0TzaExgYwEJ0JEs1bJSv4Kevy9jeHrahIAGC64=
Subject key identifier:   39:F3:6A:10:24:4F:6D:18:0B:4C:C2:36:10:60:6B:8B:A5:82:10:F1
Certificate issuer:       /CN=6c19ecdd-eda4-4041-9b92-0ac7a99fc631
Certificate serial:       010D0C9F4328584A7A4B42C31B604ADB9D302780
Authority key identifier: E2:16:05:3D:59:79:3C:06:9F:1F:5D:37:57:BF:DF:69:62:35:DD:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6c19ecdd-eda4-4041-9b92-0ac7a99fc631.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6c19ecdd-eda4-4041-9b92-0ac7a99fc631/55f7f461-f4c5-3792-bb36-685977464485.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     397335
IP address blocks:        198.169.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6c19ecdd-eda4-4041-9b92-0ac7a99fc631/6c19ecdd-eda4-4041-9b92-0ac7a99fc631.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6c19ecdd-eda4-4041-9b92-0ac7a99fc631/6c19ecdd-eda4-4041-9b92-0ac7a99fc631.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6c19ecdd-eda4-4041-9b92-0ac7a99fc631.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:42:c3:1b:60:4a:db:9d:30:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c19ecdd-eda4-4041-9b92-0ac7a99fc631
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=8d65da27-c404-4325-8776-cf16f420e383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cf:6b:90:e5:d4:97:ec:8f:8d:d6:fc:0e:9c:
                    1b:0b:6e:46:4a:1e:62:65:0a:19:6e:2c:0c:c9:30:
                    29:e8:fe:e5:06:ae:8a:97:50:c4:86:f3:04:c6:6c:
                    05:bc:aa:cc:e5:62:c7:70:3f:8b:ba:e1:8f:c3:ad:
                    3b:02:47:a0:75:1b:84:29:24:89:e0:e7:f9:b3:d7:
                    ab:bc:d3:8e:37:ad:94:e0:34:16:23:fa:3d:d4:f4:
                    fc:18:4e:78:fb:75:07:a7:8c:3c:f2:80:75:fe:d7:
                    8a:48:98:3e:34:2c:28:00:08:0d:19:4e:fc:ea:66:
                    1d:46:9f:b0:10:88:1f:bc:3e:7d:b8:1a:0a:35:a9:
                    ee:99:7e:b6:dd:83:ed:64:0c:e5:31:f5:36:77:7d:
                    54:23:0c:ee:56:a1:b5:ea:a0:2e:6a:ea:f5:7d:81:
                    47:30:d2:6e:0b:c5:48:67:c2:74:d7:be:1f:40:80:
                    18:5d:26:9f:1d:d6:ad:25:33:ee:a5:d4:0f:4d:1b:
                    a7:40:c3:75:70:2f:e4:bc:79:34:4a:23:d4:39:5b:
                    17:ad:8b:0f:f1:1e:6b:ad:30:1b:28:b1:33:9b:27:
                    3b:84:94:98:2f:71:8e:02:d8:c5:b1:e5:a6:c2:46:
                    8e:e1:02:24:3e:e7:00:a9:67:41:d3:d3:c7:09:23:
                    c1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:F3:6A:10:24:4F:6D:18:0B:4C:C2:36:10:60:6B:8B:A5:82:10:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6c19ecdd-eda4-4041-9b92-0ac7a99fc631/55f7f461-f4c5-3792-bb36-685977464485.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6c19ecdd-eda4-4041-9b92-0ac7a99fc631/6c19ecdd-eda4-4041-9b92-0ac7a99fc631.crl

            X509v3 Authority Key Identifier:
                keyid:E2:16:05:3D:59:79:3C:06:9F:1F:5D:37:57:BF:DF:69:62:35:DD:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6c19ecdd-eda4-4041-9b92-0ac7a99fc631.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.169.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:57:ac:31:8b:44:a4:cf:16:49:57:51:8d:ed:a0:68:1d:11:
         e7:b7:d8:65:ec:25:0c:26:08:ba:41:eb:28:cd:58:41:94:3f:
         59:6b:4b:84:dd:71:48:d7:62:78:86:f2:d4:57:24:dc:21:c4:
         8c:64:86:1b:1a:88:90:51:1c:2b:5e:77:d7:d8:1f:1d:98:93:
         f1:0c:ae:64:d0:ec:40:b1:ae:56:43:d0:a7:1e:8a:bf:59:f7:
         8e:65:01:5b:99:05:81:8e:3e:80:ae:4a:eb:21:44:15:86:cc:
         69:d4:12:cd:db:79:34:d9:78:6c:a5:7e:27:c0:01:91:4c:38:
         58:52:56:64:8f:5e:a5:cf:1a:c1:00:da:83:cf:a5:fe:24:05:
         f3:78:b1:c9:44:e9:74:32:a3:2b:54:a6:af:0b:11:cf:3a:aa:
         3e:6e:57:ac:c3:b0:58:41:33:42:86:33:68:30:12:06:8e:74:
         15:76:59:5f:b8:02:bc:9a:72:5e:e9:cd:aa:17:62:11:c9:96:
         e4:b1:d0:7c:fa:cd:fc:df:cd:c1:a2:b2:fc:ae:99:79:16:a5:
         01:95:99:2b:7b:20:26:26:d2:fb:e1:df:c0:01:36:55:86:bc:
         4f:07:d6:6a:62:19:2d:00:24:92:06:84:d6:2b:4e:6f:55:44:
         00:b0:be:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:47:11 2025 by rpki-client