Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/59f6a973-714f-4843-8b79-fe69f46eb1ad/55d8fae8-eadb-3268-b5b1-e248d3eaf25e.roa
File:                     55d8fae8-eadb-3268-b5b1-e248d3eaf25e.roa (raw, json)
Hash identifier:          XFjlrz/4V4JcMp1jIOmASu5y7g9UNBnMeDAgLRTFMzU=
Subject key identifier:   A2:F2:B4:96:00:1B:BA:40:14:A0:8B:86:DC:DB:0E:E1:74:13:FA:22
Certificate issuer:       /CN=59f6a973-714f-4843-8b79-fe69f46eb1ad
Certificate serial:       010D0C9F4328584A7BB0B7FBC3281BCF17EB1B40
Authority key identifier: B8:9C:08:7F:F4:E4:E0:6F:26:19:F2:22:AC:33:BB:34:B9:11:31:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/59f6a973-714f-4843-8b79-fe69f46eb1ad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/59f6a973-714f-4843-8b79-fe69f46eb1ad/55d8fae8-eadb-3268-b5b1-e248d3eaf25e.roa
Signing time:             Fri 11 Jul 2025 13:01:05 +0000
ROA not before:           Fri 11 Jul 2025 13:01:05 +0000
ROA not after:            Thu 09 Oct 2025 13:01:05 +0000
asID:                     137443
IP address blocks:        162.251.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/59f6a973-714f-4843-8b79-fe69f46eb1ad/59f6a973-714f-4843-8b79-fe69f46eb1ad.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/59f6a973-714f-4843-8b79-fe69f46eb1ad/59f6a973-714f-4843-8b79-fe69f46eb1ad.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/59f6a973-714f-4843-8b79-fe69f46eb1ad.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b0:b7:fb:c3:28:1b:cf:17:eb:1b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59f6a973-714f-4843-8b79-fe69f46eb1ad
        Validity
            Not Before: Jul 11 13:01:05 2025 GMT
            Not After : Oct  9 13:01:05 2025 GMT
        Subject: CN=891517af-e953-4e92-b863-5fe607a9e8c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a7:5f:97:bc:ee:cb:17:3a:c7:2f:26:fa:0b:
                    53:5a:85:f7:5e:53:c8:46:76:49:5d:21:79:65:7b:
                    49:76:2e:65:3f:2b:42:14:b9:f1:af:23:74:10:e9:
                    47:6b:90:6d:12:98:76:2f:6e:8e:07:c7:5e:6f:c5:
                    7d:74:b7:c7:a0:e3:82:64:a3:d6:60:8c:fa:b3:67:
                    8c:13:9a:22:b5:25:cb:06:9e:fc:29:29:12:d3:a5:
                    7f:35:77:9c:09:7b:15:ba:4d:83:8f:20:0f:26:c0:
                    c5:e7:d8:16:4b:7e:f6:cd:a8:2a:b7:cb:a4:fc:36:
                    14:81:91:05:f2:5d:b1:b1:d1:9a:cd:be:6b:c5:ab:
                    91:cc:14:eb:76:6a:22:24:13:6f:fb:ab:81:ce:98:
                    d5:72:6c:ed:c1:b2:ec:f4:21:a4:e3:7f:24:4c:e4:
                    8f:59:b6:60:3f:8d:ac:c5:f6:37:02:af:b9:44:76:
                    33:43:03:02:80:81:39:36:b2:d6:b6:b1:cd:f3:b3:
                    a4:77:dd:00:49:1c:8c:16:32:90:20:60:26:d0:79:
                    6d:d9:af:c7:18:1c:94:ce:42:22:72:4e:29:a9:18:
                    2e:62:9f:0e:2b:53:1f:eb:ee:74:17:de:7b:c4:a0:
                    9a:76:5e:e1:76:d7:ac:52:5e:53:7c:d7:6f:75:6a:
                    fb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F2:B4:96:00:1B:BA:40:14:A0:8B:86:DC:DB:0E:E1:74:13:FA:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/59f6a973-714f-4843-8b79-fe69f46eb1ad/55d8fae8-eadb-3268-b5b1-e248d3eaf25e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/59f6a973-714f-4843-8b79-fe69f46eb1ad/59f6a973-714f-4843-8b79-fe69f46eb1ad.crl

            X509v3 Authority Key Identifier:
                keyid:B8:9C:08:7F:F4:E4:E0:6F:26:19:F2:22:AC:33:BB:34:B9:11:31:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/59f6a973-714f-4843-8b79-fe69f46eb1ad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.251.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:f0:2e:c9:c0:d1:93:b0:06:fa:61:d7:1e:80:98:ba:19:c7:
         0b:99:0d:40:9c:34:ca:3f:47:2e:4d:f0:a4:33:44:23:bf:f7:
         5b:88:95:f6:87:bb:12:40:6e:dd:8d:f7:b8:0b:69:f9:33:c2:
         5f:d1:ad:14:d0:40:b1:a2:55:25:95:f3:93:69:d7:e7:89:e3:
         3b:0d:85:c5:0b:23:55:bb:a7:1c:45:5d:f8:f3:91:48:2a:95:
         bb:c9:e7:81:8f:3e:02:ed:4e:e4:a0:bb:fd:f8:f5:eb:b8:38:
         b8:5a:42:93:0f:6e:21:3c:d8:60:c0:73:29:7b:c9:58:8e:61:
         eb:93:57:b4:75:c1:c0:1c:fe:8d:b0:3a:5a:71:7e:ec:82:d9:
         84:50:b5:2f:e7:fd:0e:87:de:39:fa:50:ee:a9:f9:9c:07:71:
         7d:19:3b:44:3d:6a:77:29:df:e1:c3:fe:84:0b:16:57:8e:2a:
         a3:f5:d8:e3:b3:fa:a8:9c:d6:0d:b5:d9:67:67:50:73:e6:0d:
         49:48:5e:80:e0:b1:e5:94:8d:57:a5:e0:30:9b:1c:a9:60:e0:
         25:9c:d6:3c:43:d6:71:f7:36:1d:ba:d5:9c:4e:6c:e5:5a:c5:
         77:af:64:a8:40:39:ad:3e:45:23:97:e7:00:4c:30:34:81:d4:
         69:b2:56:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:03:41 2025 by rpki-client