Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/0562bc53-574a-38f4-be5b-64fa50fb3715.roa
File:                     0562bc53-574a-38f4-be5b-64fa50fb3715.roa (raw, json)
Hash identifier:          i2HXY8RCWHflwKkpp9aCX8e7Rmyp5RnmRT0dx1FGlcc=
Subject key identifier:   1D:5A:0B:C9:18:57:25:69:0B:74:CA:9A:F4:D7:AA:7D:4D:5D:B9:1D
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584A23C01B20C6732BD55DC97180
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/0562bc53-574a-38f4-be5b-64fa50fb3715.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     4922
IP address blocks:        24.49.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:1b:20:c6:73:2b:d5:5d:c9:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=1144975c-8d62-4671-b534-cb9ccabb1179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d2:37:f1:1a:e7:53:8d:4d:72:68:7c:1a:00:
                    9a:e2:fa:26:4c:98:04:87:4e:8a:38:85:41:bd:59:
                    11:4c:e4:56:b8:e6:ef:db:c4:d4:b9:b6:8e:75:34:
                    0e:a3:a7:90:2b:22:c9:40:3c:fc:2c:d9:c8:e7:a5:
                    76:38:7f:40:0e:08:b3:23:a7:3a:b0:b2:17:94:2a:
                    d0:cc:f8:c5:8e:49:b5:b8:43:6b:cd:75:0b:f3:2f:
                    dd:f2:6e:d2:3e:c8:61:85:34:f6:cf:ff:27:ca:38:
                    28:b6:38:c1:9c:a7:9d:8a:f6:92:f3:7f:f3:45:6b:
                    1f:e6:db:0a:21:9c:8d:79:01:09:ed:fc:4f:b2:62:
                    ec:ee:b7:3d:77:22:97:06:82:83:6b:4a:af:b5:9f:
                    e0:9c:23:be:2d:ee:38:c1:fa:eb:45:e9:cb:4c:0e:
                    dc:08:d6:92:87:93:f2:e8:e7:e8:e6:35:ce:1e:f0:
                    33:6f:7e:9f:db:14:03:87:7f:8c:42:f5:32:6e:74:
                    9b:ad:17:99:3e:88:f0:33:1c:65:34:05:60:26:d5:
                    9b:74:1e:ee:d5:72:83:73:11:a5:66:8c:d0:d4:e3:
                    ef:96:66:ce:65:3b:4b:4c:58:7e:9e:db:04:77:91:
                    9e:aa:c6:b0:10:46:1f:aa:9c:de:f6:2f:d5:d8:2a:
                    cc:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:5A:0B:C9:18:57:25:69:0B:74:CA:9A:F4:D7:AA:7D:4D:5D:B9:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/0562bc53-574a-38f4-be5b-64fa50fb3715.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.49.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:dd:59:8a:8c:93:c9:7e:4f:15:0f:87:89:a6:4c:ff:bc:bb:
         ae:31:0c:a5:b5:b2:5b:85:77:99:dd:ac:bc:23:75:11:e9:42:
         4b:19:ee:c9:cc:40:8e:66:bc:ea:25:1b:bb:e7:23:db:35:17:
         6f:7c:0e:08:3e:06:c4:bb:a5:6b:3e:3d:b5:f3:6a:93:96:c8:
         5c:d3:ab:c7:66:d0:57:2d:45:98:5c:54:4b:d5:cd:cb:7b:aa:
         a5:da:b5:69:1f:6b:07:0b:2c:ec:04:35:b0:25:33:0d:b1:87:
         ba:9f:0d:61:f5:14:2c:7c:db:0c:e0:3b:6a:f1:fa:82:04:a7:
         4b:30:7c:44:08:81:d9:d6:91:0f:43:01:5e:11:97:61:c3:3e:
         14:d1:24:7d:42:30:36:b6:04:aa:32:35:de:99:6e:5a:b6:25:
         dd:ce:8c:4b:79:ac:a7:ef:99:0b:68:09:22:43:9b:4f:b4:79:
         d3:55:6e:01:36:06:c5:59:b0:8b:cd:56:74:77:81:10:6e:85:
         ea:f7:7f:2b:a4:e5:72:9f:c3:4e:08:9d:47:7d:57:8d:a1:5e:
         10:35:e3:3d:37:d3:df:e3:8e:47:9b:36:61:62:3d:50:73:c0:
         55:c8:74:65:34:86:9e:45:f2:2a:01:d9:6b:48:c8:35:90:19:
         52:d0:43:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:04:12 2025 by rpki-client