Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/58ae2a95-69c6-3c2a-8493-3f45c86d73e0.roa
File:                     58ae2a95-69c6-3c2a-8493-3f45c86d73e0.roa (raw, json)
Hash identifier:          vjx6X2C/WlIM11LVIrUB2XHCJC1SUu7m0uGQqIIKsmM=
Subject key identifier:   44:53:E4:56:BC:45:82:9B:1B:90:38:9A:DC:D8:C9:38:27:79:7B:49
Certificate issuer:       /CN=0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9
Certificate serial:       010D0C9F43285849E4EFB84E7F50484C8E94BF40
Authority key identifier: 8F:F9:0F:06:64:B0:32:AE:06:2D:7A:C2:E3:4B:C1:8E:E4:79:4D:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/58ae2a95-69c6-3c2a-8493-3f45c86d73e0.roa
Signing time:             Sun 18 May 2025 13:01:00 +0000
ROA not before:           Sun 18 May 2025 13:01:00 +0000
ROA not after:            Sat 16 Aug 2025 13:01:00 +0000
asID:                     7127
IP address blocks:        155.13.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e4:ef:b8:4e:7f:50:48:4c:8e:94:bf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9
        Validity
            Not Before: May 18 13:01:00 2025 GMT
            Not After : Aug 16 13:01:00 2025 GMT
        Subject: CN=3c5df2b3-9537-409c-b978-50de4377c341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f9:ee:23:2c:0a:95:47:6d:69:b5:14:96:fa:
                    9e:30:5c:71:57:6c:9c:8d:fe:ab:db:a9:c1:c9:af:
                    eb:11:b0:7c:19:76:4d:e8:66:22:0d:6f:e2:fb:63:
                    3f:37:41:d8:9f:eb:e8:d1:c2:73:97:44:08:e8:5f:
                    c9:93:54:6e:bc:16:57:d3:a6:6a:bb:b2:3d:f1:a5:
                    49:10:19:c4:6a:4b:95:9a:02:03:7d:89:7e:09:41:
                    54:78:94:53:44:a0:7d:22:30:fb:99:a6:e7:b0:d4:
                    45:cb:17:31:0b:f9:68:98:16:69:de:cb:9f:48:47:
                    52:6b:6d:36:9c:76:4a:f0:b3:30:88:6a:7f:42:d2:
                    27:31:9e:84:0c:7f:69:0f:1c:6b:8d:7a:2b:68:d7:
                    14:d9:58:9b:17:c9:10:5b:ae:91:0d:31:f3:72:2e:
                    58:3b:53:ff:2b:9a:9a:a4:88:d4:28:c9:a0:3e:3b:
                    4d:83:dc:23:9b:72:39:42:d0:40:ff:9d:dd:81:0f:
                    41:99:08:d5:ca:a5:78:d8:6c:aa:70:8b:73:e6:04:
                    3d:ae:c7:7e:1f:ed:34:38:88:1e:ca:53:d9:fc:92:
                    b1:5b:81:a0:15:a4:b8:91:9b:5b:50:0d:cd:33:b6:
                    93:9e:35:a0:1a:64:91:50:13:fc:cb:83:7d:9f:24:
                    44:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:53:E4:56:BC:45:82:9B:1B:90:38:9A:DC:D8:C9:38:27:79:7B:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/58ae2a95-69c6-3c2a-8493-3f45c86d73e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.crl

            X509v3 Authority Key Identifier:
                keyid:8F:F9:0F:06:64:B0:32:AE:06:2D:7A:C2:E3:4B:C1:8E:E4:79:4D:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.13.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:3b:f3:f2:c9:2b:c8:87:2e:71:0a:3b:39:de:5f:c1:b5:51:
         0e:8b:3f:e0:26:eb:ff:26:b0:ac:df:a5:44:d2:43:3a:55:c0:
         c3:1b:ba:1e:97:c8:13:40:00:65:4d:d4:ee:9d:62:dc:b8:9c:
         ff:94:d8:da:f9:a7:68:ea:02:79:79:65:18:59:42:6f:0c:23:
         71:20:b4:f2:a9:1a:4f:a0:67:9b:26:0f:3e:86:8d:84:a1:69:
         ac:ab:19:91:e3:54:d5:9d:3a:a0:bc:76:46:27:0b:08:8d:d3:
         87:89:13:7e:0a:ff:d6:d5:61:f6:2e:d7:cb:4c:f8:b1:72:14:
         e3:eb:41:7f:af:55:07:6c:c4:e7:ca:98:c9:34:fd:57:54:26:
         1c:e3:56:21:4a:8f:bc:c9:0f:0e:7c:69:97:e6:c3:fa:a5:86:
         7d:9c:4b:a9:9c:a0:ac:b6:25:3e:60:0b:55:19:56:34:33:56:
         44:0d:e3:39:99:32:3c:fa:f9:56:8d:be:30:b9:5b:b0:fb:1b:
         7e:1a:1d:61:5f:94:c1:06:cc:af:22:5f:54:e1:fe:96:9f:19:
         04:6e:62:f2:e9:83:29:94:28:04:83:86:62:33:12:73:aa:23:
         47:d6:83:22:14:03:41:74:c0:04:b4:66:f9:43:83:7c:6d:ee:
         6f:ba:a3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:56:29 2025 by rpki-client