Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5/f7a9e3ec-59f5-39ac-a1d3-03899cf036ed.roa
File:                     f7a9e3ec-59f5-39ac-a1d3-03899cf036ed.roa (raw, json)
Hash identifier:          9xPLNaHnK/+fRNNxk9V05Jf3pCzSDu0AqhFlhcBJrLo=
Subject key identifier:   55:81:CB:B5:5D:7D:F9:C4:5D:89:11:D9:F3:FC:3C:0B:A0:AF:16:F1
Certificate issuer:       /CN=8bf48a28-7aa2-4a7f-b85e-71b770da2ee5
Certificate serial:       010D0C9F4328584A6C55BF1EFF71C2056E8B6D40
Authority key identifier: 47:1B:4A:40:74:AE:CE:15:8F:F9:7A:E9:1E:B5:52:55:C4:52:91:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5/f7a9e3ec-59f5-39ac-a1d3-03899cf036ed.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     23366
IP address blocks:        155.58.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:bf:1e:ff:71:c2:05:6e:8b:6d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bf48a28-7aa2-4a7f-b85e-71b770da2ee5
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=6cb36002-4d2e-4cca-a724-9cf41c4c44e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f8:e0:e5:83:cf:ad:49:7c:85:14:e4:41:7e:
                    a7:bf:35:75:84:cb:b4:e1:3c:d2:b3:5c:f5:fd:70:
                    df:36:cc:45:75:3e:be:ff:55:bf:b8:21:ab:1b:53:
                    fd:b8:2b:5f:78:61:35:04:0b:1b:4c:40:3b:13:3a:
                    2c:08:81:ff:95:66:42:a1:70:17:5e:36:a4:c7:98:
                    7a:7c:bc:82:66:0c:04:32:dd:c6:3f:f9:4d:85:cf:
                    9f:ca:e7:e1:81:a1:8c:a2:24:83:97:3e:18:d1:b1:
                    50:a7:6b:eb:1a:16:89:0d:6c:83:e9:7f:46:8c:2a:
                    0a:d8:58:80:af:8d:b2:99:08:97:15:fd:1e:99:4e:
                    48:6a:56:ae:c8:a6:27:76:58:25:8b:f0:9a:c7:41:
                    4c:41:fc:ae:86:5c:e9:f4:3a:ab:8a:fe:6b:8c:ac:
                    78:d5:ae:7e:93:f4:04:ff:24:f9:24:56:f9:06:49:
                    2d:b4:60:e1:c6:b6:97:37:74:9c:b4:cf:2f:db:5b:
                    75:cd:c4:b5:c3:70:33:25:86:10:ee:43:06:d7:2d:
                    66:4f:48:44:b4:5c:60:da:e9:86:87:15:16:15:17:
                    94:59:02:ba:af:1b:07:d1:36:7b:ec:c7:7c:4e:81:
                    a6:0e:14:5b:43:60:ff:9f:63:53:b0:90:f8:44:3f:
                    b0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:81:CB:B5:5D:7D:F9:C4:5D:89:11:D9:F3:FC:3C:0B:A0:AF:16:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5/f7a9e3ec-59f5-39ac-a1d3-03899cf036ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.crl

            X509v3 Authority Key Identifier:
                keyid:47:1B:4A:40:74:AE:CE:15:8F:F9:7A:E9:1E:B5:52:55:C4:52:91:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.58.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:6b:fa:d2:20:ca:3f:7f:8b:6d:60:84:67:cf:5c:c8:a8:e9:
         00:24:ae:15:af:9a:3a:48:bf:d6:27:0e:d6:8e:dd:de:13:0c:
         42:c8:fd:1c:29:d0:15:3a:53:05:12:54:3b:a5:bd:56:54:51:
         d8:01:3e:15:0f:34:c9:47:38:5e:61:3e:d1:c2:d7:3b:85:7c:
         d4:04:55:a9:e2:c6:11:c5:51:c2:47:0b:08:06:e8:46:13:ed:
         7d:68:46:5f:28:76:9c:5a:5b:74:f2:f8:b3:d4:d4:76:33:d6:
         fe:50:c0:a2:32:60:21:98:79:2f:69:2b:8a:db:b0:64:78:c2:
         17:9f:e3:37:d4:09:6b:5c:f6:31:d5:38:60:40:d1:11:3e:43:
         7c:b1:6c:c2:e7:a5:7c:90:5a:dc:a8:e3:c9:1d:bf:b8:7f:5d:
         43:0b:fd:27:84:42:f8:f8:0c:53:4d:1c:90:9e:7d:c0:98:d9:
         90:34:85:47:9b:39:12:8b:33:aa:0b:d3:f8:02:74:65:11:94:
         a6:5f:dd:be:ea:a0:96:ec:12:e5:d0:a4:03:fd:b7:eb:08:44:
         9a:03:9a:f5:fe:cc:11:33:08:de:45:16:ab:08:c7:55:d9:e5:
         36:bb:4a:03:3a:47:d2:28:96:0b:28:41:08:71:4c:d8:49:34:
         af:40:9e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:34:21 2025 by rpki-client