Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/26cfd816-2d86-3517-87c3-b35ccc8a1995.roa
File:                     26cfd816-2d86-3517-87c3-b35ccc8a1995.roa (raw, json)
Hash identifier:          4sNbMqJpQxbE14Yt1zZRJCW3DU7To9yCJKOWqj/TsQI=
Subject key identifier:   C3:3F:30:06:28:5A:4F:81:84:90:CD:6A:CA:EA:B0:B6:55:E7:B4:FC
Certificate issuer:       /CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Certificate serial:       010D0C9F43285849F87A9FDDCB93B0F5473B0970
Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/26cfd816-2d86-3517-87c3-b35ccc8a1995.roa
Signing time:             Sun 25 May 2025 13:01:02 +0000
ROA not before:           Sun 25 May 2025 13:01:02 +0000
ROA not after:            Sat 23 Aug 2025 13:01:02 +0000
asID:                     54535
IP address blocks:        156.37.200.0/24 maxlen: 24
                          156.37.201.0/24 maxlen: 24
                          156.37.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:7a:9f:dd:cb:93:b0:f5:47:3b:09:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9
        Validity
            Not Before: May 25 13:01:02 2025 GMT
            Not After : Aug 23 13:01:02 2025 GMT
        Subject: CN=cc82485f-92c8-4ade-98ff-aed6762b9b78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:13:d9:ab:c3:e7:99:39:57:53:2e:b8:72:29:
                    60:f5:a7:6d:1a:17:e7:0d:29:0a:70:1a:18:20:8e:
                    b5:d1:95:c0:0f:34:69:9f:07:e0:d9:79:0d:05:70:
                    71:23:23:b6:14:73:64:5b:e6:14:a5:0d:76:42:d1:
                    2e:79:fa:72:9c:b0:08:0c:8f:33:af:b4:25:d3:fd:
                    ca:ed:12:83:23:b9:72:85:79:ed:b3:52:a4:4a:16:
                    7b:25:f0:b0:2c:86:31:88:b8:b4:87:fa:a0:80:4a:
                    94:62:44:f5:50:37:e0:ee:93:95:97:1c:21:ea:14:
                    1f:46:f8:c3:c3:78:2a:42:41:d3:06:94:35:23:fa:
                    90:e6:db:95:58:8b:4d:62:ac:ff:73:3f:72:63:7d:
                    49:32:e7:29:d9:61:c8:9e:51:dd:96:87:d7:e2:31:
                    f1:ae:e3:55:70:99:81:93:09:d9:f9:d5:64:54:47:
                    3a:16:10:c9:3d:d2:e2:66:36:04:0b:e4:15:01:c7:
                    98:f4:8b:10:56:2c:29:06:b5:b6:c2:09:6b:d0:01:
                    78:75:42:69:8c:5a:52:46:0c:6f:69:8e:b0:74:8b:
                    3d:33:c7:29:4c:86:9f:56:dd:8e:02:fe:2b:a9:77:
                    b3:6b:35:3c:8e:26:a1:f0:a0:4a:b1:be:13:68:cf:
                    d1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:3F:30:06:28:5A:4F:81:84:90:CD:6A:CA:EA:B0:B6:55:E7:B4:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/26cfd816-2d86-3517-87c3-b35ccc8a1995.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl

            X509v3 Authority Key Identifier:
                keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.37.200.0/23
                  156.37.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:be:d4:58:c6:ec:fd:3b:0b:61:f2:f0:ca:4f:6b:88:e1:44:
         b1:b5:a2:72:ef:10:c4:7b:d2:33:a3:45:bc:b3:2a:a8:fb:ce:
         1e:e0:c7:c8:d7:f0:98:00:b3:52:db:75:ca:e2:1f:54:25:d1:
         63:3f:ac:f8:07:ac:de:8b:d4:46:95:83:e8:87:06:33:2f:e0:
         e5:52:5b:37:55:b6:93:27:c2:10:e7:d3:dd:1e:4c:b5:4c:28:
         a4:3e:a2:90:76:b5:75:cb:fb:0f:a2:c3:41:6f:28:2d:a6:dc:
         cf:21:4f:53:6d:80:86:59:c5:8a:01:d1:3b:d0:93:c0:1d:f4:
         73:78:41:5d:b8:d1:0e:15:c6:da:4e:7e:dd:23:2d:ad:f4:4b:
         f0:b2:4d:af:3f:94:32:8e:cb:b3:c4:23:eb:5c:70:b9:a8:08:
         83:d3:29:79:12:c7:3d:e4:4f:45:78:44:75:f7:db:cf:a4:d8:
         24:a7:ea:0e:fa:73:de:d4:e6:d8:f0:98:96:dd:8e:a5:37:ed:
         ab:af:70:ed:94:ba:3e:8e:e6:59:c0:6c:e7:21:65:5a:b9:f2:
         ef:86:86:91:bb:b8:70:c2:b7:11:87:04:a8:c6:7c:dc:f0:77:
         e6:1d:75:43:e3:4a:b1:87:a5:89:41:7d:a9:23:30:64:2f:61:
         e3:00:8b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:14:16 2025 by rpki-client