Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/56878942-8a9e-3f0c-80e5-1b964e624fc7.roa
File:                     56878942-8a9e-3f0c-80e5-1b964e624fc7.roa (raw, json)
Hash identifier:          sUGsWBXTDIKrt87mvhPXgvc4UTHHY90WSrdvVii7nkM=
Subject key identifier:   11:A9:20:6B:C3:A9:CF:BB:16:CC:BB:C5:95:50:94:0B:F7:13:1E:BE
Certificate issuer:       /CN=c7fd25a2-3041-431d-a6a9-c409b42835a1
Certificate serial:       010D0C9F43285849D594F3238E54DE804989ED00
Authority key identifier: 35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/56878942-8a9e-3f0c-80e5-1b964e624fc7.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        89.192.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:f3:23:8e:54:de:80:49:89:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7fd25a2-3041-431d-a6a9-c409b42835a1
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=34faf8b8-26e0-4355-b742-3ec34103e55a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2c:88:19:98:8c:00:43:45:e9:a6:6d:2d:38:
                    e2:82:d1:2f:0a:da:82:ac:b4:03:86:72:75:93:02:
                    f9:d1:78:9f:68:1a:0c:12:96:d8:a3:71:0b:09:8d:
                    08:9f:81:e5:90:09:97:f7:6a:25:8d:97:85:ee:52:
                    a5:28:f7:4b:36:bc:17:5e:2c:56:d7:63:f1:a0:52:
                    75:f6:a3:ac:23:f0:23:94:87:fe:d7:ac:1d:b3:f2:
                    56:af:0c:4d:f2:ca:45:9d:e4:cb:d7:d3:dd:29:e6:
                    15:f6:5e:70:17:a9:89:e4:17:19:f4:44:14:f0:7d:
                    0b:b4:53:8d:aa:da:15:f9:90:65:00:fd:87:52:c3:
                    57:0a:6b:98:09:a5:0a:49:6d:21:a7:e3:68:ab:e3:
                    e0:46:a8:c5:8c:99:c0:6b:19:7a:5f:a8:48:d6:26:
                    bc:d5:3b:17:27:80:be:36:ca:ed:7a:02:db:56:c2:
                    8a:f5:43:9d:54:71:53:1f:19:17:47:c3:38:8a:a9:
                    c5:02:ac:8b:79:bb:6c:f0:03:b2:96:14:d6:4c:de:
                    db:c0:ce:3e:e7:5d:54:96:e4:5e:fc:25:3a:48:ce:
                    c6:ea:14:67:dd:8d:c9:1d:71:8d:fe:6a:34:2b:70:
                    da:9b:cc:3f:0f:9e:4f:7f:75:34:83:a6:6b:1d:d9:
                    c2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A9:20:6B:C3:A9:CF:BB:16:CC:BB:C5:95:50:94:0B:F7:13:1E:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/56878942-8a9e-3f0c-80e5-1b964e624fc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl

            X509v3 Authority Key Identifier:
                keyid:35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.192.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:c8:7f:7d:6b:49:fd:31:a2:e6:d5:95:42:33:44:36:be:a3:
         8a:1e:11:95:ea:0d:53:4b:5d:fe:6e:cc:94:4c:12:d1:2c:ea:
         90:16:b5:59:b3:ad:08:08:27:70:45:30:f9:81:e5:70:10:bd:
         df:5e:b6:92:1a:43:d1:c4:39:e8:0d:d7:63:d9:70:ad:eb:15:
         ad:af:65:e7:45:40:05:54:16:2e:c9:ef:1a:69:83:6d:39:33:
         c1:27:0f:ef:fa:63:08:af:2c:01:a2:b4:bb:7a:44:f6:94:7f:
         ec:2b:d1:a1:c5:7f:1b:06:d5:cf:df:e9:ae:38:44:fc:d0:4d:
         c7:e3:22:0d:eb:37:e4:8c:df:9f:6c:fd:af:90:28:57:39:3b:
         ff:5a:da:1a:2a:0f:f2:eb:ea:79:44:63:63:c0:c8:a0:dd:03:
         8c:cb:89:97:ae:6e:eb:80:a2:62:51:00:3e:c1:62:dd:51:d2:
         b0:64:cf:ae:7e:f8:0e:5f:00:62:e5:99:09:56:e4:4b:5f:b2:
         86:e4:df:9e:02:ca:89:a0:53:56:1e:4a:ba:ab:ee:b2:f8:b0:
         ae:89:2a:fd:7a:99:fa:54:de:81:89:a5:df:b6:76:ca:41:d8:
         2f:4d:ed:84:62:d4:78:e2:04:ed:b0:71:14:ad:6c:cd:1d:6a:
         d4:d3:51:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:16:25 2025 by rpki-client