Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/6656f8b9-6a2a-3721-b635-8ceda21f6394.roa
File:                     6656f8b9-6a2a-3721-b635-8ceda21f6394.roa (raw, json)
Hash identifier:          dzlMR6nMRnyeunzK6krQVatyDmVNQ9rOAsqGwZV/twE=
Subject key identifier:   3C:8D:96:2C:CD:37:5E:1F:FE:99:20:03:B8:38:BB:56:BB:FC:9B:0A
Certificate issuer:       /CN=53e30d85-4474-43ab-95e5-8d5d53560b6e
Certificate serial:       010D0C9F4328584A30503D7C95BE33F71D243240
Authority key identifier: E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/6656f8b9-6a2a-3721-b635-8ceda21f6394.roa
Signing time:             Sat 14 Jun 2025 13:01:04 +0000
ROA not before:           Sat 14 Jun 2025 13:01:04 +0000
ROA not after:            Fri 12 Sep 2025 13:01:04 +0000
asID:                     22612
IP address blocks:        192.64.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:30:50:3d:7c:95:be:33:f7:1d:24:32:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53e30d85-4474-43ab-95e5-8d5d53560b6e
        Validity
            Not Before: Jun 14 13:01:04 2025 GMT
            Not After : Sep 12 13:01:04 2025 GMT
        Subject: CN=8d2dbf81-1b6b-4c83-b279-fe1333edb2bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:29:ab:c3:15:ad:c5:e0:4e:d2:f0:a8:65:17:
                    ed:aa:30:67:13:f5:c7:15:30:2d:12:bf:24:2d:77:
                    63:bd:51:dc:81:cc:48:91:78:79:bd:01:56:b7:a4:
                    7c:f0:cf:1b:6c:86:99:01:b7:cf:fb:e3:c6:f0:1e:
                    4d:de:ca:60:c2:f2:fe:95:7b:48:6c:8c:08:4b:81:
                    4c:b4:13:26:32:8e:24:33:d3:2b:f5:03:11:8e:5d:
                    8f:5d:5c:2e:a3:4a:1c:f2:02:41:aa:bc:05:09:26:
                    9b:ef:49:53:8d:5f:49:37:40:55:55:8a:97:83:33:
                    ff:6e:c5:60:1c:0c:31:4f:ee:bf:f0:4e:4a:bb:96:
                    53:3d:a1:3f:dc:a9:71:7b:95:02:7c:d6:c0:07:4c:
                    03:37:e5:2e:16:f5:f2:39:a3:95:9b:50:2c:7d:c3:
                    4f:ed:d4:33:33:cd:39:53:4a:d1:28:c9:cd:5f:55:
                    45:44:fd:99:09:3c:1c:bc:36:f1:88:28:25:be:cb:
                    94:c1:3e:63:e5:f8:aa:e9:4d:55:03:8d:35:9d:bf:
                    51:42:af:34:58:7f:94:62:86:1c:b3:70:7b:7d:05:
                    97:88:16:11:20:42:66:a7:30:14:93:10:1c:e8:29:
                    fd:94:5d:02:3d:43:d5:17:a3:ae:c2:0d:84:65:cd:
                    45:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:8D:96:2C:CD:37:5E:1F:FE:99:20:03:B8:38:BB:56:BB:FC:9B:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/6656f8b9-6a2a-3721-b635-8ceda21f6394.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl

            X509v3 Authority Key Identifier:
                keyid:E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.64.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:8f:e6:f1:d6:d1:da:c4:d1:6e:05:8f:1d:3f:6e:c4:07:11:
         2b:45:2e:4d:bc:14:0d:6a:f7:ed:5e:2c:9a:10:c7:f9:7e:99:
         e8:97:96:13:a4:97:57:b7:24:77:f3:88:89:a0:2f:5c:f8:59:
         d8:4a:47:2e:82:14:39:04:46:2f:b8:8a:57:fc:0c:1e:57:21:
         aa:d7:84:bf:0c:84:e6:1f:c7:18:02:98:04:82:05:d1:72:07:
         5e:00:b9:36:e8:91:6a:25:f1:89:2f:e7:96:f6:73:f8:12:51:
         ae:f9:4a:cc:4f:36:c3:f5:34:4d:b5:82:61:37:9f:e1:47:7a:
         1c:0e:55:b2:ac:a7:3c:ef:06:fe:eb:1e:64:25:9a:e8:cd:fa:
         ee:47:1c:1d:5a:89:06:aa:a8:09:8b:bf:4e:b3:9c:e8:3f:04:
         f1:9e:b4:30:4d:11:5f:78:21:3d:96:34:71:26:1b:14:b4:99:
         50:f5:e3:09:8e:2a:1a:c8:fa:14:ea:5e:89:fb:fe:3a:fc:a0:
         16:9c:a3:3f:b5:a4:fc:78:b2:46:18:c5:60:c9:04:a6:74:d5:
         f5:f2:07:57:3a:39:23:ee:b4:07:5d:b6:c9:bf:96:55:e2:f7:
         38:d9:ed:88:ca:a0:a1:b6:89:6b:24:0e:26:4e:63:ce:14:8b:
         25:0b:dd:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:12:49 2025 by rpki-client