Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/56bd0549-0e1f-4e81-bc69-e368e2e29254/f343bc0d-1a47-3448-a18d-34ed64c4539d.roa
File:                     f343bc0d-1a47-3448-a18d-34ed64c4539d.roa (raw, json)
Hash identifier:          OgAcXPpEroc1/eZsrA5bB09j3N3py+2x6uksRyKywwE=
Subject key identifier:   0C:3C:47:94:E8:29:9E:7C:73:B6:37:50:58:F4:E5:13:4B:3C:74:DF
Certificate issuer:       /CN=56bd0549-0e1f-4e81-bc69-e368e2e29254
Certificate serial:       010D0C9F4328584AAB265B99132F02CAF81A5B00
Authority key identifier: 16:3C:AE:4F:9C:F9:B9:9D:24:F2:15:17:7C:70:E6:F9:3A:A1:EB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/56bd0549-0e1f-4e81-bc69-e368e2e29254.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/56bd0549-0e1f-4e81-bc69-e368e2e29254/f343bc0d-1a47-3448-a18d-34ed64c4539d.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     11362
IP address blocks:        173.243.232.0/22 maxlen: 24
                          192.150.211.0/24 maxlen: 24
                          199.96.108.0/22 maxlen: 24
                          2602:ff72::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/56bd0549-0e1f-4e81-bc69-e368e2e29254/56bd0549-0e1f-4e81-bc69-e368e2e29254.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/56bd0549-0e1f-4e81-bc69-e368e2e29254/56bd0549-0e1f-4e81-bc69-e368e2e29254.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/56bd0549-0e1f-4e81-bc69-e368e2e29254.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:5b:99:13:2f:02:ca:f8:1a:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56bd0549-0e1f-4e81-bc69-e368e2e29254
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=cbfb3e22-22ed-4138-bb09-364c492d74da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ad:8f:2b:fc:25:2a:bb:4f:6f:76:88:f4:06:
                    de:b1:e5:1f:34:6a:d1:b1:0b:64:38:f6:04:9b:91:
                    d1:23:f4:07:22:fc:68:06:95:1f:bb:93:94:be:9a:
                    49:0f:e5:9f:31:10:03:c7:c9:ca:04:2c:82:ea:76:
                    44:1a:c9:0e:7e:f9:5d:13:2c:a2:71:4e:89:b4:0e:
                    48:dc:03:29:2d:04:e3:e6:0c:c8:41:33:ec:e1:d8:
                    0f:18:8f:ce:0b:10:ff:d4:9b:08:fe:6f:6a:30:62:
                    32:8a:bb:88:4a:d2:b2:9f:97:bd:dd:58:66:f7:d6:
                    1b:c3:6a:6c:b9:52:0b:5f:53:c2:21:0a:17:65:b2:
                    d6:48:5d:e4:e4:52:19:89:4f:dd:5f:9d:ca:21:66:
                    82:d2:90:1e:03:ae:4e:81:f7:95:ab:66:7f:53:a6:
                    c7:39:5d:76:ee:69:f3:21:10:2d:24:7e:15:20:7b:
                    db:dd:eb:73:2c:33:51:38:17:ab:65:38:70:f1:a3:
                    d2:d5:a4:b6:bc:7a:18:5e:1c:36:c6:f2:81:f9:2b:
                    6d:74:ba:00:1e:78:7a:9e:6b:51:fe:92:8a:81:f4:
                    bc:46:f0:78:2b:4f:8f:b7:9f:e5:9e:f8:16:d0:a5:
                    50:b5:a0:d5:0c:13:81:4f:10:47:72:01:46:6f:d6:
                    75:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:3C:47:94:E8:29:9E:7C:73:B6:37:50:58:F4:E5:13:4B:3C:74:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/56bd0549-0e1f-4e81-bc69-e368e2e29254/f343bc0d-1a47-3448-a18d-34ed64c4539d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/56bd0549-0e1f-4e81-bc69-e368e2e29254/56bd0549-0e1f-4e81-bc69-e368e2e29254.crl

            X509v3 Authority Key Identifier:
                keyid:16:3C:AE:4F:9C:F9:B9:9D:24:F2:15:17:7C:70:E6:F9:3A:A1:EB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/56bd0549-0e1f-4e81-bc69-e368e2e29254.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.243.232.0/22
                  192.150.211.0/24
                  199.96.108.0/22
                IPv6:
                  2602:ff72::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:91:4e:be:3e:23:72:12:b1:ef:cd:a6:ea:5e:a6:01:db:4b:
         e3:c3:b6:f6:53:17:7a:b3:c8:7b:11:cd:6f:ff:3a:e0:e7:74:
         70:06:a2:ad:73:18:d7:21:a1:6d:89:f0:cb:13:75:75:9d:1b:
         4c:5e:02:9b:a5:c9:5f:37:e8:47:37:99:c9:5e:16:65:ae:1c:
         27:11:77:04:1b:42:ba:7e:0c:63:6d:9c:8b:79:22:64:15:54:
         c6:17:5b:f8:dd:c7:02:14:52:53:c0:ad:8c:fe:be:b7:e7:9d:
         a2:53:c7:cf:5e:40:c2:2d:b3:bd:45:74:c0:37:aa:85:0a:24:
         60:e4:8d:81:88:ae:42:3a:9f:6a:e4:5a:7c:96:37:45:dd:01:
         cf:9b:b4:0e:0f:77:7a:89:10:7d:6a:1d:10:67:ef:72:ba:1e:
         f2:eb:c2:1d:5b:49:21:84:f8:95:34:9e:be:2b:19:a6:fa:a4:
         58:af:af:d4:a4:a9:e7:cf:dc:5b:e7:18:f9:a9:08:aa:99:1c:
         df:a2:a6:4e:65:90:ad:05:e2:ef:6d:06:77:72:6b:2a:99:2b:
         90:46:29:cb:d2:5f:0f:d8:4b:d9:16:bf:88:c4:eb:d9:b1:c2:
         e3:c3:73:84:56:50:8f:5d:62:a4:e6:9a:c3:6c:7c:f5:54:a1:
         03:49:70:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:37:06 2025 by rpki-client