Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a56def95-5b0b-387c-9e35-42bffe3fe95c.roa
File:                     a56def95-5b0b-387c-9e35-42bffe3fe95c.roa (raw, json)
Hash identifier:          /DceG2OMaHvpe/m1TNGj+WQVUaKeibMBjmKNQ+IzYck=
Subject key identifier:   D7:3C:A9:58:7B:B6:7F:CE:CE:6F:8E:96:62:F5:BE:F5:3C:72:BC:D9
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DA8C03C1F2FD84F8B0D8A0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a56def95-5b0b-387c-9e35-42bffe3fe95c.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     577
IP address blocks:        65.95.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:8c:03:c1:f2:fd:84:f8:b0:d8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=16cb5328-4b0c-4ddf-8833-ec147d44f4cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ed:64:35:fe:46:17:cb:a6:a1:08:b4:4c:4b:
                    1a:ce:b6:8e:2e:7f:08:2b:97:18:51:8d:41:2e:d9:
                    32:ca:27:2c:ea:cb:dc:05:a8:d7:12:b7:6b:2c:d3:
                    39:8a:10:a6:21:b2:2d:8b:26:d8:3b:23:cc:b7:55:
                    4e:b6:78:6c:9f:62:b7:dd:fa:76:9d:ea:53:df:c7:
                    8b:9f:cb:ca:09:c7:83:07:2c:f2:de:c0:6a:f6:2a:
                    cb:c2:a7:3b:81:8b:70:80:32:46:f0:db:39:ac:08:
                    30:43:42:62:c4:27:09:43:97:e0:c1:1f:32:50:98:
                    b4:b1:06:78:88:bc:c9:60:5a:bd:55:a2:d0:61:d5:
                    bd:d1:94:b2:19:7d:ec:62:67:a9:1e:e6:f1:2f:21:
                    ea:cf:63:b7:6d:fa:a4:6c:93:e4:da:56:08:0c:97:
                    58:4e:c2:e8:f2:56:2b:21:67:31:fa:9b:8e:4f:64:
                    e9:2a:34:f5:33:69:a5:cf:1e:1a:83:0e:29:31:3f:
                    99:4d:2f:a1:87:71:1d:59:77:dc:a7:46:84:c6:9c:
                    2f:ff:a9:37:ef:47:b4:f0:c3:73:9b:d8:4a:69:fa:
                    3e:cb:06:29:c3:6f:88:8b:34:4e:1b:6f:dd:ce:2b:
                    a8:dc:42:df:2b:76:23:d8:a9:53:85:f8:ea:e6:e4:
                    9d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:3C:A9:58:7B:B6:7F:CE:CE:6F:8E:96:62:F5:BE:F5:3C:72:BC:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a56def95-5b0b-387c-9e35-42bffe3fe95c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.95.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:28:88:c2:b7:0c:bc:d7:88:be:51:c8:b6:97:1f:fa:8b:93:
         88:ae:43:7c:12:9b:ec:89:fe:63:cc:f2:8e:71:27:90:5c:e9:
         c0:64:c7:4c:4d:14:fc:04:98:48:00:e1:0e:c1:ba:68:28:65:
         ef:c0:50:38:43:a6:d5:53:c3:5c:fc:22:f3:23:3d:a6:90:f9:
         d7:75:8e:fa:6d:8c:6b:e1:f4:65:b4:ad:5c:bb:67:87:2b:1a:
         ef:4f:59:0e:9a:b2:bb:d9:47:34:cb:fe:db:19:ce:46:d7:40:
         2d:f2:c7:76:47:5b:bf:f1:a6:bd:22:99:e8:0e:65:f7:98:76:
         a7:8c:6a:23:4a:5e:d6:b4:a6:bb:57:55:70:ed:d8:75:b5:4e:
         0d:3d:8d:d7:c1:5e:10:ea:06:01:ae:4a:9b:8f:7d:39:82:d5:
         1d:c8:e4:34:7f:ca:15:9e:c6:4d:93:74:19:0c:a2:9d:da:85:
         ad:ee:a4:b2:7c:4f:38:ce:eb:90:d8:b4:71:4a:5e:d4:f0:ce:
         b6:f2:a6:05:94:fb:d5:46:b9:06:f8:aa:6a:a1:fc:a2:3a:17:
         20:b9:90:4f:cc:3f:d7:29:22:c6:f4:43:9c:1b:99:1a:18:9f:
         69:92:9c:9b:c1:78:75:f8:cd:26:5f:4f:df:03:b7:25:b4:90:
         07:1b:7d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:00:05 2025 by rpki-client