Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1765c559-c80d-3592-a347-e9116dd7a582.roa
File:                     1765c559-c80d-3592-a347-e9116dd7a582.roa (raw, json)
Hash identifier:          CGwY0vkgafdQkuII96c0u2PM4X48fTVcfDUkTT+Gkqc=
Subject key identifier:   DF:6B:F2:F2:AE:A0:D3:72:BB:52:CC:11:19:24:62:A0:C0:7D:40:D6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFB7CF7D68C8F705ECB2E40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1765c559-c80d-3592-a347-e9116dd7a582.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     7016
IP address blocks:        174.54.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:7c:f7:d6:8c:8f:70:5e:cb:2e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=6a784801-be5f-4071-a740-df800480c334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:17:0f:3d:62:62:7e:f3:a5:44:96:9b:ec:78:
                    80:a2:d8:cc:06:e1:ec:d0:68:1b:a9:95:f3:ad:19:
                    d4:c7:c0:e3:d9:9f:bb:bf:2b:ed:3e:ed:1a:d2:f3:
                    cd:a0:36:ce:1a:04:41:65:04:44:58:0d:6d:10:b7:
                    c3:ed:f4:ca:76:0e:07:a3:e9:35:02:99:48:b9:ff:
                    33:41:3f:55:4e:2f:b5:d3:09:f4:9a:01:73:f6:b6:
                    3e:1a:51:f2:9e:ed:e1:26:f8:e3:c5:93:a0:70:7c:
                    05:11:22:a2:1d:81:0a:d5:f9:b8:64:8c:a3:52:c4:
                    44:22:05:05:e2:5e:2b:32:34:a6:ed:6e:ad:56:d5:
                    96:0d:92:96:ae:fb:38:ed:66:ab:2d:2c:91:5d:51:
                    05:3d:ab:59:43:4a:d6:b4:66:b6:f6:d3:d4:ac:5e:
                    ae:bf:37:6a:66:4e:49:23:2b:81:cb:fc:7e:a7:11:
                    5b:f5:79:6e:57:42:67:c2:37:3d:c6:d3:2c:aa:9f:
                    fb:88:28:61:ed:48:46:ec:93:42:20:72:8e:cb:86:
                    4d:ff:42:8d:08:a6:ec:23:b9:d9:3a:ad:3c:b0:83:
                    23:a5:28:a8:a0:ce:f5:ac:02:cc:69:25:fe:51:ed:
                    37:fe:02:3d:15:7c:9d:08:42:29:b2:2e:f2:75:ca:
                    31:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:6B:F2:F2:AE:A0:D3:72:BB:52:CC:11:19:24:62:A0:C0:7D:40:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1765c559-c80d-3592-a347-e9116dd7a582.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.54.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:8c:09:f7:bc:c0:5f:6b:7e:b5:a8:a4:7b:57:d5:3b:cf:bb:
         13:e0:6b:59:e6:2a:8f:95:86:00:50:5b:5e:bc:9f:47:27:76:
         bc:10:23:74:e4:4b:af:4d:29:ba:e0:69:9d:b5:a8:4c:96:28:
         86:42:61:62:12:8d:ba:95:98:b5:c5:49:6d:91:df:51:6c:03:
         69:bb:e1:d1:94:ed:75:e8:94:bd:77:f1:c9:6a:84:56:6b:e6:
         e4:3e:d0:60:d7:d0:11:f1:7d:84:49:fe:bd:bb:19:e6:65:c7:
         76:ed:ce:b9:cd:bc:45:03:df:79:cf:c1:6c:ae:e9:9f:d2:53:
         81:51:7f:59:4c:c7:78:ff:db:1c:a1:48:85:25:1e:67:99:fe:
         81:b2:8d:2b:c4:96:cf:ea:ac:6d:2b:1a:78:8b:3e:fd:ab:53:
         4b:ae:8c:ef:74:d9:9b:fe:30:07:8f:4b:0c:81:9f:cc:22:05:
         a2:05:30:b1:1b:5e:3f:a8:8b:d3:bb:f2:b4:eb:b1:77:63:59:
         dd:3e:f1:ce:05:26:f5:37:e7:30:fb:b7:62:7a:de:5d:79:30:
         e1:81:ba:e8:e9:36:dd:07:dd:9d:63:63:55:fb:4d:16:53:23:
         6a:ce:19:82:43:df:5b:f8:85:2f:69:88:e0:40:c9:22:0d:fd:
         3b:5b:4a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 00:51:58 2025 by rpki-client