Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/55872029-f088-324a-9178-2b7cf021d95a.roa
File:                     55872029-f088-324a-9178-2b7cf021d95a.roa (raw, json)
Hash identifier:          IGguowchWo6gwcMpGdg1UaZmxXoUu6HJ32Qn0cNefGs=
Subject key identifier:   20:D8:00:E4:6E:64:D8:9A:91:F4:B8:00:3D:EA:25:24:B3:7C:AE:73
Certificate issuer:       /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial:       010D0C9F4328584AF5212F56BD833350F27A1A40
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/55872029-f088-324a-9178-2b7cf021d95a.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     18434
IP address blocks:        147.249.53.0/24 maxlen: 24
                          147.249.188.0/24 maxlen: 24
                          147.249.189.0/24 maxlen: 24
                          147.249.190.0/24 maxlen: 24
                          147.249.191.0/24 maxlen: 24
                          147.249.193.0/24 maxlen: 24
                          156.55.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:2f:56:bd:83:33:50:f2:7a:1a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=4160891e-c10f-48d6-8796-031efde29b06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8a:26:bf:4c:94:41:84:ef:09:07:1b:ec:e1:
                    58:ab:d3:89:e1:c9:42:24:96:06:6b:0a:0c:10:d6:
                    c0:4f:c4:17:ae:81:14:db:0c:dc:04:2c:0e:c0:d8:
                    54:a9:66:e1:78:57:41:98:d2:f1:8b:09:cc:1a:3e:
                    f2:b2:3a:ae:56:dc:ba:fe:0b:32:7c:56:bd:0a:6c:
                    f7:f5:f6:0a:86:8c:84:fe:a7:66:85:32:be:b6:6e:
                    36:a9:97:af:ac:9f:cc:64:13:03:ef:0b:47:5f:a1:
                    d8:ef:df:a2:77:8e:92:c7:2f:75:b3:59:ba:4b:53:
                    89:c9:ea:06:ee:43:79:13:48:f3:53:fe:0e:23:a4:
                    27:d5:7a:4c:1f:6e:23:4f:24:27:c3:56:b8:1a:7b:
                    e1:ee:8a:2e:0f:90:c1:46:38:00:59:39:79:24:ea:
                    55:33:10:fc:da:3f:84:e0:1f:9e:4d:3b:ee:da:a4:
                    1b:4e:bf:7e:86:4b:1c:f2:78:3f:87:0d:67:3e:57:
                    f5:df:2b:ef:1c:f4:8f:11:a4:cb:ab:ec:bf:b5:1c:
                    a9:f6:34:0b:8a:f6:44:83:e6:38:cb:a4:a1:2b:29:
                    c2:61:9d:5d:54:81:8f:8b:77:03:f2:e7:a6:cb:2a:
                    95:1a:7d:3d:6a:65:2c:73:02:65:c3:df:99:8e:77:
                    0b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D8:00:E4:6E:64:D8:9A:91:F4:B8:00:3D:EA:25:24:B3:7C:AE:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/55872029-f088-324a-9178-2b7cf021d95a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl

            X509v3 Authority Key Identifier:
                keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.249.53.0/24
                  147.249.188.0/22
                  147.249.193.0/24
                  156.55.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:7d:95:29:f6:d0:9b:37:e1:5a:93:3d:9a:75:3d:81:61:d7:
         a5:69:ff:2f:ec:87:72:12:32:9a:85:44:9d:bb:90:60:c1:ff:
         c8:15:3e:01:48:13:0a:2a:4c:7b:e1:f9:42:e5:40:b9:4d:3d:
         c3:f9:2c:b8:4b:4b:79:e7:95:12:2c:06:bc:9b:e4:af:cb:11:
         93:09:23:a8:9c:e1:f3:aa:6f:de:3b:17:00:e5:88:d2:91:51:
         c7:93:a3:01:89:58:20:07:61:b2:df:33:81:bc:c4:ac:52:ba:
         5d:77:24:2b:f6:fc:2b:57:c8:bc:2b:c7:c1:f4:1a:4e:f1:64:
         d5:f3:73:a3:78:01:a5:98:69:1d:44:e8:cb:52:dc:ab:80:43:
         58:72:85:9a:52:e9:32:f3:d1:0e:4f:6e:2a:1d:d7:04:b9:0c:
         f7:b1:08:85:83:e9:48:f9:db:39:13:2f:fe:22:d6:d4:44:cd:
         4f:32:61:15:ca:43:b6:99:b5:f4:1f:d6:a7:89:f1:d4:6d:dd:
         62:df:c2:06:1f:0a:28:30:1d:08:2f:e2:99:20:5a:69:e4:bb:
         44:ac:47:e8:29:99:41:e9:b5:c1:54:ff:9a:aa:bb:f7:2d:a7:
         0c:69:1a:0e:51:89:af:95:f7:71:43:59:79:41:6e:ca:f4:32:
         3d:a9:06:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:24:49 2025 by rpki-client