Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/22d0498f-1d90-48ff-92de-ab62b685b2fe/31d52068-9bcf-318d-8cc0-6bfaf8ff4806.roa
File:                     31d52068-9bcf-318d-8cc0-6bfaf8ff4806.roa (raw, json)
Hash identifier:          y8hyb+3BgWwXFr/GCquMkJfLeb7l5WowJ9wXBLAbTnI=
Subject key identifier:   92:A4:7E:81:CB:72:F0:2F:15:7F:DF:B6:D5:CB:58:41:96:C8:A6:E4
Certificate issuer:       /CN=22d0498f-1d90-48ff-92de-ab62b685b2fe
Certificate serial:       010D0C9F4328584AE46115756DE2F942BB3C6D00
Authority key identifier: E0:91:0D:33:6F:BF:04:E7:9A:3A:C6:9C:CA:1D:37:77:32:03:B7:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/22d0498f-1d90-48ff-92de-ab62b685b2fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/22d0498f-1d90-48ff-92de-ab62b685b2fe/31d52068-9bcf-318d-8cc0-6bfaf8ff4806.roa
Signing time:             Mon 18 Aug 2025 01:00:33 +0000
ROA not before:           Mon 18 Aug 2025 01:00:33 +0000
ROA not after:            Sun 16 Nov 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        134.195.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/22d0498f-1d90-48ff-92de-ab62b685b2fe/22d0498f-1d90-48ff-92de-ab62b685b2fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/22d0498f-1d90-48ff-92de-ab62b685b2fe/22d0498f-1d90-48ff-92de-ab62b685b2fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/22d0498f-1d90-48ff-92de-ab62b685b2fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e4:61:15:75:6d:e2:f9:42:bb:3c:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d0498f-1d90-48ff-92de-ab62b685b2fe
        Validity
            Not Before: Aug 18 01:00:33 2025 GMT
            Not After : Nov 16 02:00:33 2025 GMT
        Subject: CN=7e5f450d-361d-4023-bfc6-27999653201c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f8:2d:22:8e:21:b9:f4:f8:dc:53:5d:9f:35:
                    b2:70:c7:d4:d3:7a:c5:21:9c:7b:b1:eb:e7:0d:8f:
                    c8:af:1e:c2:fc:42:9c:c4:21:b3:49:75:8e:30:35:
                    bb:94:b1:bc:a8:47:ee:f4:03:30:0e:38:56:b6:50:
                    48:6d:d1:fa:d5:b3:0e:88:79:f1:85:9f:09:e9:0d:
                    b8:63:28:15:61:cd:6d:04:fa:e8:75:2d:f5:89:ae:
                    6e:17:dc:ac:7e:37:92:e6:a1:6b:b2:26:a0:8b:f9:
                    20:b3:13:56:b7:96:19:fb:12:9e:70:4e:47:c5:22:
                    6a:d2:2c:c5:16:ae:b3:45:85:1e:41:f8:8f:25:39:
                    86:c5:51:f1:40:6b:d8:94:57:5f:d2:04:81:35:ec:
                    88:c8:38:b9:d5:62:bf:3b:9a:09:06:76:d9:10:65:
                    33:f7:3a:b1:78:86:70:70:86:62:56:fa:a8:e8:8d:
                    eb:53:5f:cb:28:99:20:b3:e0:c6:95:9f:d7:c7:e4:
                    0c:d6:df:a2:90:46:a4:dc:63:d6:47:a8:aa:f8:ea:
                    d8:79:e8:34:6f:56:79:17:d7:a5:fd:19:bd:74:c1:
                    aa:1b:50:0a:c0:63:d8:82:fa:66:a3:fe:ec:6a:71:
                    67:02:26:0c:10:19:c2:8a:06:8e:1f:59:a1:3a:11:
                    31:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A4:7E:81:CB:72:F0:2F:15:7F:DF:B6:D5:CB:58:41:96:C8:A6:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/22d0498f-1d90-48ff-92de-ab62b685b2fe/31d52068-9bcf-318d-8cc0-6bfaf8ff4806.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/22d0498f-1d90-48ff-92de-ab62b685b2fe/22d0498f-1d90-48ff-92de-ab62b685b2fe.crl

            X509v3 Authority Key Identifier:
                keyid:E0:91:0D:33:6F:BF:04:E7:9A:3A:C6:9C:CA:1D:37:77:32:03:B7:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/22d0498f-1d90-48ff-92de-ab62b685b2fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:cd:36:12:14:c6:4c:d9:4b:8b:7c:d7:5a:f2:38:00:c1:ce:
         6a:dc:36:b9:c5:93:51:d4:bf:57:32:f0:2d:12:29:4f:02:aa:
         4c:e6:c5:d0:2b:00:31:52:43:5d:82:35:fd:60:8e:c5:28:19:
         25:11:f8:e9:c9:fe:f5:de:58:db:0d:6a:55:3e:80:e7:e6:e4:
         36:63:26:c0:4b:83:79:c0:68:9a:ed:44:29:b7:ab:28:d3:25:
         5c:7b:96:9b:06:c0:d2:aa:ea:b2:53:8d:9b:4f:a3:6b:5b:17:
         6d:bb:cc:e0:96:1b:18:b3:cd:fa:81:48:02:f2:98:0d:39:32:
         85:e8:ac:a6:90:d6:ab:10:b1:24:3d:45:e3:7c:a0:40:fc:dd:
         af:5e:ae:2d:3a:b4:30:87:d8:03:43:f6:55:32:63:91:3f:c2:
         8f:c5:00:f9:a1:ae:94:95:44:78:d3:4f:f1:39:bf:27:84:1f:
         c8:99:c8:9b:20:92:46:0c:02:fd:cb:71:cc:d4:3d:0c:08:a1:
         2d:ff:e3:e2:14:db:a5:77:0e:31:50:85:a1:37:80:23:ec:2b:
         e7:78:a7:e8:b6:2d:db:a6:81:3d:36:7f:72:ff:c1:04:13:03:
         9c:50:99:1f:22:df:60:b2:7f:fe:8a:b2:68:67:ab:ad:79:6c:
         96:8f:6b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:39:02 2025 by rpki-client