Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/56682e9a-4b9f-3d5d-aae7-b0a832d3f216.roa
File:                     56682e9a-4b9f-3d5d-aae7-b0a832d3f216.roa (raw, json)
Hash identifier:          NYJoDi04yA6BGKP2xzLmpWyAWVUQAYiJZxDPNtzmvMw=
Subject key identifier:   ED:39:FE:16:0F:61:72:0A:E4:24:FC:52:69:ED:53:E2:94:EE:A4:48
Certificate issuer:       /CN=57202e8d-d671-4fe3-bfa9-605e2ca32aa5
Certificate serial:       010D0C9F4328584AF0F1363BB7DFC2AB8071D1A8
Authority key identifier: 0A:70:00:4A:1A:A0:5C:A6:C4:C7:35:57:D7:4D:96:DF:DD:09:4C:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/56682e9a-4b9f-3d5d-aae7-b0a832d3f216.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     7311
IP address blocks:        216.126.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:36:3b:b7:df:c2:ab:80:71:d1:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57202e8d-d671-4fe3-bfa9-605e2ca32aa5
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=d8af14f6-251c-470e-833b-a198e55f1666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d0:78:e4:02:d8:a1:4e:51:93:5d:b9:43:c2:
                    60:d7:f3:f9:f5:fb:94:de:b3:ee:f0:82:9a:8e:3b:
                    73:ff:bc:1e:8d:f0:e3:55:ca:41:f4:9a:f3:af:6d:
                    5b:1e:3e:9e:08:4f:fd:cd:2d:b9:7d:5e:42:a7:c9:
                    dc:50:b1:18:6e:f8:54:8c:6e:71:29:7b:09:d3:61:
                    33:25:82:4f:66:e3:ca:6d:d3:a5:6f:7d:f8:6b:68:
                    3b:a6:93:63:85:8b:22:7d:3e:ff:54:9e:87:25:fe:
                    75:4b:ef:fa:0e:6b:b8:fb:5f:bc:e5:93:b4:f4:c0:
                    1f:7f:67:f2:7b:d4:55:bd:f9:66:4f:97:ce:cb:6d:
                    cc:c5:92:f4:4f:6c:11:46:2e:bb:07:ae:12:8c:82:
                    3b:f5:0c:97:77:28:3e:41:bc:c0:b1:4d:27:7d:67:
                    c7:75:6c:78:17:8f:60:e7:57:84:f0:78:f3:ef:d4:
                    e5:b5:70:24:74:6f:5c:7d:b2:9a:52:da:ab:a3:bd:
                    54:0c:3c:d6:23:67:bc:12:08:5c:db:cc:af:1c:10:
                    e1:a4:0f:0b:58:e4:84:b3:6b:ff:70:38:74:26:72:
                    da:4b:da:d5:d1:7e:c9:05:b6:51:3c:8a:00:d8:ec:
                    f8:29:a8:9b:3b:d9:0c:3a:30:e9:c3:8d:be:40:a8:
                    02:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:39:FE:16:0F:61:72:0A:E4:24:FC:52:69:ED:53:E2:94:EE:A4:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/56682e9a-4b9f-3d5d-aae7-b0a832d3f216.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.crl

            X509v3 Authority Key Identifier:
                keyid:0A:70:00:4A:1A:A0:5C:A6:C4:C7:35:57:D7:4D:96:DF:DD:09:4C:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.126.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:4b:2d:c8:2a:60:46:d0:a4:fb:39:c1:d4:54:98:89:4a:50:
         e0:9a:6d:ed:d3:e3:b4:b7:89:d0:72:01:c8:b7:bc:f6:ee:71:
         ba:10:e5:a0:2e:96:41:85:ff:d4:a7:22:02:7f:a4:73:15:21:
         cd:a0:ca:e8:e9:7f:d9:02:1e:d6:d7:ab:fb:ae:8e:70:d3:02:
         f8:32:a1:6a:96:82:ef:c6:48:6f:30:54:2d:73:3c:ff:e4:c3:
         9c:40:54:3d:cb:d8:0f:7f:3b:2c:da:0c:cb:fe:3d:26:4d:b5:
         47:0e:b6:10:01:dd:6b:d5:1f:8e:30:28:14:f7:64:be:0c:f1:
         c0:ad:df:3b:33:49:67:7e:54:12:44:ed:26:58:57:3b:e9:9f:
         77:70:bb:53:ff:09:8b:36:26:3b:0c:0c:4f:1d:26:71:62:80:
         67:c0:ba:8b:58:cf:fa:53:c4:5f:00:91:03:f9:8f:e6:39:44:
         f8:68:fb:23:f8:bf:1d:60:49:71:34:0a:42:8f:11:7f:12:47:
         0b:02:e2:34:19:14:b0:2e:7e:28:98:b6:65:80:4e:e3:db:fe:
         d3:d6:2b:da:10:5f:e7:d5:63:ef:ac:8b:9c:ae:e1:2b:5a:b9:
         86:fa:d5:46:78:01:80:b3:df:e7:b3:88:04:6a:93:29:fc:32:
         70:01:41:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:36:26 2025 by rpki-client