Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/e6965540-cbd0-3930-b638-a04886e69eac.roa
File:                     e6965540-cbd0-3930-b638-a04886e69eac.roa (raw, json)
Hash identifier:          ffGr4uxp8vkCiGpi9+hqxsLsQDU63DeqGcWpnRiMg1g=
Subject key identifier:   9E:A2:F7:A4:ED:40:97:52:0A:4F:83:1A:A6:05:8E:F5:8B:BF:72:2E
Certificate issuer:       /CN=704a761f-b71a-4fa2-b0e7-db5278e23dc3
Certificate serial:       010D0C9F4328584AECC12EE209652CA292C34D80
Authority key identifier: 52:2D:D6:6B:87:05:06:9B:E2:44:3E:8D:41:CB:B5:37:CC:38:31:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/e6965540-cbd0-3930-b638-a04886e69eac.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     4983
IP address blocks:        192.55.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:2e:e2:09:65:2c:a2:92:c3:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=704a761f-b71a-4fa2-b0e7-db5278e23dc3
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=1001c3d3-1673-4e7d-9e0a-ea6856a3a938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ed:15:cb:21:c4:cf:52:fc:6d:eb:31:0b:a5:
                    47:f4:8f:f4:62:7a:ef:92:65:13:84:4d:aa:97:6e:
                    b1:41:e3:68:a9:e0:3d:74:f1:08:a1:44:1c:55:2b:
                    7d:bb:5d:ad:54:fb:20:42:ed:91:49:e2:26:01:c3:
                    57:c0:6d:b1:0e:5d:15:8b:ee:41:89:ef:6a:27:15:
                    d4:dc:a1:65:07:9d:e4:aa:ac:6e:8a:d6:85:09:68:
                    cf:18:a6:27:b5:c2:c4:71:44:32:b4:a2:88:75:0b:
                    9f:6b:b0:c7:aa:ac:fb:8c:09:8d:c8:d5:95:bb:08:
                    9d:c8:6b:fe:58:8c:b8:51:23:17:b2:8c:a8:ec:aa:
                    76:ac:63:80:0e:d9:08:50:01:8b:36:ab:73:53:f6:
                    7d:ae:a2:0e:7f:ad:b4:ec:58:79:87:fb:3f:d9:27:
                    85:d1:11:d6:66:96:66:5a:07:ee:08:ce:df:9f:37:
                    c6:af:d9:f7:38:5f:88:d8:c9:de:1e:61:27:7a:b8:
                    72:ad:c0:df:0d:14:e2:81:0b:b3:e7:17:34:fe:f8:
                    20:3c:7a:6e:fe:37:5f:2f:c4:19:7e:eb:65:96:de:
                    0e:0c:1a:7d:06:59:2c:8b:d4:25:b2:c8:58:f8:69:
                    0e:54:40:d8:a3:a8:d6:4c:af:65:12:3c:db:90:b3:
                    b8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A2:F7:A4:ED:40:97:52:0A:4F:83:1A:A6:05:8E:F5:8B:BF:72:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/e6965540-cbd0-3930-b638-a04886e69eac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.crl

            X509v3 Authority Key Identifier:
                keyid:52:2D:D6:6B:87:05:06:9B:E2:44:3E:8D:41:CB:B5:37:CC:38:31:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:b2:a6:11:90:7a:d7:29:72:ea:59:59:d9:7e:a8:ba:17:bc:
         31:34:84:10:70:ad:ab:91:51:12:fa:73:65:10:5b:e9:60:ec:
         47:bf:c0:4a:b9:d4:70:ab:cc:3a:04:3e:47:5f:7d:1f:97:bf:
         34:78:38:da:06:03:35:25:84:b2:2c:52:0a:cf:c1:fd:24:27:
         43:99:39:07:f6:00:da:a7:1a:fc:79:75:4a:9d:d4:1f:06:14:
         93:44:0e:91:c5:26:30:38:d5:13:3f:57:e1:15:61:af:64:58:
         75:48:2a:e0:dd:ef:d3:07:4f:d9:4f:1a:53:27:05:21:74:21:
         6a:d3:9a:8c:b7:6f:c7:8c:e3:58:17:42:0f:61:52:fe:4e:02:
         09:f5:3e:24:9f:39:0f:5d:dc:2b:34:b1:f2:71:45:1d:18:52:
         eb:74:6d:ce:d3:18:bd:9b:1b:92:3d:39:f4:14:40:9c:be:da:
         58:d4:5c:24:c3:84:aa:97:72:60:62:22:d5:86:15:e3:d0:38:
         6f:b1:5f:43:a2:43:c6:9e:94:9e:71:d5:b8:47:c9:37:d9:9d:
         0b:a2:ea:3b:b7:27:35:40:eb:b1:4c:25:39:83:5f:a6:45:92:
         ff:22:15:81:23:de:20:fe:2f:0c:d4:be:d1:3d:9d:9e:42:61:
         00:8c:aa:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:45:10 2025 by rpki-client