Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/0a565959-e07a-37a7-8cc3-ea4859039ea6.roa
File:                     0a565959-e07a-37a7-8cc3-ea4859039ea6.roa (raw, json)
Hash identifier:          uQA+cp5r6aGuEv+KYQjXw6ikZCVQ20Mq2tGYmuFHpcw=
Subject key identifier:   7B:B5:D0:25:D2:89:A3:22:D8:60:82:B6:1F:D4:6A:95:D1:90:6F:9B
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F43285849ED4FCFE153F5387E852A6340
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/0a565959-e07a-37a7-8cc3-ea4859039ea6.roa
Signing time:             Wed 21 May 2025 13:01:04 +0000
ROA not before:           Wed 21 May 2025 13:01:04 +0000
ROA not after:            Tue 19 Aug 2025 13:01:04 +0000
asID:                     55933
IP address blocks:        198.44.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ed:4f:cf:e1:53:f5:38:7e:85:2a:63:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: May 21 13:01:04 2025 GMT
            Not After : Aug 19 13:01:04 2025 GMT
        Subject: CN=305afde6-50ce-4d2c-89df-4ab09c08fcb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5c:12:7f:36:5c:ed:9f:e8:3d:6c:68:76:bd:
                    86:d0:84:7a:5d:eb:7f:0c:5b:21:8d:6d:43:70:0d:
                    79:bc:a7:a4:ed:c3:56:5e:b6:9e:7d:75:eb:5c:f8:
                    46:1d:ce:62:4c:d2:be:03:70:03:eb:fa:72:04:85:
                    c8:5b:12:23:cc:b7:14:9c:ac:15:c7:70:38:ce:cc:
                    29:9f:7c:97:29:35:48:2f:65:5f:9b:cf:d0:ce:d5:
                    65:b7:ec:b7:74:4a:c6:0e:eb:9f:1f:91:f0:ca:bc:
                    b8:ce:42:57:ed:e5:ec:7b:dd:e0:d3:92:32:a4:6f:
                    27:c1:cf:7d:96:fb:d4:7a:ac:a2:f0:21:af:aa:fc:
                    df:bd:14:aa:20:23:42:cc:82:8a:96:ec:c9:d4:82:
                    00:b8:70:49:7a:db:fd:7c:b0:de:1f:10:53:22:b5:
                    67:ca:9f:4f:d9:64:ff:ef:00:c4:65:ee:a9:d8:22:
                    4d:b9:d4:20:4c:87:ee:5e:83:20:f9:95:a8:84:9c:
                    82:63:00:16:55:23:9a:ff:76:64:31:f0:53:c3:e5:
                    14:54:15:98:ec:48:5e:9c:9a:df:a7:f4:c3:2e:72:
                    b4:b9:d4:a3:35:bd:67:54:e2:71:3c:90:85:65:a5:
                    1c:4b:13:f5:07:b5:a4:3e:74:e2:70:d6:09:41:9d:
                    dd:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B5:D0:25:D2:89:A3:22:D8:60:82:B6:1F:D4:6A:95:D1:90:6F:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/0a565959-e07a-37a7-8cc3-ea4859039ea6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.44.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:a2:80:40:16:79:80:82:d9:48:62:a6:3c:ce:9c:b9:e1:52:
         9f:cd:d8:60:0b:6f:51:12:4b:4a:b4:da:29:24:31:78:b4:f1:
         4c:94:f7:bc:9e:b2:f7:5b:be:51:ff:b3:7f:8c:87:46:b1:97:
         ed:b3:a6:4c:97:1b:12:7a:bc:4c:67:3b:dc:6a:2e:ac:54:8e:
         84:89:c4:a8:f9:94:f6:e4:57:b7:89:a7:06:6b:7e:cf:b4:86:
         59:c2:d5:47:37:70:1b:b9:e8:04:5b:03:bb:b9:45:22:ed:d9:
         35:d5:d9:52:d1:35:ed:d4:d6:c5:70:bd:cb:6b:fd:06:1f:63:
         8b:12:d6:eb:20:a6:dd:a0:1d:07:22:96:f0:38:68:13:4d:c4:
         10:cf:7a:13:84:c7:f4:fc:d7:3d:98:fa:a1:03:48:a8:49:98:
         5d:fe:b0:5a:10:e0:40:d3:de:3a:64:c5:bf:88:8a:25:74:46:
         a5:47:ec:43:6b:a2:6a:57:b6:76:8f:9f:c3:8f:15:d8:fa:e7:
         72:9e:fe:d8:48:ee:1e:0d:94:65:12:0e:17:2f:b0:f0:89:40:
         33:2d:17:39:fe:44:9b:e0:11:4d:94:59:3c:e4:09:94:f1:51:
         48:dd:1f:39:9f:63:48:a7:1e:21:ae:7f:37:46:ab:05:73:13:
         7c:7d:16:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:21:56 2025 by rpki-client