Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/6c372e93-c67b-3e1e-a6f5-a68504c4f532.roa
File:                     6c372e93-c67b-3e1e-a6f5-a68504c4f532.roa (raw, json)
Hash identifier:          7ina57BKvaxFbUljeyZ5FkOR8L1xBxXZ5TmeB5Fcn2k=
Subject key identifier:   B1:13:6F:A4:1D:90:A8:C4:82:A5:D7:BD:F1:E8:E2:DA:93:B4:D2:0D
Certificate issuer:       /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
Certificate serial:       010D0C9F4328584AD93660FC79D9C6530A77FA00
Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/6c372e93-c67b-3e1e-a6f5-a68504c4f532.roa
Signing time:             Thu 14 Aug 2025 01:00:33 +0000
ROA not before:           Thu 14 Aug 2025 01:00:33 +0000
ROA not after:            Wed 12 Nov 2025 02:00:33 +0000
asID:                     22765
IP address blocks:        72.20.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d9:36:60:fc:79:d9:c6:53:0a:77:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
        Validity
            Not Before: Aug 14 01:00:33 2025 GMT
            Not After : Nov 12 02:00:33 2025 GMT
        Subject: CN=dfc2583e-ae8a-414b-b085-42f7f498d51e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:00:d0:91:1d:60:01:0b:84:87:b5:4b:37:34:
                    b1:c1:d0:f6:b3:8a:e8:26:69:46:36:97:d1:28:93:
                    1e:4c:c4:88:97:61:b9:13:37:a5:18:fa:4e:24:b1:
                    fc:7d:92:50:ca:e3:34:61:2d:3f:f6:46:bc:21:23:
                    57:cb:d3:65:0e:7f:0a:f7:dd:3c:1d:bd:0a:b4:50:
                    44:28:0d:c1:38:97:5e:cc:81:16:59:4b:dd:7b:c8:
                    a2:31:cf:59:0e:07:10:72:97:5f:d6:b7:0d:b4:dc:
                    0f:d7:96:10:0a:e2:48:c8:a7:04:60:16:f3:f5:23:
                    e0:d8:d7:74:db:a9:d8:7d:66:88:1d:af:d0:e7:d3:
                    82:3f:3f:33:be:61:46:24:5e:88:cf:50:b0:9d:44:
                    48:7d:ab:2a:11:57:cb:83:20:47:d0:97:94:eb:b8:
                    71:ab:a5:a0:8f:56:fd:57:80:aa:50:64:6c:fd:fa:
                    36:0d:c7:77:70:5b:bb:04:08:50:fb:72:a7:5d:89:
                    1e:61:76:f1:fd:f4:d0:d0:d0:fc:97:a3:b3:c4:e4:
                    28:be:51:31:19:25:a7:66:1b:ab:fc:fb:0d:3b:23:
                    ef:06:8d:27:c5:2e:79:00:c9:62:40:a8:0e:fa:2e:
                    98:86:90:af:2d:b1:e6:01:36:85:3c:5c:cb:ea:fe:
                    77:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:13:6F:A4:1D:90:A8:C4:82:A5:D7:BD:F1:E8:E2:DA:93:B4:D2:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/6c372e93-c67b-3e1e-a6f5-a68504c4f532.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl

            X509v3 Authority Key Identifier:
                keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.20.202.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:3c:9c:51:d7:64:6d:b3:e4:a0:59:06:59:39:1d:10:85:5c:
         47:f4:70:31:59:80:e1:1c:74:df:cb:8e:63:31:c2:67:70:ff:
         4c:cb:bd:b3:a6:59:33:d6:53:5b:5d:1a:e9:2b:63:6b:5d:cb:
         89:1b:67:5c:3e:cf:5e:91:2a:45:16:7a:3c:ab:47:82:8e:81:
         af:93:0b:63:d4:2c:a9:54:d3:f8:88:48:fa:84:32:f5:d0:d2:
         51:0f:18:8d:f2:e6:c2:e6:01:fb:d7:33:16:b9:65:f4:10:1b:
         17:3d:e6:1e:69:1f:ed:32:fd:01:ba:eb:1f:fa:5a:77:bc:ed:
         79:58:b0:e5:af:43:c7:89:f9:40:d7:39:8d:69:9e:db:57:f0:
         df:0c:a4:0d:66:11:fa:64:53:ca:80:82:10:5e:5b:86:b4:0d:
         18:7a:67:4e:44:47:7a:e6:46:6b:1c:36:03:d6:76:e1:98:a1:
         32:f0:56:06:6f:50:8d:89:33:82:bb:1e:1a:bf:b0:10:80:5b:
         ea:fb:9d:49:7b:3a:fc:16:06:28:86:9b:7a:46:17:70:41:ca:
         db:01:d2:bd:5f:e2:73:a5:39:78:c2:5f:f7:83:94:a4:21:76:
         44:68:4c:ee:f2:07:96:c4:d0:37:16:6c:5f:32:c1:43:05:37:
         ba:ba:d4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:25:36 2025 by rpki-client