Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/e667c5dd-d722-3d40-ba59-95b2adb19266.roa
File:                     e667c5dd-d722-3d40-ba59-95b2adb19266.roa (raw, json)
Hash identifier:          aUhbl9ZTJK/WX+5xOu51T/IuAGFRqB5nF6ZcLPHItZo=
Subject key identifier:   65:72:F5:A4:3F:67:47:7F:57:42:DC:68:51:0F:52:A3:83:6A:DD:FC
Certificate issuer:       /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
Certificate serial:       010D0C9F4328584AD93660E862416A5AFFD291C0
Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/e667c5dd-d722-3d40-ba59-95b2adb19266.roa
Signing time:             Thu 14 Aug 2025 01:00:33 +0000
ROA not before:           Thu 14 Aug 2025 01:00:33 +0000
ROA not after:            Wed 12 Nov 2025 02:00:33 +0000
asID:                     22765
IP address blocks:        72.20.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d9:36:60:e8:62:41:6a:5a:ff:d2:91:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
        Validity
            Not Before: Aug 14 01:00:33 2025 GMT
            Not After : Nov 12 02:00:33 2025 GMT
        Subject: CN=79361bd1-b302-4451-b77c-5ad64dce88e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f4:e8:6c:a4:ae:e0:8d:b1:0e:b0:d4:03:4f:
                    29:d3:d1:fd:0f:22:ed:a5:d9:99:74:0b:46:32:26:
                    16:25:e7:e8:d8:aa:50:1d:a8:48:2a:97:11:5f:08:
                    ee:bb:a9:96:5d:1b:94:38:9d:16:78:93:2e:dc:09:
                    df:61:43:87:31:8d:b1:0d:00:a0:45:77:66:d9:ea:
                    27:f3:e2:4d:b1:7b:66:b6:0c:b0:86:18:ca:ce:54:
                    d6:03:6e:ed:ac:44:5d:5f:5d:1b:7f:bf:c5:f4:f0:
                    74:35:cc:0f:26:52:10:96:f5:c1:f7:f3:e1:3e:7c:
                    c4:a9:f4:2b:48:02:84:2f:64:da:f0:b4:46:99:25:
                    fa:4f:ce:7d:10:5a:be:ee:26:40:7a:9a:8d:58:28:
                    59:b5:f1:7f:63:fc:45:cb:6f:6e:a6:c9:7e:e0:ec:
                    22:a1:2a:a9:8b:09:3f:96:95:49:d2:ab:34:30:98:
                    b9:b5:68:c6:66:a4:05:da:a9:9e:9d:b7:09:c2:b2:
                    db:ca:82:e7:10:29:e0:d0:f3:bc:4b:d5:95:a1:3c:
                    3e:28:76:66:82:07:3f:34:74:bc:cd:12:9d:b0:a8:
                    c2:ae:e6:6b:f3:ca:a4:ef:27:2c:f5:46:96:89:2d:
                    db:69:39:a7:70:ba:fd:6f:1b:05:64:eb:fd:0a:c9:
                    3b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:72:F5:A4:3F:67:47:7F:57:42:DC:68:51:0F:52:A3:83:6A:DD:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/e667c5dd-d722-3d40-ba59-95b2adb19266.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl

            X509v3 Authority Key Identifier:
                keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.20.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:e7:62:59:41:63:72:49:b0:73:25:ea:3f:59:a9:16:c0:85:
         56:64:5e:2f:60:86:cd:09:0e:24:0d:1e:64:de:79:c6:6d:9e:
         4c:c1:92:93:1b:eb:4b:1b:a3:be:24:06:ea:1f:4d:98:78:b8:
         60:11:60:ae:db:6c:d0:81:2c:04:29:19:fc:61:50:30:00:4a:
         61:ba:19:31:0d:fd:1b:30:90:22:3a:34:03:d3:75:dd:cd:5c:
         18:79:80:03:38:ba:5f:aa:4c:e5:93:79:88:a5:3d:53:97:89:
         7e:d1:5e:f4:5d:a9:44:69:d6:a0:d0:62:ae:ab:09:d0:0b:fb:
         be:35:71:de:e3:24:7a:eb:d9:25:16:83:8b:90:83:a4:4c:4a:
         99:ea:45:f9:b8:62:bc:80:a1:1e:31:7a:50:9e:36:15:dd:5d:
         43:7c:36:bd:d4:21:51:69:75:5a:1b:3f:96:6b:f6:bc:90:7e:
         84:78:da:99:77:49:6b:52:1d:7c:89:2d:f7:50:56:2b:f6:e0:
         87:9f:ba:9a:45:d2:09:fe:2f:a5:10:2e:e3:ea:ee:f6:78:88:
         7c:81:76:83:35:fe:cc:45:8c:21:73:f4:03:aa:43:88:28:b9:
         3f:19:6a:9e:4d:4a:39:a2:6f:0f:0e:cb:27:27:68:5e:00:6d:
         75:94:33:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:32:00 2025 by rpki-client