Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/e3797bcd-705e-363c-b104-8d569e2486fb.roa
File:                     e3797bcd-705e-363c-b104-8d569e2486fb.roa (raw, json)
Hash identifier:          THd7sJ1PWOiAn/45LToTwfMCa+AhfK4ksY0/lLa6qc8=
Subject key identifier:   29:52:4B:83:AB:58:15:9E:F7:D1:A1:A9:A1:E6:7D:5A:F5:AA:94:84
Certificate issuer:       /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
Certificate serial:       010D0C9F4328584A4DA050CFC55C337460CABD40
Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/e3797bcd-705e-363c-b104-8d569e2486fb.roa
Signing time:             Wed 25 Jun 2025 01:00:49 +0000
ROA not before:           Wed 25 Jun 2025 01:00:49 +0000
ROA not after:            Tue 23 Sep 2025 01:00:49 +0000
asID:                     36691
IP address blocks:        192.55.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4d:a0:50:cf:c5:5c:33:74:60:ca:bd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
        Validity
            Not Before: Jun 25 01:00:49 2025 GMT
            Not After : Sep 23 01:00:49 2025 GMT
        Subject: CN=8b2e0688-0e99-40e4-9095-9290541a36c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ab:4b:f5:a8:74:2e:84:9c:b3:21:58:61:09:
                    43:92:ee:8c:46:e0:0a:7c:48:85:29:1b:7f:f3:04:
                    52:e9:be:fb:5a:10:7e:09:3f:db:c2:49:7c:6d:e6:
                    00:38:5b:18:82:fd:66:0b:8a:73:6b:e1:26:7a:01:
                    ff:2a:b9:58:04:cf:59:b1:ac:61:2d:c3:b8:32:54:
                    f0:8b:a2:1d:46:e7:c5:41:86:19:b9:5a:34:7b:b0:
                    d2:e2:0f:3b:ba:57:a5:ed:b6:56:2c:2e:9d:7f:51:
                    41:cc:f9:f9:02:b8:24:27:d9:23:a8:68:72:df:83:
                    0b:32:9a:09:ab:45:d6:30:87:ac:50:64:03:d6:d4:
                    8e:90:48:ff:82:ab:5d:23:16:8b:4c:1f:0f:14:9a:
                    13:f3:16:68:78:04:49:dc:40:50:0a:10:28:47:9d:
                    31:dd:2f:c7:2d:29:06:aa:c8:35:a8:ff:6b:67:f6:
                    16:af:17:eb:1f:e7:17:03:bb:74:ad:7e:c0:87:bb:
                    01:3d:e6:ae:06:7c:91:ff:9e:f4:e1:a8:65:82:74:
                    15:2e:eb:56:7d:c7:3d:ea:79:e0:7b:1d:53:cd:19:
                    8b:f2:df:af:07:f1:c7:5e:33:48:3a:bf:57:81:dd:
                    3a:f5:9a:03:53:25:f9:64:f4:f8:fa:e5:66:6b:1e:
                    a7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:52:4B:83:AB:58:15:9E:F7:D1:A1:A9:A1:E6:7D:5A:F5:AA:94:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/e3797bcd-705e-363c-b104-8d569e2486fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl

            X509v3 Authority Key Identifier:
                keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:eb:dc:ca:3b:00:1b:3c:19:fd:f4:d8:60:d1:da:e8:f9:89:
         4a:3a:b5:6a:1a:36:89:37:e7:cc:df:db:20:d3:91:a5:fb:b3:
         3e:be:08:6d:b6:7e:0b:31:ab:d2:97:e5:4b:9d:84:74:8d:75:
         2d:c7:12:23:d2:fa:59:53:8d:0e:8d:62:4c:da:b8:37:d4:c9:
         a3:ce:9c:5f:82:c8:cc:7b:0c:34:3e:ca:fd:fd:ba:cc:4b:b5:
         6e:fb:ba:79:35:e5:fb:8f:59:e2:5f:9f:e8:05:87:f2:40:c5:
         82:6a:5c:9c:28:5b:5a:2c:c7:98:f0:14:fb:e2:e5:13:7f:ef:
         c3:60:7e:7c:bc:a1:cd:92:d4:1f:38:42:43:86:f1:1a:02:33:
         13:43:77:38:af:85:ab:ed:ec:86:9a:f9:25:e3:4b:69:e3:93:
         9b:ea:2a:af:2e:a0:e6:e4:68:e7:c4:f4:2a:a5:55:22:e4:24:
         8b:7e:45:6a:01:7f:71:04:ba:7d:4f:90:6f:78:89:11:7a:e6:
         ce:a6:f3:c4:8a:a1:2f:18:fb:df:b5:db:fa:aa:e8:9a:f1:76:
         e4:e9:41:f1:00:97:04:cc:92:04:49:b6:89:f5:a2:94:7e:bf:
         4c:e5:6e:46:a0:15:91:db:2a:1a:a4:e9:23:e4:85:6a:ed:d7:
         21:6c:5c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:48:44 2025 by rpki-client