Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/137d13b4-f566-472a-a0e3-33b1db18e660/deb82444-9814-3ad1-89d4-94623846e812.roa
File:                     deb82444-9814-3ad1-89d4-94623846e812.roa (raw, json)
Hash identifier:          U8kQu1puus7Yd1TD5iXgJ4uVYX3qrs0Cioyk91UYDNk=
Subject key identifier:   59:28:74:00:9F:E9:75:7D:30:AC:AB:0B:02:34:EE:46:26:5E:59:14
Certificate issuer:       /CN=137d13b4-f566-472a-a0e3-33b1db18e660
Certificate serial:       010D0C9F4328584AD5065F94686C98982DB12240
Authority key identifier: A7:FE:83:1A:7E:D1:50:1E:BB:13:21:DB:88:04:6C:CE:A5:46:64:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/137d13b4-f566-472a-a0e3-33b1db18e660.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/137d13b4-f566-472a-a0e3-33b1db18e660/deb82444-9814-3ad1-89d4-94623846e812.roa
Signing time:             Tue 12 Aug 2025 13:00:43 +0000
ROA not before:           Tue 12 Aug 2025 13:00:43 +0000
ROA not after:            Mon 10 Nov 2025 14:00:43 +0000
asID:                     5664
IP address blocks:        142.55.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/137d13b4-f566-472a-a0e3-33b1db18e660/137d13b4-f566-472a-a0e3-33b1db18e660.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/137d13b4-f566-472a-a0e3-33b1db18e660/137d13b4-f566-472a-a0e3-33b1db18e660.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/137d13b4-f566-472a-a0e3-33b1db18e660.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d5:06:5f:94:68:6c:98:98:2d:b1:22:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137d13b4-f566-472a-a0e3-33b1db18e660
        Validity
            Not Before: Aug 12 13:00:43 2025 GMT
            Not After : Nov 10 14:00:43 2025 GMT
        Subject: CN=5bf72adf-da5e-4fec-8937-4144e3b09a39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8c:58:13:39:98:bc:e1:e8:af:1c:c3:96:78:
                    d0:82:77:c0:e8:b5:48:06:97:ef:02:65:7f:5b:e7:
                    3d:4d:1f:02:f2:3b:da:18:16:94:f6:ed:a5:77:5b:
                    c0:19:f3:59:c3:b0:9b:50:ac:09:b3:d9:af:2e:e9:
                    7f:55:d4:29:73:ba:ca:4a:dd:7c:ec:9d:af:5f:49:
                    0f:54:b4:88:f7:e5:91:23:63:2b:3f:a0:ed:8f:16:
                    f3:70:d2:a3:d0:d5:6f:09:06:a4:5c:64:41:43:d6:
                    d0:d2:2a:b5:30:b7:ad:7b:29:3e:90:14:4c:22:03:
                    57:b0:48:60:d0:b3:cb:af:8e:9a:ac:56:01:43:b2:
                    04:64:49:93:1e:c2:26:6d:43:0c:95:7f:6e:e9:ef:
                    e4:f5:c1:4a:15:39:75:3c:5f:29:93:1c:4d:f9:54:
                    b3:2e:b8:34:3a:70:44:19:8f:41:24:e4:14:9d:4a:
                    78:63:cb:39:40:92:a7:fb:af:f1:3e:a9:ff:02:92:
                    be:6e:1e:ce:c5:05:4a:e2:1b:3a:45:91:f0:c4:e8:
                    3e:54:ca:64:74:f9:7d:fe:26:11:31:95:e5:8f:ec:
                    e9:3f:27:54:bc:e8:45:c4:05:11:ae:24:d5:14:27:
                    f2:44:b1:2b:91:2a:d5:0e:9e:cc:88:78:01:e7:22:
                    9a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:28:74:00:9F:E9:75:7D:30:AC:AB:0B:02:34:EE:46:26:5E:59:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/137d13b4-f566-472a-a0e3-33b1db18e660/deb82444-9814-3ad1-89d4-94623846e812.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/137d13b4-f566-472a-a0e3-33b1db18e660/137d13b4-f566-472a-a0e3-33b1db18e660.crl

            X509v3 Authority Key Identifier:
                keyid:A7:FE:83:1A:7E:D1:50:1E:BB:13:21:DB:88:04:6C:CE:A5:46:64:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/137d13b4-f566-472a-a0e3-33b1db18e660.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.55.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:f4:5b:7a:f5:58:78:b5:af:14:59:c9:81:62:30:11:0a:ee:
         d3:b4:8e:c5:6b:8e:fc:40:bd:e1:89:ef:3e:84:06:c4:ac:41:
         19:2b:29:d1:b5:e7:db:38:b6:00:eb:c7:66:67:3e:4f:8f:d7:
         ca:2a:98:6c:21:11:83:8e:75:5d:06:2c:d7:85:ac:aa:cd:4c:
         cc:af:e7:c6:ac:b7:61:31:57:11:8b:cf:34:35:6a:55:58:b2:
         4f:dc:10:88:08:86:58:a8:1a:91:c9:74:b5:d3:17:e3:b7:5c:
         79:c0:cb:8b:cb:ec:66:59:ea:a5:dc:1a:ba:55:a4:e0:d6:f2:
         16:5f:f9:68:2f:5e:75:99:f1:a5:55:71:0f:7b:91:17:db:91:
         b8:b5:d5:a6:16:94:7f:da:29:53:41:25:02:b7:22:a4:b0:cb:
         32:e5:27:5c:b1:5a:1a:20:d6:70:4f:4e:88:eb:72:f3:2a:f3:
         39:91:45:03:3b:2c:f5:96:f0:65:10:b9:c7:f2:ab:65:28:d9:
         c7:ae:14:ae:b8:77:d6:9e:c6:42:03:13:8e:8e:64:1b:4e:a5:
         2e:f8:96:69:15:20:0f:a5:ab:38:91:40:0c:41:06:aa:e5:82:
         da:04:72:a5:d8:8f:a6:16:7d:e3:4e:47:7e:5d:58:f1:a5:fb:
         78:16:7d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:39:44 2025 by rpki-client