Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b7a1012f-2426-3353-83bc-5359ac98f38a.roa
File:                     b7a1012f-2426-3353-83bc-5359ac98f38a.roa (raw, json)
Hash identifier:          HATjrjBaxwPJXk143E6/uk3Q7sFowQnYTqmxViZZm54=
Subject key identifier:   97:84:03:47:6C:A9:D3:6B:0B:9F:6D:88:10:00:B5:70:3C:63:C0:1A
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584972E2E9CA1423AF888117FC00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b7a1012f-2426-3353-83bc-5359ac98f38a.roa
Signing time:             Mon 07 Apr 2025 16:33:11 +0000
ROA not before:           Mon 07 Apr 2025 16:33:11 +0000
ROA not after:            Sun 06 Jul 2025 16:33:11 +0000
asID:                     81
IP address blocks:        192.154.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:e2:e9:ca:14:23:af:88:81:17:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Apr  7 16:33:11 2025 GMT
            Not After : Jul  6 16:33:11 2025 GMT
        Subject: CN=fb918a83-adcf-4774-9579-dbcf3328a69b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:2d:67:e4:12:9d:d1:16:4c:6f:e1:f8:31:30:
                    73:32:db:ae:5a:6a:58:8a:42:b8:b7:6f:31:4a:f6:
                    73:e9:cb:2f:a5:d2:6e:ff:28:d5:59:23:5c:b5:26:
                    0e:3c:0f:52:39:9a:ca:04:e5:b9:13:a4:a2:38:c4:
                    ea:25:d4:4d:7b:01:37:af:2e:33:34:fa:ca:f5:50:
                    c8:8d:b9:b3:2c:4c:b8:b8:43:ae:1e:70:9e:2e:0b:
                    0b:53:7d:a4:1c:3f:d6:76:67:c1:da:52:0f:39:4f:
                    32:0e:8c:b9:5d:a6:24:ac:9a:1f:ef:a5:1c:a3:02:
                    2a:78:8b:ea:49:cb:b5:f7:63:90:ab:6a:bd:e6:4f:
                    0b:08:45:78:49:b6:64:71:95:d5:f5:36:dd:06:62:
                    3f:b8:83:ca:c9:f1:3f:44:ac:e6:d6:aa:e8:51:10:
                    c3:5a:02:ef:cd:b5:8c:e4:2d:51:2c:49:98:51:40:
                    35:08:58:86:80:ea:d1:8e:60:4c:e8:82:eb:5f:48:
                    70:de:fd:57:66:d0:8d:55:fc:95:dc:85:ec:78:4a:
                    cf:b4:34:10:8f:71:87:09:cb:58:72:77:70:5e:64:
                    53:d2:23:09:9a:b1:ca:db:2b:d0:d8:e4:57:03:07:
                    cf:e3:7a:22:c4:4f:0e:33:f7:cd:89:87:de:51:9a:
                    c4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:84:03:47:6C:A9:D3:6B:0B:9F:6D:88:10:00:B5:70:3C:63:C0:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b7a1012f-2426-3353-83bc-5359ac98f38a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.154.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:72:bf:c4:d6:b1:cb:f9:da:dd:ca:18:75:f5:35:14:71:6f:
         c5:23:22:41:45:d3:ee:03:13:6e:53:c9:23:6f:75:02:e0:a3:
         8e:4b:13:f1:50:96:d4:8c:88:20:44:e2:a2:09:05:b3:68:69:
         86:cc:41:28:fa:13:3f:6a:90:49:a0:84:da:c4:04:89:6a:b8:
         e5:9f:ac:9d:08:07:23:fb:71:68:50:fc:8d:36:3d:9c:1e:52:
         18:d9:86:8e:21:a3:9e:95:15:35:fc:a0:ae:bb:b6:1c:ba:91:
         7f:05:3b:d7:b2:3c:e2:bf:29:65:dd:f8:58:49:d8:a7:76:b3:
         7f:6d:66:dd:18:98:5f:7c:23:8f:95:71:df:dc:e1:fb:9e:ab:
         45:bc:a7:81:38:4a:3a:6a:80:32:ff:ca:5d:af:7d:18:68:64:
         b1:63:e9:9b:5e:96:22:04:e1:83:17:1b:81:12:89:20:e4:cb:
         33:ec:f3:28:76:75:af:61:f7:23:71:eb:b2:9f:41:f3:17:86:
         b2:59:08:f4:c0:84:71:f1:38:ce:34:f1:3d:c6:4b:74:f0:6f:
         62:c9:af:d8:fa:53:ef:9c:57:7e:9c:91:ed:65:79:a5:29:04:
         ee:4a:98:6b:de:18:84:d6:2e:e3:d5:50:32:62:ce:b1:9a:fb:
         ab:46:54:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:07:26 2025 by rpki-client