Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/307683f0-b7f5-4fe1-b163-a8a0ead77634/55d3f7ca-b647-37f0-ba02-305fbfc48784.roa
File:                     55d3f7ca-b647-37f0-ba02-305fbfc48784.roa (raw, json)
Hash identifier:          67vXltqutMCbko6ljIsKkzpjNB10n/tjYOP16gFjsv0=
Subject key identifier:   EB:96:4A:91:83:50:86:C8:FE:1B:C5:13:62:E2:44:48:1E:D8:D6:23
Certificate issuer:       /CN=307683f0-b7f5-4fe1-b163-a8a0ead77634
Certificate serial:       010D0C9F4328584A52A2E376F543F0336E9E6180
Authority key identifier: 80:9D:6A:96:C9:F0:AE:5E:50:6B:DA:BA:D8:9C:21:B8:1D:81:CB:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/307683f0-b7f5-4fe1-b163-a8a0ead77634.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/307683f0-b7f5-4fe1-b163-a8a0ead77634/55d3f7ca-b647-37f0-ba02-305fbfc48784.roa
Signing time:             Thu 26 Jun 2025 20:05:15 +0000
ROA not before:           Thu 26 Jun 2025 20:05:15 +0000
ROA not after:            Wed 24 Sep 2025 20:05:15 +0000
asID:                     15083
IP address blocks:        173.214.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/307683f0-b7f5-4fe1-b163-a8a0ead77634/307683f0-b7f5-4fe1-b163-a8a0ead77634.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/307683f0-b7f5-4fe1-b163-a8a0ead77634/307683f0-b7f5-4fe1-b163-a8a0ead77634.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/307683f0-b7f5-4fe1-b163-a8a0ead77634.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:52:a2:e3:76:f5:43:f0:33:6e:9e:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=307683f0-b7f5-4fe1-b163-a8a0ead77634
        Validity
            Not Before: Jun 26 20:05:15 2025 GMT
            Not After : Sep 24 20:05:15 2025 GMT
        Subject: CN=3e8eaf8f-8a89-4fd7-b667-c9d4b7f430d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:31:f3:45:bf:3d:d7:7a:97:90:5e:ad:db:c7:
                    ec:ba:18:26:d9:f1:38:7d:f9:3f:99:2a:04:86:90:
                    e4:06:3e:9f:e8:c7:e9:d0:7e:64:a4:41:e9:b4:2f:
                    d3:6f:12:bc:62:d9:67:77:5d:15:6b:3e:99:8d:49:
                    1c:b3:17:12:4b:9b:75:82:d9:fb:9c:b7:4c:66:39:
                    df:32:e5:db:c2:78:ae:60:88:45:ec:e8:38:4f:cd:
                    11:e2:33:bd:7d:94:07:b3:c0:fe:a1:a4:db:53:4e:
                    09:59:4f:f3:c7:5b:69:4e:e1:6b:50:1f:f5:c4:58:
                    fb:cb:7b:64:f4:61:f3:89:78:90:31:da:eb:05:ef:
                    00:31:15:35:ce:30:77:26:f7:2f:18:3a:c2:12:30:
                    4c:69:cf:28:f2:00:12:dc:83:75:40:ef:6a:f4:bb:
                    37:47:b8:31:87:d0:31:a1:d8:aa:62:9a:8b:22:34:
                    e8:b3:e8:74:71:ef:ad:19:a4:ef:e0:2a:0b:d9:c3:
                    c1:f2:23:26:9f:c6:32:54:c1:7a:6e:c4:f1:1d:af:
                    bc:1d:1b:d2:fb:84:38:cd:c3:c9:99:e8:a5:11:c9:
                    2d:cf:ed:62:94:d6:20:63:d5:8e:76:1c:dd:a7:e4:
                    2c:05:cc:26:48:0c:b3:25:45:20:eb:27:41:90:c3:
                    dc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:96:4A:91:83:50:86:C8:FE:1B:C5:13:62:E2:44:48:1E:D8:D6:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/307683f0-b7f5-4fe1-b163-a8a0ead77634/55d3f7ca-b647-37f0-ba02-305fbfc48784.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/307683f0-b7f5-4fe1-b163-a8a0ead77634/307683f0-b7f5-4fe1-b163-a8a0ead77634.crl

            X509v3 Authority Key Identifier:
                keyid:80:9D:6A:96:C9:F0:AE:5E:50:6B:DA:BA:D8:9C:21:B8:1D:81:CB:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/307683f0-b7f5-4fe1-b163-a8a0ead77634.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.214.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:a8:59:67:12:d5:69:a9:f3:48:5e:fc:43:12:5d:76:2a:ba:
         83:58:14:d8:62:d7:01:10:44:f1:55:e2:20:e0:5a:82:96:6f:
         41:4a:ba:ba:d1:4c:0c:0f:e6:9d:1b:56:85:f9:3f:51:61:f5:
         69:f3:95:0c:68:10:56:61:9e:75:b8:31:a0:75:34:60:f1:60:
         22:70:21:71:5e:aa:fc:9c:bd:1c:c0:48:95:68:c2:e0:56:59:
         f8:c8:a4:85:ee:a6:d8:77:e4:8f:a8:14:ca:37:3f:a1:3a:48:
         57:d3:9b:9d:09:7b:8d:25:b5:6f:74:8c:6e:fa:6e:ae:ca:c8:
         b8:81:65:7c:f3:94:04:c1:10:14:2d:c9:f3:9a:e4:fd:50:b5:
         f3:40:dd:f0:8d:82:08:cd:5c:ea:c3:61:e1:27:8b:93:6e:4f:
         ea:55:a1:f0:2e:07:8c:a5:54:fb:ed:2b:b5:eb:f5:38:ac:41:
         f5:48:c4:a9:f5:78:9a:44:0b:4a:ac:b5:3a:03:45:2e:b1:9a:
         10:7c:fd:4b:09:c1:9d:82:8a:31:d5:ee:56:05:d0:ae:44:99:
         76:ea:38:06:cc:98:ef:ea:be:ed:c8:56:28:87:66:8a:c9:ee:
         80:b0:f0:0d:6a:c1:64:af:02:b6:6f:29:cc:cd:ae:31:0c:f5:
         da:ef:57:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 21:10:32 2025 by rpki-client