Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/307683f0-b7f5-4fe1-b163-a8a0ead77634/55d3f7ca-b647-37f0-ba02-305fbfc48784.roa
File:                     55d3f7ca-b647-37f0-ba02-305fbfc48784.roa (raw, json)
Hash identifier:          beLHSecFAH34O8g2qh7RxFVVsZ29a6t2olGX5bzOZuQ=
Subject key identifier:   15:00:93:3B:3C:A5:0A:23:C0:85:47:55:FD:AE:5D:8F:F5:D8:78:E5
Certificate issuer:       /CN=307683f0-b7f5-4fe1-b163-a8a0ead77634
Certificate serial:       010D0C9F4328584B328C63F0FAE67B7475339580
Authority key identifier: 80:9D:6A:96:C9:F0:AE:5E:50:6B:DA:BA:D8:9C:21:B8:1D:81:CB:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/307683f0-b7f5-4fe1-b163-a8a0ead77634.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/307683f0-b7f5-4fe1-b163-a8a0ead77634/55d3f7ca-b647-37f0-ba02-305fbfc48784.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     15083
IP address blocks:        173.214.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/307683f0-b7f5-4fe1-b163-a8a0ead77634/307683f0-b7f5-4fe1-b163-a8a0ead77634.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/307683f0-b7f5-4fe1-b163-a8a0ead77634/307683f0-b7f5-4fe1-b163-a8a0ead77634.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/307683f0-b7f5-4fe1-b163-a8a0ead77634.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:63:f0:fa:e6:7b:74:75:33:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=307683f0-b7f5-4fe1-b163-a8a0ead77634
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=1b63268c-5f8e-4a76-bad9-a53221b4face
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8d:40:29:2f:4b:41:18:04:48:79:bb:2b:da:
                    ba:bd:2b:43:5b:56:24:d7:23:07:9e:4b:28:37:ea:
                    c8:ef:b0:49:cc:42:f8:1c:cf:74:61:11:a7:4f:f0:
                    bf:1c:26:1b:13:0b:1f:5f:36:45:f8:4f:22:6c:0b:
                    97:09:8c:b1:82:a8:cb:7c:d6:47:04:9b:29:2c:21:
                    3e:ce:92:71:24:88:7b:2d:04:77:42:05:6f:ed:b0:
                    15:bf:13:93:83:3b:cd:c5:95:4e:87:3b:55:83:8f:
                    10:22:a2:c8:ec:8e:a1:2d:84:06:40:18:86:bb:c9:
                    1d:cb:11:c1:27:ec:a9:e0:ad:e5:56:cb:6a:23:10:
                    0c:83:bc:4c:82:7d:80:ba:f8:06:99:11:0f:6a:d5:
                    87:94:e9:be:57:bf:b9:d5:49:47:2b:cc:d0:65:d0:
                    c2:5d:7f:19:40:03:89:6a:4a:1a:3c:44:1f:9c:1c:
                    d4:06:49:30:9c:4f:0a:a4:c9:e3:76:45:14:70:d8:
                    94:48:3f:d7:91:ab:be:01:67:e2:d8:25:74:93:67:
                    0e:46:56:3e:2a:6b:c5:99:b4:b3:2e:79:c8:d8:9c:
                    e2:94:81:ff:e1:29:a0:f0:b7:4e:a3:01:17:b7:1f:
                    93:0f:8b:ec:d0:ff:0d:c7:c2:fe:c9:65:eb:9d:3c:
                    df:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:00:93:3B:3C:A5:0A:23:C0:85:47:55:FD:AE:5D:8F:F5:D8:78:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/307683f0-b7f5-4fe1-b163-a8a0ead77634/55d3f7ca-b647-37f0-ba02-305fbfc48784.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/307683f0-b7f5-4fe1-b163-a8a0ead77634/307683f0-b7f5-4fe1-b163-a8a0ead77634.crl

            X509v3 Authority Key Identifier:
                keyid:80:9D:6A:96:C9:F0:AE:5E:50:6B:DA:BA:D8:9C:21:B8:1D:81:CB:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/307683f0-b7f5-4fe1-b163-a8a0ead77634.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.214.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:11:6d:6a:5c:6f:eb:4b:d2:bc:4d:f6:10:84:db:01:ff:b3:
         83:8e:02:73:5c:a1:26:cf:86:b3:99:91:3f:12:e4:24:cf:b6:
         40:84:6a:fa:a2:54:63:91:e5:77:e6:2b:ea:9f:69:b8:24:73:
         10:13:2b:89:16:2c:56:36:a8:33:6c:b7:28:87:82:24:7d:de:
         99:c4:7f:e2:94:8c:3c:6d:73:fb:59:ae:d3:07:ec:e5:ee:3f:
         c4:80:a1:3f:d8:07:f3:aa:cc:77:a5:be:c6:77:31:a5:6a:68:
         b2:c1:81:ab:e3:19:0e:71:83:d6:36:72:27:68:ee:61:17:f8:
         ab:90:34:68:bf:d6:6c:f8:8d:de:11:04:d9:af:8e:27:18:24:
         cf:9a:59:09:9f:05:14:40:72:54:43:33:b3:a3:87:6b:fb:8f:
         5c:b3:6f:d3:3a:05:aa:07:0d:c2:62:51:9a:a4:18:7c:6e:53:
         25:dd:2d:c7:a2:3b:19:60:b3:62:5b:34:c0:82:84:88:67:aa:
         82:a7:9c:15:0c:9d:d8:9a:37:68:ef:c3:43:44:b3:66:97:cf:
         bc:bb:5b:ee:6c:9f:89:f6:18:29:ba:a7:7f:0f:2e:d7:e6:d7:
         09:f7:1b:27:ef:a8:8e:c9:1b:78:e9:1a:41:f2:4c:d3:65:a0:
         e2:1f:63:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:48:34 2025 by rpki-client