Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0/89772c28-8eb2-3845-a823-2fc46db1e47d.roa
File:                     89772c28-8eb2-3845-a823-2fc46db1e47d.roa (raw, json)
Hash identifier:          ATw9LPDhBobqvwz9j8S099TkRt8x6f5GrncZ1LvaduE=
Subject key identifier:   9C:77:C5:F2:01:26:15:4F:3D:FB:D9:B0:35:DC:32:99:21:3B:2B:3D
Certificate issuer:       /CN=9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0
Certificate serial:       010D0C9F4328584A42757A5C42BFCC16559A2A00
Authority key identifier: ED:FB:E1:A5:2A:1B:91:EF:C8:F6:A5:CE:0D:CC:62:BC:25:5D:14:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0/89772c28-8eb2-3845-a823-2fc46db1e47d.roa
Signing time:             Sat 21 Jun 2025 01:00:48 +0000
ROA not before:           Sat 21 Jun 2025 01:00:48 +0000
ROA not after:            Fri 19 Sep 2025 01:00:48 +0000
asID:                     5056
IP address blocks:        136.242.64.0/20 maxlen: 24
                          208.90.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:42:75:7a:5c:42:bf:cc:16:55:9a:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0
        Validity
            Not Before: Jun 21 01:00:48 2025 GMT
            Not After : Sep 19 01:00:48 2025 GMT
        Subject: CN=29c3eb7c-bbed-48fb-a77f-e0ea2cebffd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:fd:4d:fe:d2:1f:fc:c2:ea:19:7c:3f:a4:80:
                    e7:3d:41:05:7a:44:f1:1d:de:4d:4d:fa:93:20:64:
                    09:b8:13:09:9a:f9:a0:59:37:39:47:f0:54:e5:1a:
                    b2:8a:31:7d:e8:82:39:ce:2b:21:c5:13:11:ed:e3:
                    c5:ad:db:75:fc:e6:46:84:d7:26:3c:9e:b4:0f:f7:
                    7f:e0:1d:67:c0:a6:0c:11:55:60:5f:7e:d3:46:95:
                    73:91:7f:c0:2c:a4:fe:3b:0d:fa:ed:33:53:04:e6:
                    69:e4:a4:1e:cf:46:17:b7:4e:3e:2b:1c:76:48:97:
                    e0:0b:cb:8c:d9:7a:eb:69:38:05:7b:e9:04:a8:45:
                    3d:66:ee:cb:33:d2:24:96:45:d2:5e:7b:71:3f:72:
                    1a:56:19:7b:d1:17:47:fa:d6:38:7b:5c:c9:98:c7:
                    68:a9:cc:30:aa:93:a7:14:10:57:9c:72:0f:81:32:
                    a0:ed:8f:ad:a5:4a:e0:5f:9e:01:95:9c:61:eb:33:
                    42:53:f2:6a:bd:d8:bd:00:08:00:1b:c9:84:d3:98:
                    a4:bc:2b:e7:8a:cc:e2:06:d8:e9:89:26:51:25:11:
                    50:51:56:5d:5f:e6:67:c9:8e:c3:d1:54:03:8f:f0:
                    0d:33:bc:d7:97:0e:aa:2c:99:a5:ea:cb:f1:47:bd:
                    d0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:77:C5:F2:01:26:15:4F:3D:FB:D9:B0:35:DC:32:99:21:3B:2B:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0/89772c28-8eb2-3845-a823-2fc46db1e47d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0.crl

            X509v3 Authority Key Identifier:
                keyid:ED:FB:E1:A5:2A:1B:91:EF:C8:F6:A5:CE:0D:CC:62:BC:25:5D:14:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.242.64.0/20
                  208.90.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:00:0c:da:43:5d:2f:0d:69:f9:0d:91:ee:ec:83:f0:f8:56:
         95:c8:6e:6f:41:4f:f4:71:3c:08:84:c8:fb:ee:7d:92:31:8b:
         ab:6d:bf:62:91:49:3b:9b:e6:cb:a4:51:f5:cc:07:cb:98:8c:
         45:d4:3b:11:d2:99:d9:fa:5f:c2:88:69:b3:51:b6:8a:a0:f0:
         f5:98:98:76:e5:9c:42:8c:9a:4c:85:44:71:da:d8:7c:1b:8f:
         e9:99:74:cd:90:22:37:3e:dd:b9:24:3c:07:6c:31:08:21:c9:
         24:76:aa:c1:ac:90:71:a0:e7:a5:50:dc:d3:58:3d:0c:80:d9:
         c1:7e:46:52:f5:d4:c3:04:fd:16:47:d7:4f:b1:50:5b:38:51:
         47:31:79:f7:4c:5a:9f:3b:8e:9b:ce:bf:bc:23:eb:81:df:62:
         5e:a9:48:2f:48:41:d1:fe:b5:1a:6a:32:15:e6:ee:69:e0:79:
         a6:e4:bd:fc:fc:0e:5e:fe:37:8e:37:af:3d:dd:f2:29:e7:80:
         53:9e:92:f3:c4:ab:37:30:d6:17:b5:3a:30:cb:c9:8a:77:13:
         19:4d:8a:93:9f:d9:da:86:56:52:c6:3b:50:74:92:ea:f2:83:
         49:56:6b:1f:a3:d9:3d:90:f9:6b:b8:66:f0:3a:04:01:b5:14:
         a0:55:a1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 22:52:12 2025 by rpki-client