Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/9949ced6-51fb-3055-b2ab-60498b32768c.roa
File:                     9949ced6-51fb-3055-b2ab-60498b32768c.roa (raw, json)
Hash identifier:          XWzIpT4tUQiVMAMWXmyYxn4jpFH2AxvMwfDAjFnOpaw=
Subject key identifier:   E2:C2:71:27:76:2E:AC:17:51:F1:F4:5C:35:71:7F:0B:DC:58:5C:F1
Certificate issuer:       /CN=dba6a643-b5d0-4f09-8e60-e82ba1eb7848
Certificate serial:       010D0C9F4328584A58CAFC9AB438309886B5D900
Authority key identifier: 35:7F:A0:24:D8:87:21:3B:59:64:E8:FB:42:28:35:80:AE:5D:53:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/9949ced6-51fb-3055-b2ab-60498b32768c.roa
Signing time:             Sun 29 Jun 2025 01:00:50 +0000
ROA not before:           Sun 29 Jun 2025 01:00:50 +0000
ROA not after:            Sat 27 Sep 2025 01:00:50 +0000
asID:                     32249
IP address blocks:        162.250.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:58:ca:fc:9a:b4:38:30:98:86:b5:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dba6a643-b5d0-4f09-8e60-e82ba1eb7848
        Validity
            Not Before: Jun 29 01:00:50 2025 GMT
            Not After : Sep 27 01:00:50 2025 GMT
        Subject: CN=5541e233-f5e5-477c-a651-01f88a1dda9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:67:48:7a:b8:c0:63:6b:a4:e8:60:2e:7b:2c:
                    d5:a6:19:88:d4:20:90:e8:ba:cd:3a:3f:6f:d7:1e:
                    92:14:0e:7c:10:ff:83:8b:87:45:fa:3a:2b:3b:c4:
                    e9:3c:e5:c9:92:2c:6f:f0:10:58:83:ed:42:c5:8c:
                    c8:df:0a:c4:9b:c9:f5:70:59:c2:09:95:86:c5:80:
                    48:eb:ce:5c:34:7f:24:04:a1:d9:d8:96:a6:b8:d8:
                    0e:7b:46:18:4a:54:7b:80:bc:f1:36:76:2c:82:28:
                    21:21:3e:13:53:9c:b1:15:5c:6c:8b:14:44:9f:cd:
                    69:78:70:b1:fa:48:28:62:ee:56:a7:16:8f:ea:de:
                    14:7f:cf:e4:cc:cd:f0:49:ae:7e:c3:4d:7a:cc:3a:
                    89:3c:e9:22:eb:5e:12:89:bd:01:f6:e4:c7:4a:8d:
                    94:bb:c8:f3:d3:a7:6c:40:cc:dc:97:cc:c5:31:0c:
                    11:2f:bc:7a:20:01:7c:6e:91:2d:ab:f0:d1:f6:f3:
                    58:a8:bf:5b:4f:56:54:c2:e5:9a:0d:df:34:e0:87:
                    1a:bf:72:c6:5e:89:b1:ba:76:f0:ff:e6:88:80:91:
                    a2:2a:6f:37:e1:07:4a:4b:ef:b3:f7:f8:50:02:57:
                    15:4b:56:e9:8c:28:77:59:f6:c4:a9:49:14:00:b4:
                    7e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:C2:71:27:76:2E:AC:17:51:F1:F4:5C:35:71:7F:0B:DC:58:5C:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/9949ced6-51fb-3055-b2ab-60498b32768c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.crl

            X509v3 Authority Key Identifier:
                keyid:35:7F:A0:24:D8:87:21:3B:59:64:E8:FB:42:28:35:80:AE:5D:53:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.250.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:0a:e2:12:49:85:f9:d7:7e:0e:d7:5b:03:4c:05:88:fb:c4:
         6b:63:9c:23:b3:f0:0f:ff:d7:b6:7d:03:80:03:2d:17:11:72:
         51:f8:cc:e0:34:f3:1a:a8:16:c8:04:e5:91:3c:76:88:3c:36:
         dd:31:15:84:ad:b9:23:e9:90:f2:ff:90:97:eb:f8:19:ea:e7:
         9d:92:c1:91:1c:1f:ab:f7:08:e5:1c:e2:fa:f0:07:70:aa:bf:
         02:85:d2:9b:f9:d1:68:af:9c:2d:3c:62:cc:0f:fd:74:16:ae:
         04:d6:a6:d3:aa:04:63:11:91:9b:0f:4f:75:f6:bc:cd:2d:6a:
         f7:73:8b:69:5f:41:48:e1:5b:30:f6:b4:0c:7a:59:b3:9d:ba:
         d3:fb:7c:38:02:65:d0:6c:d1:26:e6:54:09:58:63:bd:80:d3:
         75:0c:83:90:9d:4a:ba:a2:72:69:76:e2:90:61:3c:81:f7:68:
         e6:34:7c:e2:1d:e4:fd:67:23:71:a5:e1:cc:b3:45:f7:e1:32:
         c0:9c:27:d1:25:ac:60:04:42:b4:5a:12:e9:b4:0d:c6:74:d3:
         cf:72:b2:c1:a2:6f:df:bd:65:f7:4b:a9:9c:f6:18:12:31:7f:
         c6:c0:d0:0a:6d:12:24:92:26:38:a1:de:1c:bc:58:f5:b3:c2:
         e1:c7:39:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:58:10 2025 by rpki-client