Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/53982829-96a6-3c3c-8bbf-bfc6a153846c.roa
File:                     53982829-96a6-3c3c-8bbf-bfc6a153846c.roa (raw, json)
Hash identifier:          bYjqe25BxegWo22+GzZ1Nqt2MkV83kk3vuT6yKvga9k=
Subject key identifier:   DE:5F:A7:10:54:64:44:9D:97:CA:2A:D7:24:F7:A3:BC:9C:4D:AC:AA
Certificate issuer:       /CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Certificate serial:       010D0C9F43285849C87C47D733203BAC3C404340
Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/53982829-96a6-3c3c-8bbf-bfc6a153846c.roa
Signing time:             Thu 08 May 2025 08:25:54 +0000
ROA not before:           Thu 08 May 2025 08:25:54 +0000
ROA not after:            Wed 06 Aug 2025 08:25:54 +0000
asID:                     54535
IP address blocks:        156.53.242.0/23 maxlen: 23
                          156.53.242.0/24 maxlen: 24
                          156.53.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c8:7c:47:d7:33:20:3b:ac:3c:40:43:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9
        Validity
            Not Before: May  8 08:25:54 2025 GMT
            Not After : Aug  6 08:25:54 2025 GMT
        Subject: CN=f21f44aa-7c9a-490f-a730-a6747d9eca2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bb:14:4e:37:b5:f9:a8:a6:47:5d:06:f8:71:
                    2d:ca:5a:c3:b2:fe:96:e2:3c:12:bc:e2:cf:96:7b:
                    e6:e7:5d:68:38:f1:a6:94:a4:56:bb:2f:1a:92:57:
                    40:94:b3:b3:d5:1d:e1:2a:fd:9d:8c:df:df:15:78:
                    21:ed:c1:47:11:60:90:ca:40:2b:d9:b2:ba:e2:47:
                    69:7b:78:72:e0:fa:93:67:5d:a5:84:36:5c:76:c7:
                    5b:1d:36:ed:99:93:34:a0:22:a5:26:71:62:94:53:
                    3f:88:22:03:3a:2e:05:96:c9:93:88:d9:92:71:2f:
                    8a:28:ae:20:ad:33:7d:ff:92:bb:cb:d7:d7:f6:dd:
                    c6:87:ec:b3:53:47:46:d9:fc:ff:af:0c:e8:ce:c5:
                    85:2d:8e:1f:68:03:73:d3:e9:b5:c8:ae:4e:60:3f:
                    0f:58:a4:dd:c8:89:20:3e:e1:fa:14:46:1e:c4:6f:
                    94:8e:b2:e3:32:01:a4:ac:0e:59:32:0e:4d:67:17:
                    a8:9c:71:86:a2:36:6e:54:cd:53:14:df:de:72:41:
                    d0:ff:f1:87:01:67:f3:a4:17:da:a0:58:94:f0:15:
                    f7:2d:2b:d3:f1:d0:d4:bf:e2:9f:72:62:f0:62:1e:
                    ff:af:16:de:f8:3a:4a:89:55:33:44:20:49:56:5e:
                    a0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:5F:A7:10:54:64:44:9D:97:CA:2A:D7:24:F7:A3:BC:9C:4D:AC:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/53982829-96a6-3c3c-8bbf-bfc6a153846c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl

            X509v3 Authority Key Identifier:
                keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.53.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:79:02:e8:db:38:90:ca:31:d9:0d:77:50:c4:11:13:c5:f3:
         3c:42:ef:82:d1:73:a2:d6:05:57:e5:08:e1:df:e7:ab:bd:fb:
         c0:3c:d7:6d:7f:c9:56:b8:a3:7c:59:80:21:53:69:29:df:54:
         df:ad:6b:df:63:15:76:1a:87:90:f9:e5:b0:e4:20:5e:57:79:
         a2:21:41:07:af:bf:d2:71:fe:81:36:33:7e:eb:62:86:e9:5d:
         ce:4a:08:e2:06:4f:f8:1e:bf:1e:21:bb:e1:9b:63:cf:4d:f9:
         93:77:59:3a:0a:cd:66:7b:73:d7:39:82:66:40:f4:c8:25:50:
         7e:a9:b6:48:97:1e:60:3a:be:84:17:52:9e:a4:16:39:dc:10:
         87:0f:1e:65:27:ec:c2:11:19:a1:70:df:5c:9c:49:b0:d9:22:
         02:07:a4:94:1e:db:26:c9:ac:12:93:1a:28:a8:2b:04:5f:cd:
         2d:92:ce:04:67:1b:a0:32:6a:34:dd:94:30:4d:14:89:a0:39:
         53:bf:cd:d2:1a:82:c4:06:95:b0:34:0e:e3:3f:0e:c8:ab:24:
         2a:81:41:f4:1d:5c:af:3a:e2:ef:c3:ee:96:de:e1:0e:13:70:
         41:21:08:7a:16:c3:2d:b2:88:6a:2e:3f:88:04:6e:ed:69:c7:
         79:38:a3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:22:13 2025 by rpki-client