Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/b737c496-4672-34aa-b061-ed83ae9c485f.roa
File:                     b737c496-4672-34aa-b061-ed83ae9c485f.roa (raw, json)
Hash identifier:          nwkG0ouSLKTlTnSWbyNyAGJUoyGtCn0U032q/eMDF90=
Subject key identifier:   4E:44:B7:27:69:F2:1D:EF:9C:E8:15:87:7D:A9:A9:A5:CF:2D:2E:F1
Certificate issuer:       /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6
Certificate serial:       010D0C9F4328584AF0F13147C4AA95410EB9BE40
Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/b737c496-4672-34aa-b061-ed83ae9c485f.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        155.63.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:31:47:c4:aa:95:41:0e:b9:be:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=df7a1b3d-fcd7-49df-ab0d-4a25bb9499f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:6a:c6:91:53:44:90:b7:db:80:a2:8d:51:16:
                    ba:c8:56:d3:b9:df:53:30:cc:42:0f:6b:86:9f:c1:
                    5b:e3:33:f8:0e:30:7c:bb:74:ef:3a:ab:ac:d0:34:
                    c2:75:23:1c:b3:ab:e5:5c:e5:e1:25:a2:e0:3e:93:
                    6d:e8:30:18:6c:3a:fb:17:d5:92:86:a3:eb:94:5f:
                    6a:47:2d:bd:82:e8:5c:f0:d8:5e:b9:4e:9e:bc:93:
                    76:0d:bd:81:e0:b9:5a:93:b8:e3:4c:d1:eb:ee:ec:
                    32:30:3f:da:d7:c8:b2:ff:15:3b:1f:b1:5a:bd:eb:
                    dd:97:e0:d6:4e:ed:de:0b:3b:7f:2a:e5:96:b2:23:
                    0a:3a:c9:f3:5d:b7:5c:93:59:d8:b6:66:71:e6:0b:
                    ac:f9:10:ad:10:2d:15:0f:9c:cd:75:1d:3d:92:ba:
                    85:46:fe:2f:06:5b:be:15:0a:f7:67:f6:00:94:66:
                    95:3c:dc:53:43:42:6e:c1:82:7c:69:a4:6d:8a:ce:
                    da:5f:81:87:d7:8e:36:c6:ca:8f:f0:b4:6f:94:f9:
                    4c:fb:e0:00:71:97:33:eb:d1:35:b2:c8:d3:3c:c9:
                    4e:ba:55:22:8f:5e:51:18:03:79:4d:d7:83:79:63:
                    87:1b:10:80:7b:96:59:f5:68:23:ff:24:c9:79:98:
                    39:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:44:B7:27:69:F2:1D:EF:9C:E8:15:87:7D:A9:A9:A5:CF:2D:2E:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/b737c496-4672-34aa-b061-ed83ae9c485f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl

            X509v3 Authority Key Identifier:
                keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.63.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:46:55:11:f2:70:87:66:43:f4:92:6c:3a:92:78:09:be:c0:
         7a:b2:d9:5d:34:4e:58:f4:45:41:f6:ce:c1:84:6b:a7:26:ce:
         87:de:12:12:d6:9a:26:8e:04:ff:16:1b:6b:0c:a8:6f:06:f5:
         7c:2b:40:1b:8e:cb:8a:ee:01:f9:72:63:e6:51:22:f2:2f:43:
         45:d1:a8:4a:23:6a:06:1b:7b:28:64:25:cd:66:98:a9:1c:b9:
         a9:ab:f3:e3:06:1c:33:e6:bf:67:b1:19:76:7a:3f:d3:4a:96:
         52:ce:f2:d3:cc:97:7c:8e:06:1e:57:45:dc:e1:a2:68:02:26:
         f4:74:09:45:2a:4e:48:00:e2:1c:a2:37:ce:d4:57:99:37:55:
         8e:e8:d1:7e:f2:6d:3b:a4:ce:de:af:b8:4c:ce:7f:0f:52:39:
         2e:c2:c3:4e:30:8e:3f:b2:a2:3f:11:84:f9:99:4a:5e:cc:5f:
         ba:b4:34:ca:fd:31:08:64:59:79:e0:79:7b:0b:5e:70:3e:9d:
         bb:8b:f0:bc:0f:a2:a1:a7:23:70:c7:7a:5c:ae:4a:d0:a4:0b:
         3e:a4:60:4e:62:ef:52:cd:38:9c:05:39:91:c0:f5:d3:e7:e2:
         2e:f1:ac:26:64:88:3d:56:51:8b:57:9d:78:57:dc:f8:ee:17:
         e3:ef:ba:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:59:26 2025 by rpki-client