Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/28c1eeab-c5dc-30c5-b684-5d677df94974.roa
File:                     28c1eeab-c5dc-30c5-b684-5d677df94974.roa (raw, json)
Hash identifier:          oeoav632IN1gnPatiqfvBcX4DseJWN4xMiecZDFN4pg=
Subject key identifier:   1F:8C:ED:D0:09:FF:EF:C3:07:BA:55:09:DC:30:01:B5:55:01:E2:3B
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F4328584A497065B982743743EDB8AC80
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/28c1eeab-c5dc-30c5-b684-5d677df94974.roa
Signing time:             Mon 23 Jun 2025 13:01:03 +0000
ROA not before:           Mon 23 Jun 2025 13:01:03 +0000
ROA not after:            Sun 21 Sep 2025 13:01:03 +0000
asID:                     13760
IP address blocks:        142.190.2.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:70:65:b9:82:74:37:43:ed:b8:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Jun 23 13:01:03 2025 GMT
            Not After : Sep 21 13:01:03 2025 GMT
        Subject: CN=a81486a9-e356-40ed-8332-e28046b92aee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7f:61:b1:1c:15:e5:33:40:d5:aa:87:04:e6:
                    db:58:1c:25:df:32:bb:31:55:17:e8:00:cc:54:9a:
                    45:8d:93:86:fd:7b:49:b6:86:40:30:f4:f3:46:ea:
                    17:8a:ed:98:03:33:08:a0:3d:06:15:07:58:6e:83:
                    f5:c8:4d:b5:51:f3:79:60:8e:e1:f2:db:80:68:4c:
                    fc:bb:f8:50:b3:9d:b1:f7:ad:5c:3d:a9:d3:9c:6c:
                    1b:26:13:8b:80:25:83:16:ec:3b:84:4a:da:ce:fc:
                    a1:a5:b2:1b:f2:f0:6a:53:7c:b4:6b:13:ed:32:e7:
                    5f:8d:65:2d:75:bc:de:09:ab:d9:e4:6a:da:cc:45:
                    c0:85:c9:04:1e:d4:3e:d3:e4:9d:a8:24:1e:a5:c7:
                    32:52:f4:7b:e6:d0:b4:f4:f3:c4:ed:1d:1f:ad:58:
                    cf:a0:f8:93:e8:01:9b:e8:ea:5a:01:1b:ca:67:d2:
                    b0:98:3d:ae:22:d5:c0:32:d3:51:bd:37:84:5e:e3:
                    d9:7c:9d:66:91:52:25:45:37:9e:81:32:66:2c:26:
                    95:39:36:87:82:2b:42:9f:a0:a6:f1:73:0b:7f:08:
                    c3:ea:c1:25:42:04:ac:48:3f:10:9d:43:92:dd:d0:
                    a0:61:f9:c4:d9:ab:bf:ea:95:af:95:1e:41:0f:80:
                    f0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:8C:ED:D0:09:FF:EF:C3:07:BA:55:09:DC:30:01:B5:55:01:E2:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/28c1eeab-c5dc-30c5-b684-5d677df94974.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.190.2.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:82:41:07:c5:71:bc:36:74:00:0c:fa:b1:35:00:45:a2:06:
         02:96:bf:17:2e:9e:d4:f5:a8:64:9f:2d:7b:46:cd:77:aa:04:
         82:8f:db:c0:6e:e0:e3:28:f3:49:f4:b5:be:16:8d:7b:9b:f3:
         70:e1:aa:3b:f8:33:fe:9d:d6:24:ec:b6:56:80:92:a5:8f:35:
         2a:26:bd:1b:80:e0:a5:3a:98:f5:fc:e1:ac:af:b0:01:41:f1:
         c8:bb:d3:1c:7d:2b:1e:a2:a8:44:50:1c:5d:d8:11:cc:c6:6c:
         c5:b3:a0:ce:5e:4c:c4:26:6b:c3:64:46:7b:7d:c8:08:e6:48:
         35:1f:14:60:ee:bc:39:f3:50:84:bb:1b:18:e3:b8:8e:7f:80:
         d6:01:66:13:cc:c5:62:88:37:19:80:7a:a4:ff:68:5d:34:e8:
         01:9b:74:73:33:e0:60:5b:0f:aa:d6:72:78:58:34:a3:4f:bf:
         3b:00:f6:74:29:e8:4b:c6:37:ae:9a:05:ab:f4:e3:74:b3:77:
         ec:ba:64:58:43:0a:c9:1a:04:89:e2:12:15:1a:4a:64:b6:06:
         16:1a:c9:0c:b4:66:ce:c5:40:d2:c7:e3:fb:a7:6c:7d:a6:5f:
         89:fd:59:01:10:e3:ce:84:ef:1c:9b:07:0a:6a:6b:1c:f6:1f:
         f7:80:28:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 19:08:42 2025 by rpki-client