Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/56f66d3d-41f9-36da-811f-03c2e194a09c.roa
File:                     56f66d3d-41f9-36da-811f-03c2e194a09c.roa (raw, json)
Hash identifier:          ssYXnZu7jjBxa1BQKjZLDr+H/vL88ouyfAB6nySOR8M=
Subject key identifier:   82:C0:59:58:EC:2E:07:75:02:56:7C:36:15:4C:D9:88:58:D1:A8:0A
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F4328584A49705EDF3EE83FE7F278CEC0
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/56f66d3d-41f9-36da-811f-03c2e194a09c.roa
Signing time:             Mon 23 Jun 2025 13:01:03 +0000
ROA not before:           Mon 23 Jun 2025 13:01:03 +0000
ROA not after:            Sun 21 Sep 2025 13:01:03 +0000
asID:                     13760
IP address blocks:        142.190.16.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:70:5e:df:3e:e8:3f:e7:f2:78:ce:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Jun 23 13:01:03 2025 GMT
            Not After : Sep 21 13:01:03 2025 GMT
        Subject: CN=5b146bea-e432-4436-ada9-07326fb3e490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b6:db:cf:92:ef:32:bd:b2:4c:eb:ea:5c:a0:
                    6d:7e:60:1e:c2:db:2f:87:f7:50:fa:0d:87:ca:21:
                    e2:1f:ea:a8:e1:ab:be:0b:a9:60:41:32:6b:ad:07:
                    73:92:5c:75:87:34:aa:c7:15:99:8c:eb:da:cd:33:
                    6e:ca:55:e7:44:0b:1f:5e:0f:9e:74:a0:48:c1:a3:
                    96:ff:11:f4:73:13:1a:25:39:76:c9:91:ad:30:65:
                    42:f0:3e:e4:24:6d:7c:10:52:74:47:45:6c:dd:65:
                    ac:c8:3b:f4:b2:30:fb:50:cc:24:0e:9b:07:92:60:
                    92:04:ce:ac:78:d7:dc:49:53:d4:e9:20:06:b3:f8:
                    f2:69:df:90:98:fc:a3:3a:24:cb:87:f2:13:49:84:
                    b3:04:37:c9:87:4a:36:7d:d5:23:e7:b5:a6:4f:01:
                    f4:42:e9:88:df:df:7c:65:6a:31:3e:14:af:65:4c:
                    bc:a0:95:73:23:4a:30:63:da:cb:42:6b:1e:d9:ca:
                    c5:1a:e4:46:83:4b:c0:48:c8:de:c6:55:c8:c8:5d:
                    76:61:a3:ed:13:13:b3:44:03:03:c1:72:7a:97:28:
                    f4:b7:d2:88:53:c1:8d:4f:4d:5a:77:65:82:7e:82:
                    83:7d:7f:5e:a8:51:89:91:d4:fa:3f:eb:3d:72:90:
                    2d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C0:59:58:EC:2E:07:75:02:56:7C:36:15:4C:D9:88:58:D1:A8:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/56f66d3d-41f9-36da-811f-03c2e194a09c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.190.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:33:34:99:3a:88:ba:d2:b3:b0:aa:55:2b:b3:25:7e:98:17:
         82:15:81:01:ed:e0:05:9d:4a:80:1b:f3:d2:b1:77:56:f9:7e:
         1f:30:b0:79:89:da:7f:e7:1f:a5:d8:7c:66:dc:36:ab:88:2b:
         7c:4a:b8:3e:8a:0d:85:78:0b:35:e3:af:c0:f5:6a:6d:6f:5c:
         ba:f5:8e:17:e9:12:d9:e9:16:25:b9:d9:6d:c4:ee:10:59:ce:
         f5:fd:25:e6:f5:9b:f8:67:57:4f:87:03:8f:8b:68:2a:f8:60:
         25:6e:af:4e:de:65:91:f7:c6:48:00:ba:fc:cd:cf:69:53:47:
         65:f1:bf:e8:b0:0b:c0:ff:84:85:55:04:39:ec:98:59:d6:64:
         70:2e:13:8c:4c:0e:d0:5f:51:2a:01:65:d5:09:0a:6d:46:de:
         5c:a7:6c:f5:a6:5e:01:a9:be:b7:5c:e7:c2:b6:93:4b:96:da:
         ff:f6:b7:25:ea:c6:1c:cd:3d:89:fd:6d:b0:db:d2:ff:ac:f1:
         94:d8:7d:54:cd:9b:c3:31:b7:6d:fa:94:7a:97:87:5a:da:17:
         81:b4:7e:6e:ac:e7:a4:10:ad:05:80:17:e2:c3:c1:2e:e5:5d:
         3a:2f:df:20:86:cd:86:48:f4:45:c0:6e:16:a9:c9:ff:74:12:
         77:7f:49:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 09:56:42 2025 by rpki-client