Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f5092bd3-603d-3264-b3fd-7e0f9cd87068.roa
File:                     f5092bd3-603d-3264-b3fd-7e0f9cd87068.roa (raw, json)
Hash identifier:          uObW7tyi25+zzpDP61k6OECJhjxClpgvLyQ4Lr/UrtA=
Subject key identifier:   79:B9:1E:4A:36:B5:47:7F:E7:B8:6F:EE:28:E6:2F:08:BD:F3:90:4E
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584BB2F7D532BCE369D111578280
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f5092bd3-603d-3264-b3fd-7e0f9cd87068.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     203
IP address blocks:        192.53.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:d5:32:bc:e3:69:d1:11:57:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=a82323d5-a83b-4b38-8495-2d03bc17ac9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ae:61:bc:8f:4d:bd:3a:22:6f:6b:69:64:6f:
                    a3:f4:5b:03:2d:8a:46:c7:64:65:8b:16:a2:f9:e5:
                    bf:0b:18:7c:f4:84:f7:c7:48:b3:f3:0f:3d:d9:6d:
                    07:69:b0:58:f9:b9:34:9c:26:d2:03:3e:e0:ad:8a:
                    25:e1:80:db:c3:57:76:e7:de:4f:3f:97:61:da:b4:
                    df:91:16:bb:f4:9a:04:94:1e:8e:02:dd:c0:29:7c:
                    63:1b:a8:3b:58:e8:b6:b3:a2:a7:37:45:d0:49:b9:
                    f8:7e:fd:55:0a:c6:0e:14:18:a2:ad:0b:70:9a:f9:
                    53:bb:20:4b:12:1b:6f:05:30:68:5e:70:9a:02:3b:
                    df:1e:4c:ee:f2:6f:e1:eb:aa:13:05:6c:a0:ee:83:
                    3d:2d:79:a5:dd:54:80:f4:bc:dd:3d:66:01:88:9f:
                    26:f1:ee:55:0b:2d:7d:9b:5f:e2:d9:cc:26:e2:44:
                    2c:ff:eb:24:91:91:13:00:23:79:9d:58:e0:26:dd:
                    0f:7d:ca:3d:91:21:54:bc:53:48:03:ce:75:80:4a:
                    44:c3:97:0b:53:79:0c:2b:ca:08:fc:5f:ef:f9:e6:
                    13:b8:66:b7:23:eb:f4:0a:cb:99:7a:07:43:b7:4d:
                    06:95:be:79:50:f0:e2:b1:c2:f2:b6:4f:1f:7c:32:
                    70:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B9:1E:4A:36:B5:47:7F:E7:B8:6F:EE:28:E6:2F:08:BD:F3:90:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f5092bd3-603d-3264-b3fd-7e0f9cd87068.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.53.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:f4:2f:7a:9b:92:00:f0:73:a9:f4:41:92:2e:5b:e7:fb:fb:
         81:3f:44:2d:95:25:91:2f:1e:a1:a5:bb:9a:27:5b:1f:1c:3b:
         3d:a7:24:94:05:bb:aa:77:2d:43:8d:b6:b5:3e:4f:b7:02:25:
         69:87:5d:3e:ca:33:6e:f8:69:28:da:9c:d9:1f:ca:8b:db:14:
         65:40:80:3d:3e:05:73:61:56:f6:be:8d:d0:5e:94:a9:3b:14:
         25:03:45:fb:e9:14:1e:9c:57:97:43:e7:58:8b:96:b4:25:5f:
         04:88:ad:d1:90:a3:3d:d1:8a:d6:60:45:f6:3f:3d:29:e1:aa:
         d3:74:ab:f1:86:e8:f6:46:5c:18:35:64:bd:9b:c6:e2:89:50:
         42:21:b4:db:cc:42:9a:4a:86:b3:cf:ba:0f:09:c5:20:f2:b7:
         be:2d:e6:b3:bf:6b:d4:d5:55:6c:89:9b:82:e4:5b:3b:e6:ff:
         25:47:3b:d6:0d:8e:4f:b6:0c:fd:93:45:94:6b:9c:22:ef:7e:
         39:5c:08:44:4b:40:7a:89:42:70:ef:1a:2b:2f:84:8a:56:5d:
         bf:10:7c:fa:60:8a:4e:83:36:04:6d:55:2c:92:00:6d:41:db:
         da:2b:b3:bd:11:4c:2b:27:06:0a:b9:f1:fd:1a:e5:29:e1:6e:
         73:53:c2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:53:16 2025 by rpki-client