Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/800c6431-3fb5-37fb-bd44-84155cafeb2d.roa
File:                     800c6431-3fb5-37fb-bd44-84155cafeb2d.roa (raw, json)
Hash identifier:          Z40Oku/vbp1YfNsCX30RH+jcT6LB+mkc+YsVduEwuSQ=
Subject key identifier:   E8:DE:5C:4B:E9:8F:E9:A1:7A:7E:A6:BF:C7:C3:D2:F5:39:B6:CA:F8
Certificate issuer:       /CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4
Certificate serial:       010D0C9F4328584BB45D35DDCA038DA5311D1600
Authority key identifier: 4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/800c6431-3fb5-37fb-bd44-84155cafeb2d.roa
Signing time:             Fri 31 Oct 2025 13:00:39 +0000
ROA not before:           Fri 31 Oct 2025 13:00:39 +0000
ROA not after:            Thu 29 Jan 2026 14:00:39 +0000
asID:                     53334
IP address blocks:        104.153.198.216/32 maxlen: 32
                          104.153.198.217/32 maxlen: 32
                          104.153.198.218/32 maxlen: 32
                          104.153.198.219/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b4:5d:35:dd:ca:03:8d:a5:31:1d:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4
        Validity
            Not Before: Oct 31 13:00:39 2025 GMT
            Not After : Jan 29 14:00:39 2026 GMT
        Subject: CN=48fe04fe-ca54-412d-be22-e0fa18b89979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:63:4b:1e:53:7c:c8:cf:bf:eb:46:d2:57:5c:
                    b2:d1:44:48:c1:9c:bc:1f:fb:9c:16:64:f0:8e:5f:
                    c5:21:3f:45:2e:0b:4a:44:56:f0:de:27:80:2d:83:
                    7f:cf:1d:f2:28:78:76:16:29:73:9d:6c:5a:c1:dc:
                    97:90:2a:66:1b:3d:8d:1a:01:3f:67:db:bd:ad:e7:
                    fa:2f:7a:30:b2:dd:e0:47:0a:21:45:65:a4:bf:e5:
                    c1:98:dc:be:c3:da:9e:64:31:e7:ef:3d:1c:23:99:
                    52:f7:14:9e:6d:af:f1:78:ca:a8:3b:a5:d1:4f:b0:
                    0c:d1:4f:a6:fe:9f:e2:11:c5:4a:fa:22:3c:d6:a0:
                    dc:8a:18:30:fb:31:c0:86:83:0b:c3:0f:a4:f4:1a:
                    a0:1c:0f:c9:25:6d:9b:29:56:b8:8a:46:da:cb:56:
                    00:af:51:3a:68:e2:ed:14:5c:d1:e4:23:23:a1:30:
                    bd:2d:00:b3:2d:96:cb:1f:5d:ea:d0:43:7f:93:ca:
                    a6:76:a0:df:72:d6:b4:31:75:21:d9:32:d2:13:58:
                    f0:02:cc:2f:19:6d:eb:50:02:3e:86:7c:56:02:18:
                    e5:65:62:31:ac:4f:7d:94:cb:82:12:c0:62:70:b7:
                    89:7a:2a:91:5e:cf:37:6b:32:70:f8:6a:67:e0:21:
                    df:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:DE:5C:4B:E9:8F:E9:A1:7A:7E:A6:BF:C7:C3:D2:F5:39:B6:CA:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/800c6431-3fb5-37fb-bd44-84155cafeb2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.crl

            X509v3 Authority Key Identifier:
                keyid:4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.153.198.216/30

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:57:be:92:51:45:db:f4:85:04:7e:a7:24:96:f7:fe:26:a9:
         7a:31:e6:47:bf:61:06:86:16:95:bb:47:bc:48:6b:61:16:c4:
         e5:d8:18:05:f5:da:64:13:b0:d0:f1:73:01:ee:09:95:98:cd:
         7c:c9:23:91:1d:9a:07:41:48:86:4e:34:3b:ed:76:73:09:49:
         44:ad:ef:d0:f7:97:f9:42:b0:4d:c6:ac:86:53:96:cd:e8:5b:
         a9:91:ac:ab:32:ef:dd:d9:c0:15:29:94:d9:61:50:81:90:fe:
         ed:f5:9e:94:0b:50:02:db:32:f0:c1:b0:bc:70:66:bc:f8:b9:
         8f:f7:2f:ea:c8:c0:a5:7d:94:f5:e5:7d:6b:73:82:c2:fc:7e:
         7e:41:6e:c9:7e:b7:9b:48:19:e8:09:20:d6:da:77:ef:06:60:
         d6:c5:d0:49:4e:5f:a8:ab:eb:dd:84:bf:73:af:0d:f6:a1:00:
         e5:86:7d:7b:94:28:32:c9:a0:48:53:23:4d:2c:c8:5b:00:25:
         5d:3c:00:7e:80:86:93:98:6d:43:9d:c2:10:ef:13:cf:4f:30:
         7b:e2:ac:57:d3:9a:b9:ed:29:b2:b0:84:de:3f:2a:3f:37:68:
         f1:a0:56:df:31:96:3d:74:3c:a0:6f:38:1e:ab:30:e4:3a:66:
         99:65:d0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:41:35 2025 by rpki-client