Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/f3bdbbeb-917f-3f84-9e87-7d64f37ccffc.roa
File:                     f3bdbbeb-917f-3f84-9e87-7d64f37ccffc.roa (raw, json)
Hash identifier:          OE5oK2FDdJ0sUN+aRR74JjsjsmXIgwc74rYVjXz4Uh8=
Subject key identifier:   8A:46:C1:7F:5F:48:78:55:41:93:04:4B:46:28:58:E9:E8:7B:C5:06
Certificate issuer:       /CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4
Certificate serial:       010D0C9F4328584A9D30E4CDEA5B63C44C5E70E0
Authority key identifier: 4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/f3bdbbeb-917f-3f84-9e87-7d64f37ccffc.roa
Signing time:             Wed 23 Jul 2025 13:01:02 +0000
ROA not before:           Wed 23 Jul 2025 13:01:02 +0000
ROA not after:            Tue 21 Oct 2025 13:01:02 +0000
asID:                     53334
IP address blocks:        104.153.196.0/24 maxlen: 24
                          104.153.197.0/24 maxlen: 24
                          104.153.198.0/24 maxlen: 24
                          104.153.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9d:30:e4:cd:ea:5b:63:c4:4c:5e:70:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4
        Validity
            Not Before: Jul 23 13:01:02 2025 GMT
            Not After : Oct 21 13:01:02 2025 GMT
        Subject: CN=5609a4ab-67c4-47c8-bca4-0a28bffc6e8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:8c:e7:d0:d2:90:4e:a1:d5:9e:38:ba:7a:9a:
                    94:38:7b:c7:70:ef:98:68:bc:1a:4a:0c:e7:eb:b4:
                    d8:5b:54:01:1c:35:c8:43:b3:9b:a4:cf:11:66:20:
                    43:41:2f:71:7e:b7:ef:c9:ce:33:c3:81:c5:53:6a:
                    26:a2:5c:8f:b9:58:a7:4a:07:31:8a:84:ad:ab:a1:
                    3a:b3:9d:56:e4:12:96:ef:2a:75:a1:79:00:52:5a:
                    bb:1d:da:c3:e7:7e:74:04:56:57:fe:4b:4e:96:a6:
                    82:cf:59:03:78:48:35:63:b2:e0:7d:57:fe:00:02:
                    40:1f:d7:26:6e:e7:16:77:ca:eb:38:99:46:ed:4d:
                    26:8e:d7:5e:4a:70:b2:d1:7d:08:d4:2b:4e:a1:a5:
                    ff:01:53:e9:c8:52:81:c4:16:58:f8:e1:cb:34:a1:
                    99:7f:2d:89:82:96:dc:2a:ed:95:c2:17:5e:bb:a6:
                    5f:01:f7:2f:e2:e9:15:ec:41:bd:d9:f9:54:cd:1e:
                    c4:fd:c2:69:c2:54:53:73:c7:7b:92:4f:30:16:9c:
                    5b:6e:8c:92:f0:e8:97:d5:b2:78:13:54:90:2d:ba:
                    59:8c:48:0a:35:09:de:67:68:94:1c:09:67:e0:62:
                    c5:76:1a:8e:e4:af:b6:7c:b1:13:3d:23:64:e6:22:
                    7c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:46:C1:7F:5F:48:78:55:41:93:04:4B:46:28:58:E9:E8:7B:C5:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/f3bdbbeb-917f-3f84-9e87-7d64f37ccffc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.crl

            X509v3 Authority Key Identifier:
                keyid:4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.153.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:57:64:e7:de:11:ee:da:4a:be:f5:e3:96:f3:18:50:48:03:
         59:98:04:de:80:a0:45:b0:d8:50:1b:89:e0:47:2a:02:8d:d4:
         b7:cd:36:0a:60:6a:1b:b0:37:29:c3:5b:1f:24:b5:ee:ee:fc:
         40:99:9e:65:38:c6:15:43:9b:30:8a:23:d4:86:16:08:6e:b9:
         25:9a:27:6f:31:a7:b6:f1:82:8e:92:b4:47:20:9d:fb:f1:91:
         3f:22:d0:56:4f:6a:a6:cd:bd:8f:44:d4:9f:68:43:f2:b6:a1:
         c8:48:ec:52:76:1c:fa:f9:e1:91:07:06:53:24:2c:a8:39:8e:
         00:ed:c3:fc:76:e1:00:78:f7:7b:bf:cf:b7:58:a8:6d:6c:88:
         d6:c3:50:b8:7a:f2:11:14:fb:cd:70:26:d7:ac:7e:3b:77:dc:
         02:b0:57:30:c7:56:af:da:64:14:8e:46:32:6d:52:38:d1:80:
         51:16:f1:c1:43:7a:fb:25:4f:37:23:31:2e:85:5c:5c:c6:33:
         40:1c:ea:67:dc:8f:47:e2:ec:72:f1:11:b4:fa:61:52:9e:17:
         6c:76:c1:aa:0c:d3:26:62:eb:58:76:64:72:10:cb:80:94:a1:
         1e:3a:5d:e7:91:c8:f6:4e:1a:7c:82:89:ba:60:0b:ed:25:e8:
         3e:92:61:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:14:48 2025 by rpki-client