Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/53895827-d60e-3203-b385-41bf4259e789.roa
File:                     53895827-d60e-3203-b385-41bf4259e789.roa (raw, json)
Hash identifier:          rI+vWFe1m3HC8C0nHE6pduKI8jCPK2+qrNqerMHhUYg=
Subject key identifier:   F3:13:7C:19:A9:E9:88:E6:69:36:78:D1:59:06:C3:75:A1:17:27:07
Certificate issuer:       /CN=86fea470-b380-45c0-9f6b-033b7d884388
Certificate serial:       010D0C9F4328584AA85BBC319DF0FD22268C5380
Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/53895827-d60e-3203-b385-41bf4259e789.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     397423
IP address blocks:        69.42.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:bc:31:9d:f0:fd:22:26:8c:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=19e0a44b-a90d-43cb-a42f-658e73dfea5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:0f:1c:07:42:ea:88:b1:b6:56:5d:23:1f:18:
                    11:af:94:65:eb:4c:68:b4:70:71:2e:29:84:35:3f:
                    b5:24:33:cf:a5:0e:51:a6:62:dd:e1:5d:98:48:d2:
                    eb:04:86:6e:26:34:51:00:a8:90:ed:ce:d1:43:76:
                    fc:95:6a:31:a7:d2:7d:90:38:01:72:25:42:85:50:
                    0d:e2:93:a4:0e:37:b4:5f:10:dd:2e:64:34:c2:a8:
                    af:5b:4f:16:c3:a0:ed:92:e1:ed:fb:46:10:d6:7b:
                    35:62:f8:fb:9c:6a:28:df:85:86:ef:ff:70:7f:a4:
                    9f:a8:7b:6e:49:4a:d5:15:5a:0e:c9:d4:7e:88:8e:
                    f9:72:45:09:35:f5:da:18:27:97:76:d2:33:bb:26:
                    ab:4f:ed:c6:d1:9b:59:fc:4a:02:22:41:ea:8c:0b:
                    f3:40:ae:60:47:be:c2:04:ad:93:ec:d3:8a:64:03:
                    7f:9d:d6:f6:28:f1:20:9d:7f:b7:f4:33:df:4f:8a:
                    f0:14:90:35:4b:97:60:62:6a:72:09:3f:9a:92:ab:
                    d2:55:23:b1:4f:9c:d2:cf:1e:b3:5f:e3:9f:e4:d9:
                    3c:49:aa:db:49:44:c6:e3:1e:07:d3:e8:43:c0:c9:
                    fb:9b:d7:12:a1:d8:c3:30:d0:d0:dc:fa:a8:c4:82:
                    53:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:13:7C:19:A9:E9:88:E6:69:36:78:D1:59:06:C3:75:A1:17:27:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/53895827-d60e-3203-b385-41bf4259e789.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl

            X509v3 Authority Key Identifier:
                keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.42.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:fb:c2:cf:9e:a5:87:f9:bd:65:2f:06:46:8d:d9:56:34:18:
         01:b3:8a:c4:2e:ec:41:53:91:79:5f:42:03:9d:c1:be:c7:60:
         94:39:2b:51:03:fe:12:c2:1b:87:cf:c3:89:dc:0c:a4:a3:90:
         d5:32:0d:7f:fd:58:4a:18:b0:b0:d7:fc:a2:fe:88:20:11:a4:
         65:39:14:71:b2:be:29:9e:2e:75:e0:fa:20:bb:cd:7d:64:5f:
         1d:4b:c0:69:6f:9c:5b:b5:cb:86:44:6e:2c:de:eb:27:83:f0:
         c5:06:07:89:7e:9f:71:89:5a:84:0f:fe:da:c6:10:6c:8b:ab:
         d4:86:d8:0d:7e:ae:28:b2:33:25:5a:47:5d:c8:5a:5a:2a:94:
         10:c0:15:2e:24:20:0c:bf:5f:fb:8a:ab:bb:b4:85:03:39:6d:
         1d:1e:43:17:f3:cc:01:03:5e:92:43:e9:84:db:b3:fb:ac:97:
         a8:47:da:76:38:61:90:e5:dc:5d:34:82:6e:85:c3:4e:5c:e0:
         d2:3d:0d:e9:1c:11:d0:02:eb:99:9e:39:f9:b8:8d:4d:e2:55:
         39:2d:99:2e:01:8c:79:05:38:c5:49:91:d5:62:2d:84:6e:5e:
         e7:df:2b:41:a5:74:9e:32:4b:7c:29:ba:ea:62:e7:5c:81:5c:
         20:3f:3c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:44:02 2025 by rpki-client