Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/e2bc6971-b9ad-3d82-a9d3-06f1bd29c205.roa
File:                     e2bc6971-b9ad-3d82-a9d3-06f1bd29c205.roa (raw, json)
Hash identifier:          PXnppMz1W6SaNIzp4XvGMzHRNzZwGhyKjP5kL9sVTwo=
Subject key identifier:   92:3B:7B:47:10:61:F1:F1:14:FB:34:90:54:6F:11:6A:8E:AE:B6:1F
Certificate issuer:       /CN=53ff129b-845f-449d-8e32-2b24ecbefea4
Certificate serial:       010D0C9F4328584B99D79D15B0C9F7D04BAA8480
Authority key identifier: 0C:1D:ED:25:A1:15:F2:35:C9:47:C5:6B:9D:08:A9:BE:08:E8:35:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/e2bc6971-b9ad-3d82-a9d3-06f1bd29c205.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     16509
IP address blocks:        199.65.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/53ff129b-845f-449d-8e32-2b24ecbefea4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/53ff129b-845f-449d-8e32-2b24ecbefea4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:9d:15:b0:c9:f7:d0:4b:aa:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53ff129b-845f-449d-8e32-2b24ecbefea4
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=b035dad4-9737-4a8f-be6b-2b25fd4b8884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:60:f2:d3:dd:8d:bd:35:34:4e:a8:f3:5d:3f:
                    69:ac:c8:0e:70:95:45:15:c9:af:89:1b:dd:73:71:
                    09:71:4a:d3:14:56:3e:af:ad:0f:0d:52:3f:5a:11:
                    d7:91:81:d5:eb:d6:cf:6a:8c:28:a4:8a:91:65:28:
                    86:56:09:5e:e6:7e:df:f7:e4:42:f2:40:ca:37:3f:
                    b8:89:f4:7d:8d:bf:1c:04:c9:f6:66:0d:a4:d4:8b:
                    51:24:8b:41:a9:51:2c:4c:08:a3:5e:e1:af:f0:ab:
                    fd:51:99:b2:ce:60:45:17:94:b7:e4:74:89:f0:78:
                    c7:83:1e:db:6c:3c:5e:1a:c6:35:da:e2:6e:dd:3a:
                    8c:82:f8:74:96:08:ef:bc:06:18:41:f9:9c:e9:f6:
                    30:cb:d0:41:ec:10:12:db:a3:10:e2:ca:66:61:e0:
                    b0:f5:11:10:f4:39:6f:98:21:ec:28:71:07:49:28:
                    42:52:a9:d2:2e:ee:2f:4a:e1:9d:19:e1:c2:d1:9f:
                    89:68:cc:a7:65:fc:2a:17:c7:8a:cb:4e:7c:6d:ce:
                    cf:42:fd:fc:47:03:08:3e:a5:21:a9:b5:1b:3c:99:
                    40:f8:32:21:12:1c:c4:3e:16:8c:ba:7a:a4:9a:a2:
                    f1:a4:84:6e:93:4a:fb:e7:50:db:93:24:83:29:6a:
                    2c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:3B:7B:47:10:61:F1:F1:14:FB:34:90:54:6F:11:6A:8E:AE:B6:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/e2bc6971-b9ad-3d82-a9d3-06f1bd29c205.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/53ff129b-845f-449d-8e32-2b24ecbefea4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:1D:ED:25:A1:15:F2:35:C9:47:C5:6B:9D:08:A9:BE:08:E8:35:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.65.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:5a:05:3c:51:a7:d6:3f:38:9c:09:c5:93:e5:bd:79:b3:03:
         fe:52:89:23:d0:e9:5e:40:98:63:46:62:16:b2:0e:4a:99:8a:
         a6:6b:bd:13:b5:76:e5:ad:db:8b:8a:8c:f6:3a:61:27:79:cb:
         65:b7:37:a5:db:63:55:47:e0:f1:4e:57:ef:9e:d7:31:d1:80:
         a9:d9:06:ac:54:60:84:e7:d0:35:78:8a:6c:d4:68:13:de:95:
         a7:3c:ed:9a:1f:f9:4a:6d:14:1d:6b:e9:2c:53:12:f0:a4:c2:
         af:3c:6a:bf:ca:d0:fa:63:97:ba:0d:c2:58:8e:d1:d4:48:78:
         fd:11:e6:c7:3d:8f:b7:0e:3a:a6:49:7f:fa:9d:06:9c:64:37:
         53:f3:83:69:46:9e:c4:db:38:20:b2:9a:7b:59:f6:f8:2d:db:
         8f:9a:b1:0a:76:05:91:fc:88:9b:b4:62:cd:ac:5b:76:9b:d0:
         c3:7f:7e:17:18:4f:38:32:e9:f9:93:1e:aa:4d:f5:b5:4c:d9:
         70:0a:f9:83:51:d6:06:e3:43:78:8b:01:94:78:1f:af:fc:7a:
         d0:7b:52:74:1e:3e:ed:ab:79:fb:d6:be:50:41:48:78:13:01:
         3a:72:f4:9e:a8:af:a1:31:5c:32:fb:fe:74:45:c6:5a:66:c7:
         81:62:59:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:06:04 2025 by rpki-client