Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/dcf15059-d931-3160-9874-4ac8df593854.roa
File:                     dcf15059-d931-3160-9874-4ac8df593854.roa (raw, json)
Hash identifier:          AJJGlRCp1btYuPEG4wPYlXX479HcABdwp7ncmSzi+r4=
Subject key identifier:   0F:DD:87:22:3E:CB:4C:54:95:74:B7:A8:F3:DC:9D:C8:B7:C7:BA:A4
Certificate issuer:       /CN=5d613e84-be93-4d7a-a56c-57a378f2c325
Certificate serial:       010D0C9F4328584BB88D21AB4662CB1CB007E900
Authority key identifier: 83:D9:7E:E5:89:0D:94:72:A3:71:AF:6B:D0:14:D0:CC:74:D3:1D:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/dcf15059-d931-3160-9874-4ac8df593854.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     23188
IP address blocks:        104.153.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/5d613e84-be93-4d7a-a56c-57a378f2c325.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/5d613e84-be93-4d7a-a56c-57a378f2c325.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:21:ab:46:62:cb:1c:b0:07:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d613e84-be93-4d7a-a56c-57a378f2c325
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=52741011-35a9-4f0f-9925-524f4c683fe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f2:83:13:35:c4:e4:ef:3b:7a:1a:e5:27:80:
                    8f:fe:66:2d:6b:0c:c6:f4:42:a1:73:b5:85:a2:0c:
                    26:f4:ef:0f:df:6c:c2:c1:d0:e7:62:2c:7b:f8:94:
                    73:15:b9:51:c9:3e:e7:79:2b:af:6c:4b:69:97:73:
                    1c:aa:96:f0:44:58:2e:64:43:59:87:d3:6d:58:a8:
                    9a:d2:40:a7:d5:18:36:fc:68:de:c1:10:d1:ae:5f:
                    3b:1f:d7:5e:29:de:3e:9d:78:9f:57:b8:9a:57:c7:
                    46:4a:59:90:fa:10:d8:98:d2:4c:7b:2b:48:a9:d2:
                    9f:66:b2:1e:8f:53:e3:b0:c0:5f:83:6d:be:0f:94:
                    87:b7:a9:30:ba:ca:9b:cc:25:9d:e5:16:c5:06:82:
                    66:c6:bc:d6:9a:31:f3:16:b5:7c:5d:d3:bd:66:39:
                    27:63:b2:d8:ce:90:73:48:93:02:00:c4:58:bf:93:
                    06:ad:ce:68:37:c7:7c:27:dc:01:d2:bf:a9:fa:2e:
                    80:7f:6a:79:17:51:03:ba:0f:94:60:f6:f3:31:9b:
                    e3:14:ed:4f:bc:35:5a:1a:2c:7e:9a:59:c5:1a:58:
                    76:73:1b:dc:11:c6:d5:75:0e:96:3c:32:67:56:a7:
                    8f:fa:ff:ae:21:43:ac:a1:1f:d5:f5:eb:71:66:e5:
                    09:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:DD:87:22:3E:CB:4C:54:95:74:B7:A8:F3:DC:9D:C8:B7:C7:BA:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/dcf15059-d931-3160-9874-4ac8df593854.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/5d613e84-be93-4d7a-a56c-57a378f2c325.crl

            X509v3 Authority Key Identifier:
                keyid:83:D9:7E:E5:89:0D:94:72:A3:71:AF:6B:D0:14:D0:CC:74:D3:1D:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.153.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:3a:2d:97:36:66:2e:24:50:7b:c4:75:8f:d6:2b:46:18:07:
         0b:5c:20:83:50:b0:6e:e3:77:5f:59:88:20:c5:24:e6:51:a6:
         08:00:2a:84:ca:9a:46:26:1a:b6:eb:74:33:1f:3a:93:c5:86:
         c0:c3:7c:9a:76:3d:56:86:95:c8:df:32:41:ec:c2:f8:3b:b9:
         a7:04:d2:68:b2:09:2b:c7:5e:26:df:19:3d:55:e1:45:2a:65:
         20:18:63:a0:69:3a:50:fe:36:45:02:c2:32:50:ae:0c:4e:7a:
         81:2b:b8:7f:f3:bd:5f:72:75:dc:03:2d:94:e7:3a:c4:0e:98:
         b5:bc:85:be:4e:b7:92:54:26:cb:11:4d:83:34:91:b8:7c:7e:
         80:93:3d:6e:18:3b:de:00:26:a8:31:6a:d1:da:fd:6d:fd:a3:
         88:35:6b:7f:47:ad:a3:c7:15:3e:19:15:f8:b2:6e:b2:3f:95:
         46:3d:7f:4d:48:3e:be:d5:11:81:e4:c4:0f:93:b3:6b:53:87:
         9f:01:e3:47:ef:27:3f:84:41:ce:84:b1:43:5e:d7:4b:54:16:
         8b:72:c3:32:74:3d:37:52:25:02:11:20:11:ce:46:73:d8:79:
         d8:52:f4:97:77:ff:1d:2f:63:bf:19:33:0b:4c:cb:51:d2:7e:
         f5:c3:a4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:04:42 2025 by rpki-client