Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/5c8b5541-b81c-355e-9b23-a80ca613a215.roa
File:                     5c8b5541-b81c-355e-9b23-a80ca613a215.roa (raw, json)
Hash identifier:          NNN4yb6PoC9RAszQN+H029rwMcbkgG+i7qfCGAMctKk=
Subject key identifier:   10:33:20:6A:1F:72:FD:95:65:65:68:0D:0D:78:BC:CE:E7:7E:77:2C
Certificate issuer:       /CN=9a52f880-7957-4bb9-b30a-78f30c289eb1
Certificate serial:       010D0C9F4328584AA42B8E30697ED1E806CF8200
Authority key identifier: A4:95:8B:E6:A3:B4:17:CC:5E:91:DD:87:95:AC:2E:7F:65:97:50:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/5c8b5541-b81c-355e-9b23-a80ca613a215.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     16611
IP address blocks:        23.153.216.0/24 maxlen: 24
                          2602:2de::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/9a52f880-7957-4bb9-b30a-78f30c289eb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/9a52f880-7957-4bb9-b30a-78f30c289eb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:8e:30:69:7e:d1:e8:06:cf:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a52f880-7957-4bb9-b30a-78f30c289eb1
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=0b64b035-b8f1-491d-8887-023b290e8aa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d3:31:54:a4:46:75:da:e0:92:8a:85:72:41:
                    f4:a4:e5:02:f7:41:0f:f5:ba:93:47:f3:71:25:63:
                    e0:6d:dc:2b:03:37:e4:9e:90:bf:6a:ed:3e:c9:40:
                    8a:ac:f3:a0:bf:65:75:a4:25:e4:62:69:43:e5:8f:
                    aa:0b:c7:5e:fc:ea:7c:eb:e7:2c:1d:4f:ea:0e:ce:
                    5d:66:ad:47:0a:58:8b:ba:2f:98:fa:a2:cc:e0:fb:
                    61:20:c7:ab:d0:7a:f0:48:0a:aa:9f:10:42:90:4a:
                    1b:67:48:ed:c5:61:53:87:9b:37:08:35:d9:51:9f:
                    ad:bd:b9:55:3a:54:96:f5:14:6d:b3:21:80:bd:ee:
                    f3:45:fa:15:c8:98:40:c6:e2:2d:58:d7:8e:f1:49:
                    d5:2b:1a:23:f8:53:48:97:ef:d5:7b:57:05:e8:63:
                    b8:5c:b3:de:54:a6:90:77:e3:11:b9:3d:6c:26:68:
                    a2:18:14:07:6e:be:49:8f:c0:90:7f:6d:95:0b:de:
                    8a:af:52:7f:02:46:b5:32:f2:7d:f1:20:9b:50:e0:
                    a3:15:e8:c7:95:0e:89:01:ee:4d:91:c6:5a:bb:e2:
                    d5:d7:67:ea:c5:90:2f:23:c1:03:56:7d:1b:7c:a3:
                    20:6d:ee:cb:2d:91:71:20:82:ed:98:92:35:f8:b2:
                    16:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:33:20:6A:1F:72:FD:95:65:65:68:0D:0D:78:BC:CE:E7:7E:77:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/5c8b5541-b81c-355e-9b23-a80ca613a215.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/9a52f880-7957-4bb9-b30a-78f30c289eb1.crl

            X509v3 Authority Key Identifier:
                keyid:A4:95:8B:E6:A3:B4:17:CC:5E:91:DD:87:95:AC:2E:7F:65:97:50:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.153.216.0/24
                IPv6:
                  2602:2de::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:83:cf:86:5c:2d:38:cf:ac:94:2f:c0:21:f1:84:b8:09:98:
         da:ab:a3:5b:d2:bb:c1:9b:99:78:28:21:5d:12:50:19:31:b5:
         4b:d0:75:5f:e3:4d:07:51:b2:12:34:cd:6b:36:72:8f:a6:69:
         4b:92:c8:aa:04:1c:85:67:b7:a1:05:a8:e8:be:d7:56:b6:a0:
         2d:66:11:cc:0b:1c:e0:24:9a:2d:4c:d9:c8:3f:5f:f4:42:28:
         6c:83:49:40:74:80:8f:8c:76:c9:7b:40:3d:8e:87:4b:84:c2:
         4f:76:76:68:b4:ad:be:d1:d3:f7:34:08:0b:8e:66:eb:00:de:
         0a:9a:cf:5a:f4:3c:bc:a0:61:10:20:50:a4:f7:92:f4:42:34:
         e8:ec:75:71:07:36:62:13:28:95:a1:7b:9b:0c:55:d1:b7:96:
         63:0a:ee:1c:8c:9c:d2:76:c4:c8:8c:ad:fa:b0:e7:f3:81:0d:
         cb:ee:57:27:dd:91:c2:dd:df:67:04:4f:24:eb:7d:df:a3:95:
         f3:0f:e4:be:f3:1c:fe:65:bc:90:4c:e9:d3:97:b7:f2:c4:4b:
         e9:2e:95:1b:2b:ea:6a:da:c9:a4:42:35:03:c2:83:45:93:72:
         a0:29:de:64:f2:65:b8:50:f6:9c:15:f1:fd:bf:10:ed:1d:f4:
         45:91:ce:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:16:45 2025 by rpki-client