Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7501a1dd-4319-41d7-ae3c-47b80ada88d5/9d53b829-9890-324f-b053-8b6944b76eb0.roa
File:                     9d53b829-9890-324f-b053-8b6944b76eb0.roa (raw, json)
Hash identifier:          go7yPQoA5OweNcheWCn760vFD3G/1Y+pskqxjoyp1gU=
Subject key identifier:   BA:6F:DD:09:57:01:EB:B3:EC:EC:29:77:AE:03:32:14:B8:CD:BC:E7
Certificate issuer:       /CN=7501a1dd-4319-41d7-ae3c-47b80ada88d5
Certificate serial:       010D0C9F4328584BBFA5A3F6D1CC3CEC6300C9C0
Authority key identifier: 10:FF:20:8D:66:BB:0C:D0:FA:54:73:55:6E:69:67:49:FE:4D:30:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7501a1dd-4319-41d7-ae3c-47b80ada88d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7501a1dd-4319-41d7-ae3c-47b80ada88d5/9d53b829-9890-324f-b053-8b6944b76eb0.roa
Signing time:             Tue 04 Nov 2025 14:00:39 +0000
ROA not before:           Tue 04 Nov 2025 14:00:39 +0000
ROA not after:            Mon 02 Feb 2026 14:00:39 +0000
asID:                     15278
IP address blocks:        216.105.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7501a1dd-4319-41d7-ae3c-47b80ada88d5/7501a1dd-4319-41d7-ae3c-47b80ada88d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7501a1dd-4319-41d7-ae3c-47b80ada88d5/7501a1dd-4319-41d7-ae3c-47b80ada88d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7501a1dd-4319-41d7-ae3c-47b80ada88d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bf:a5:a3:f6:d1:cc:3c:ec:63:00:c9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7501a1dd-4319-41d7-ae3c-47b80ada88d5
        Validity
            Not Before: Nov  4 14:00:39 2025 GMT
            Not After : Feb  2 14:00:39 2026 GMT
        Subject: CN=efb3411e-d2bf-4ce7-9257-dda4fcbd374a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:96:3b:ae:87:b8:4e:f5:78:7b:47:32:37:94:
                    34:e7:5c:6c:af:9e:6d:51:30:28:a4:b7:95:17:53:
                    03:3f:2d:00:5e:ec:34:81:18:5d:2a:99:6d:ab:e4:
                    ff:11:31:92:7d:32:2b:56:c1:b0:79:db:8d:06:80:
                    85:26:50:fb:22:dc:a6:b0:cc:56:66:ad:73:55:c2:
                    49:55:bd:57:07:e9:11:ec:1b:28:d1:88:44:6a:ce:
                    11:72:68:67:59:3d:42:b9:e6:22:b1:04:7f:0c:f3:
                    c3:3b:d9:f7:4f:45:96:e0:b8:22:7e:cd:71:55:65:
                    98:e3:73:04:26:b6:37:52:27:cb:06:5d:e0:5e:c4:
                    c9:bf:d3:58:42:8f:34:90:62:ac:d0:3a:3b:99:14:
                    ad:4e:63:b6:20:09:ac:d6:26:29:ca:da:9d:0a:49:
                    15:5b:ad:79:fe:a3:af:c8:5d:4e:07:33:20:f1:1c:
                    b9:b5:d5:a5:d1:64:1f:4e:58:ba:fb:be:e9:9a:4e:
                    cc:7b:85:cc:0f:f3:19:1e:08:ba:d5:ad:64:41:dc:
                    54:48:63:de:b9:0a:79:52:07:d4:af:5a:85:0f:ef:
                    e9:70:96:a9:59:4c:be:ea:82:13:f6:51:e8:83:15:
                    1f:30:e2:a7:3a:8a:ea:c2:f9:7d:85:11:b6:69:4c:
                    9d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:6F:DD:09:57:01:EB:B3:EC:EC:29:77:AE:03:32:14:B8:CD:BC:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7501a1dd-4319-41d7-ae3c-47b80ada88d5/9d53b829-9890-324f-b053-8b6944b76eb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7501a1dd-4319-41d7-ae3c-47b80ada88d5/7501a1dd-4319-41d7-ae3c-47b80ada88d5.crl

            X509v3 Authority Key Identifier:
                keyid:10:FF:20:8D:66:BB:0C:D0:FA:54:73:55:6E:69:67:49:FE:4D:30:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7501a1dd-4319-41d7-ae3c-47b80ada88d5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.105.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:f1:b3:65:18:18:57:e3:c5:38:23:9b:8b:ce:fa:29:ed:05:
         52:06:79:a9:d2:5e:b6:f4:db:bf:d7:43:b7:b1:6f:6e:5e:68:
         d9:dc:1d:b7:d2:e4:ad:90:e4:50:87:24:a5:aa:d9:9c:3b:0e:
         63:c2:ba:ff:b9:6f:b3:85:08:e0:25:0d:2a:ac:c9:6c:be:55:
         65:7d:86:bd:53:ee:43:76:d8:75:66:c2:71:a2:1a:35:91:d7:
         90:8a:0d:14:48:34:f0:0a:c6:3d:c2:55:88:fb:5e:1f:b1:7e:
         0a:91:28:77:ba:38:aa:85:ea:7b:be:5d:87:ae:30:44:d5:be:
         ef:23:26:29:c7:7d:48:e5:42:cc:3a:eb:b8:07:7b:a9:20:63:
         8e:3f:55:63:66:12:1e:ea:a4:10:8d:13:f8:49:cf:6c:9f:08:
         f1:1e:1f:f5:6a:77:af:24:41:88:7d:c7:69:b8:2d:d4:78:d2:
         f7:11:56:a9:b6:ef:d1:e7:28:dc:81:11:20:80:3f:44:77:92:
         f1:22:36:35:18:b5:ba:b9:b2:a5:54:36:32:18:e3:15:5f:24:
         89:36:65:2f:36:3e:09:86:e7:c3:53:bd:fc:23:f9:bf:e0:f3:
         4b:d0:18:66:c4:6d:b3:b9:e0:2f:7c:70:c4:88:06:d0:f6:38:
         90:bc:94:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:26:43 2025 by rpki-client