Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2b2559a8-5457-356a-b9b1-c46c289e434a.roa
File:                     2b2559a8-5457-356a-b9b1-c46c289e434a.roa (raw, json)
Hash identifier:          Omc+Xle2MzIBWMufRYpmTZhE14wIGFcw3AkR0FLIPoM=
Subject key identifier:   DB:0C:69:FD:AC:A7:41:AA:F3:76:CD:A0:11:85:95:3F:2E:76:38:F3
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584AB650F71AA6F20CEFFC2005E0
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2b2559a8-5457-356a-b9b1-c46c289e434a.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     59253
IP address blocks:        23.19.53.0/24 maxlen: 24
                          2607:f5b5:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:f7:1a:a6:f2:0c:ef:fc:20:05:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=9ab90fbe-b98c-435d-b9f8-6d0e3006537e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:db:56:10:95:7c:7a:5b:b3:03:2c:68:e4:17:
                    9f:3c:ee:e3:10:5e:18:f9:a6:cf:64:8b:14:6c:6e:
                    25:9e:18:8a:a5:38:f1:47:91:1a:96:86:65:fb:2e:
                    54:f1:19:f1:2c:20:df:83:b1:ed:1c:c1:1d:06:e2:
                    f9:fb:39:4f:eb:01:9b:be:f0:4a:0d:0c:3c:87:b8:
                    bb:b4:88:60:62:69:00:26:ce:36:ab:fe:39:59:db:
                    b0:e1:ec:04:95:df:19:8d:a0:53:47:eb:e9:a7:31:
                    27:65:c8:1e:ca:1f:f5:5a:d6:c6:47:8c:d5:e5:f7:
                    ab:3a:db:7c:29:e7:f6:f1:f6:fb:23:d9:83:e6:42:
                    39:23:66:32:4d:2f:b9:e8:95:79:0c:7f:a2:eb:96:
                    e5:87:49:2f:82:da:f4:58:c7:6f:fb:88:32:86:0d:
                    34:95:74:49:e2:d1:70:33:5e:fd:33:d5:5d:f4:fd:
                    16:2d:d5:07:30:43:63:37:db:4f:b8:1b:4a:d9:a5:
                    9b:0a:5d:c7:9c:4b:e6:03:77:74:62:90:c1:29:f3:
                    8b:89:48:7c:d3:c2:ea:55:6c:8a:75:fa:e9:23:56:
                    59:12:a2:f0:da:30:ed:e4:fb:a9:ae:d0:ef:27:58:
                    cc:8e:79:b6:61:e2:d8:07:b4:09:92:43:75:f1:cd:
                    c1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:0C:69:FD:AC:A7:41:AA:F3:76:CD:A0:11:85:95:3F:2E:76:38:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2b2559a8-5457-356a-b9b1-c46c289e434a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.53.0/24
                IPv6:
                  2607:f5b5:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:1f:ca:53:e2:50:27:f5:cd:54:6e:9b:c8:20:4a:0a:53:de:
         83:4c:14:e4:d0:87:c9:10:e1:ce:35:02:21:ab:28:19:2f:ff:
         9d:4d:be:2c:fa:0f:cb:01:ca:90:00:4b:71:5f:ba:a7:64:3c:
         ba:31:1e:4d:5b:5e:25:f2:3d:f4:5a:ef:5c:3a:6f:cb:18:3b:
         86:ca:61:60:4c:f9:90:ad:b6:a7:70:af:90:6c:a4:b1:2a:03:
         a9:c2:ae:3c:2f:c1:05:32:61:4f:63:6f:80:89:40:da:ae:99:
         7d:18:71:35:90:a0:1d:2c:2e:b0:3c:66:4a:f8:0c:48:ce:5e:
         e6:7a:e0:6c:3b:98:1a:08:ee:4e:34:0b:3e:f1:d5:8c:24:ee:
         1b:19:ff:a5:29:89:9e:bc:79:e6:a8:12:07:4b:e4:7a:1e:f8:
         1c:93:59:31:89:02:fd:05:df:39:cb:19:c7:63:89:d1:1b:4f:
         70:65:93:03:0c:04:a8:3b:e1:2a:1a:d0:c9:58:70:8b:55:cc:
         01:cf:6c:37:07:d0:a9:e2:1c:d0:27:bf:0e:67:3b:b7:42:42:
         bb:b7:71:d0:56:b7:21:ff:a3:c7:6b:df:93:28:c6:7d:e1:85:
         f5:98:52:28:6b:50:77:fb:1e:2d:50:f5:34:01:52:f8:46:31:
         90:8c:c5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:08:26 2025 by rpki-client