Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/e09c5497-2279-333f-a80e-11090886d149.roa
File:                     e09c5497-2279-333f-a80e-11090886d149.roa (raw, json)
Hash identifier:          wyBRPGJd1PfmZYF3HtnR0nXgLJAOiQ6kMukpxHLkpg4=
Subject key identifier:   16:66:54:B8:15:4D:F5:53:2E:C8:38:AB:35:DE:6E:52:B9:FF:47:1D
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584B970CF4438156E84D87F32680
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/e09c5497-2279-333f-a80e-11090886d149.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     28753
IP address blocks:        23.19.53.0/24 maxlen: 24
                          2607:f5b5:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0c:f4:43:81:56:e8:4d:87:f3:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=7c5e5c22-f9f3-4f08-a0e5-d24345988284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a6:f9:ab:df:f7:74:f0:88:31:e7:75:0b:a5:
                    ed:22:05:52:e2:08:7a:95:74:6d:ad:e0:15:37:11:
                    62:b9:9e:77:00:f8:c6:95:fb:6f:c0:a4:78:2c:53:
                    95:15:95:11:86:ab:f8:d4:8f:14:09:b9:93:1c:59:
                    83:11:2b:79:9d:55:a8:04:80:c7:cc:fb:8a:ed:88:
                    74:dc:8c:4e:57:98:99:e8:28:1f:4b:90:02:f7:89:
                    98:33:8e:48:9d:16:bd:ec:dd:8f:bf:b1:08:b3:df:
                    67:70:20:b0:1a:5f:96:9a:50:b6:aa:7e:a8:5b:a7:
                    d0:7d:68:93:cb:6c:cb:79:ba:9e:e8:92:4b:0d:c5:
                    0a:41:3d:0c:32:3f:ed:43:91:93:2d:ec:57:e7:61:
                    6b:c9:a9:33:8d:55:d3:2b:83:61:58:7d:ee:87:97:
                    74:48:ba:0e:6a:50:72:81:2f:8a:62:60:6c:3f:7a:
                    79:b6:55:f6:fd:41:84:12:bf:36:20:6a:7c:12:41:
                    de:02:17:9c:c0:24:ad:b6:94:20:f7:91:cb:d7:bd:
                    29:85:c5:06:c7:53:f9:5d:2e:a8:9f:ac:5f:92:eb:
                    94:a2:cd:a5:28:ab:41:84:75:3c:45:28:96:e0:7d:
                    a7:41:0c:3c:e8:63:77:7f:f9:9a:80:88:c3:3b:69:
                    18:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:66:54:B8:15:4D:F5:53:2E:C8:38:AB:35:DE:6E:52:B9:FF:47:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/e09c5497-2279-333f-a80e-11090886d149.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.53.0/24
                IPv6:
                  2607:f5b5:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:f0:95:5b:40:ae:38:c1:ed:29:06:78:8f:65:5f:09:03:8f:
         9f:b4:85:d1:54:60:d4:bb:f4:1a:64:47:a1:78:97:56:cc:43:
         e7:88:f8:43:37:07:68:8f:64:65:4a:39:6b:25:b5:17:83:df:
         cc:7a:9e:ed:86:e8:8d:1a:a1:57:56:37:38:01:bb:d4:23:76:
         89:0b:bd:49:97:0e:87:ca:29:f7:57:e5:64:3e:ff:9e:e7:8b:
         67:75:b9:ce:8a:3c:57:de:e9:71:5e:36:33:cb:df:19:ce:7f:
         99:16:4d:92:57:66:03:44:5b:a5:8c:0f:17:5d:b5:52:3f:f8:
         cc:0c:70:de:65:5a:a1:65:54:26:03:d8:1d:2b:75:de:17:5d:
         ee:bc:c8:cc:19:86:0c:12:2f:d2:88:3c:47:c4:b3:74:22:d5:
         35:ad:6e:67:43:c7:bf:9c:b9:e9:bc:8d:da:92:05:1d:e9:26:
         0b:e6:77:6f:28:60:0e:b8:22:e8:51:1d:e3:15:59:3d:9e:11:
         03:a1:8d:70:7f:82:5e:dc:3f:8e:b5:9b:92:63:63:cb:4c:cc:
         30:7a:c1:81:32:f5:83:b1:b0:56:e8:4b:ea:cb:3e:8f:c5:ba:
         8b:c6:3a:6f:f4:96:97:3a:05:a6:15:5e:18:51:d3:e7:01:fa:
         b6:76:94:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:44:14 2025 by rpki-client