Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/e09c5497-2279-333f-a80e-11090886d149.roa
File:                     e09c5497-2279-333f-a80e-11090886d149.roa (raw, json)
Hash identifier:          irVgC8vy7DkNiK8cv/bDEEksL+ylDggjzJqoZcdmijc=
Subject key identifier:   FB:9D:41:CB:FB:09:1E:17:D1:11:13:9C:0E:EF:CB:C9:28:A1:63:9D
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584AB650F6F434497A870A889000
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/e09c5497-2279-333f-a80e-11090886d149.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     28753
IP address blocks:        23.19.53.0/24 maxlen: 24
                          2607:f5b5:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:f6:f4:34:49:7a:87:0a:88:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=575062eb-1856-4fc8-8ee9-6d1016de446f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7c:4e:37:ce:f1:cf:5e:9a:a5:01:85:b9:70:
                    2d:43:fc:a2:35:05:3f:6d:0f:18:ed:25:5c:5c:09:
                    d9:7e:ee:b1:92:31:b8:c1:9c:7c:53:09:d4:d7:19:
                    e5:8a:ae:49:99:8d:0a:ae:d6:57:f9:13:a9:4e:b2:
                    c2:0c:5d:14:6f:00:bc:9a:37:bb:4c:26:9b:1e:19:
                    1c:83:fd:11:7b:e4:ea:65:08:8d:2f:47:87:81:06:
                    17:9b:3e:96:6a:a1:2a:3b:25:88:b7:c2:0c:dd:48:
                    ff:b5:2a:52:cc:e0:4b:8a:1b:38:e4:2b:8d:84:a8:
                    da:dd:ba:46:21:8a:ef:3c:b9:45:e0:d0:17:01:3d:
                    83:32:65:eb:c6:2f:2f:23:65:6f:27:f3:4a:26:10:
                    9a:1f:bb:57:82:40:23:d5:7a:e6:e4:a5:43:c8:4e:
                    01:df:98:10:f3:e2:16:7a:f3:de:6f:41:0c:d4:23:
                    5a:1b:24:84:9e:c7:0b:97:0e:0b:73:9b:f9:70:ef:
                    2d:08:35:5b:50:db:db:11:58:cd:1b:bd:7d:43:f8:
                    bb:a2:69:0b:81:6d:05:41:fc:61:13:b7:4e:00:f4:
                    b2:74:59:bb:b7:a9:3b:d5:30:0a:e2:f0:3c:2f:90:
                    4e:ef:c2:0c:89:3e:d3:c2:9e:ac:93:b1:6f:4c:44:
                    e3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:9D:41:CB:FB:09:1E:17:D1:11:13:9C:0E:EF:CB:C9:28:A1:63:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/e09c5497-2279-333f-a80e-11090886d149.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.53.0/24
                IPv6:
                  2607:f5b5:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:da:94:eb:a2:6a:22:ba:b6:41:08:80:a2:42:7d:74:a0:e0:
         77:16:d3:21:9e:79:26:a2:35:8f:cc:f8:30:4d:44:a8:12:e1:
         22:d3:c4:36:67:b3:da:90:fe:b3:ed:7e:c3:b5:34:80:a4:2c:
         b2:9a:e0:33:75:02:a0:a1:6e:62:a7:6a:6b:01:28:1c:50:65:
         49:e7:d8:78:c9:e8:c2:4f:61:0a:8c:5a:04:b6:58:9f:5f:62:
         f1:1a:f4:87:13:1b:e9:02:65:c2:87:c7:4a:77:d2:af:68:5e:
         a0:d0:0b:4f:fd:11:bc:af:11:b1:65:67:d5:64:08:89:ed:a0:
         54:2f:b6:1e:e3:a2:bf:56:42:80:ed:8b:01:1b:98:d7:69:6c:
         6a:30:e5:21:e7:26:ff:e1:16:09:07:0c:76:69:6d:1c:b9:3b:
         51:fa:56:9f:c2:e3:8f:00:1e:09:87:b5:68:77:18:49:ea:6c:
         7d:c5:70:96:e9:f7:56:86:0f:f3:8d:cf:4d:b8:54:dc:d9:c7:
         55:19:02:8a:04:da:6e:ad:95:1d:28:96:1a:18:28:8d:63:5a:
         86:5d:c1:23:91:5c:96:25:f6:db:7b:87:11:a7:82:17:1b:85:
         7d:de:9a:92:6a:8d:14:05:30:a8:ff:b5:35:d3:fc:c9:b6:91:
         22:61:0e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:48:14 2025 by rpki-client