Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/7b4cebea-3564-3ced-b43f-9712c6e282a5.roa
File:                     7b4cebea-3564-3ced-b43f-9712c6e282a5.roa (raw, json)
Hash identifier:          cCKZhWl2vKf8xqN5N6V90pEzPq9PY5Jha3eOBeQ3x7A=
Subject key identifier:   93:B8:28:9C:64:8F:34:D2:34:06:A3:0F:23:B9:E3:C3:0C:44:D7:E7
Certificate issuer:       /CN=553f7a6d-a8af-4a8d-94c5-858b0b23ab9a
Certificate serial:       010D0C9F4328584AA42B744374FCF22886748780
Authority key identifier: 2E:15:F5:D4:69:C6:E2:78:C0:E1:5D:15:43:02:AF:9C:83:71:BA:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/7b4cebea-3564-3ced-b43f-9712c6e282a5.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     1054
IP address blocks:        216.40.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:74:43:74:fc:f2:28:86:74:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=553f7a6d-a8af-4a8d-94c5-858b0b23ab9a
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=460e9c9f-cfef-4f49-acc1-5ffc9dff4a67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:cd:61:bf:68:10:d7:ea:cb:bb:80:72:e5:55:
                    ea:1a:fb:38:07:c6:6b:04:56:30:b7:80:71:f9:31:
                    95:17:bd:16:d5:49:44:9a:c3:7e:8f:a7:5f:fd:d4:
                    2b:3b:81:3d:77:86:89:7d:14:97:b9:aa:3d:ae:9c:
                    84:9e:74:5c:70:3b:1c:dc:8d:d1:fd:09:45:63:30:
                    0f:62:e3:fd:37:0a:9f:19:5a:cb:d5:f8:8c:d0:b9:
                    ce:1b:25:46:1d:07:b6:6d:86:64:60:19:3a:99:3c:
                    af:9b:ff:11:17:e8:a6:a5:76:73:e2:b4:1d:0f:bf:
                    4e:61:20:e3:82:76:78:b8:88:a5:5e:c9:7b:3f:61:
                    5c:a0:ec:5b:88:b8:56:98:ae:14:da:14:5d:24:a0:
                    a3:51:54:9c:ca:7d:8d:9a:43:57:b5:bf:48:47:6c:
                    8b:c8:c0:2d:1e:79:05:01:cf:55:eb:d8:7d:c5:c8:
                    93:32:c8:f4:45:36:59:7b:cd:81:1f:7c:c5:9a:4e:
                    98:12:9f:9b:63:3d:4c:9b:da:98:c4:82:33:f2:38:
                    52:86:42:f6:64:2f:90:2f:56:26:af:34:b8:c6:02:
                    9b:d5:49:d2:2c:14:42:7d:2e:c9:bc:bb:e3:68:ed:
                    85:ab:d7:0a:d1:ab:0d:e8:78:19:6d:6f:ad:12:1e:
                    35:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B8:28:9C:64:8F:34:D2:34:06:A3:0F:23:B9:E3:C3:0C:44:D7:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/7b4cebea-3564-3ced-b43f-9712c6e282a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.crl

            X509v3 Authority Key Identifier:
                keyid:2E:15:F5:D4:69:C6:E2:78:C0:E1:5D:15:43:02:AF:9C:83:71:BA:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.40.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:a4:4a:fe:ea:bf:3c:6f:c0:a4:92:82:22:dc:54:cc:ba:48:
         4e:f4:43:e4:98:ef:f7:b9:8c:cd:11:5a:1d:62:b4:e7:95:b5:
         9f:1e:8b:18:ee:b8:c3:b8:91:41:56:fa:fd:6e:8e:fa:03:4a:
         5c:f3:a7:bf:5a:db:15:ce:03:55:bf:79:a9:7a:75:ab:91:fe:
         59:6f:d8:5a:c7:31:cf:71:1b:52:7e:0f:71:0c:4c:15:f2:8f:
         87:34:cf:f9:b1:fa:94:5b:2b:fd:08:cb:42:50:65:9f:dc:13:
         e4:f8:07:0f:ac:17:80:a4:a5:8b:da:6c:d0:7b:48:b3:aa:47:
         5c:da:44:34:2f:09:46:2b:9a:52:03:dc:50:25:30:dc:1b:03:
         7d:4d:3b:d8:ff:85:67:5c:6a:bc:d8:23:8d:f9:64:e9:40:c2:
         cc:9f:84:00:15:b0:8b:52:6a:01:96:3f:8b:83:6c:3a:53:c9:
         d6:1e:d4:b8:b7:50:72:75:32:e0:78:b7:53:73:84:df:55:00:
         8f:27:1e:79:a1:27:32:a1:95:90:1b:d1:3e:8d:82:0f:95:6b:
         0c:f0:9e:2f:5f:e3:35:7c:eb:2c:a3:b6:df:fa:58:86:da:60:
         75:0f:37:72:2a:0e:c8:78:84:f0:3b:f7:e0:f6:cb:56:d8:53:
         16:4e:48:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:50:16 2025 by rpki-client