Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/53331bc6-138c-3866-b898-40211d5855b6.roa
File:                     53331bc6-138c-3866-b898-40211d5855b6.roa (raw, json)
Hash identifier:          +o/qfdg74Ggx3b8czcJ4e1QryBloT2ycU+t/xENkQGo=
Subject key identifier:   A1:49:CB:88:76:46:76:19:09:E2:4C:C8:C7:46:16:69:F5:6F:CB:57
Certificate issuer:       /CN=614c4e09-0317-4410-a7a2-52c308a201b1
Certificate serial:       010D0C9F4328584A9FFBABF8FBF44399699DEB00
Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/53331bc6-138c-3866-b898-40211d5855b6.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     5511
IP address blocks:        167.100.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:ab:f8:fb:f4:43:99:69:9d:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=45737b14-0d7d-45be-af38-d426ceabda02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:99:64:f4:ea:3e:eb:c7:ad:8e:4f:e2:46:a2:
                    3d:eb:ca:ad:47:a3:ed:5b:98:ec:19:a6:a1:9e:7c:
                    3b:85:dd:41:02:43:69:c6:66:33:75:37:2c:c1:57:
                    b6:3f:ca:78:77:40:ff:30:2c:5e:f2:15:fe:40:40:
                    73:d3:13:06:c1:56:9c:a5:16:82:02:1a:a3:92:4c:
                    0d:e3:71:25:d3:b6:7a:06:9d:60:d0:e6:1b:e7:74:
                    1e:e5:e5:72:bf:69:50:ae:40:0d:e4:3e:30:43:6f:
                    98:52:3c:b9:20:39:d7:20:bc:94:72:31:fc:cb:12:
                    1c:53:04:f2:ae:2f:f5:a9:8e:ae:d6:11:65:2b:df:
                    1d:9c:3a:16:6b:6f:e7:05:f8:d0:77:cd:8d:65:06:
                    6b:44:f8:6b:ea:e1:43:b4:ff:0a:06:fc:a5:b4:56:
                    23:48:06:6e:f9:39:40:01:2c:88:b8:d1:10:8d:ef:
                    88:bb:bd:c6:be:e8:7f:b9:72:18:0c:16:de:64:b4:
                    c0:10:9c:c4:9b:b6:75:e8:41:20:d0:79:fc:63:6d:
                    b2:fa:1f:02:94:68:55:fe:60:99:92:b1:f5:66:3c:
                    ad:59:46:96:ef:fd:25:33:6f:09:b3:f6:a3:2e:1e:
                    c5:21:fb:67:21:ca:24:c4:96:f0:7c:1e:d6:bd:7f:
                    16:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:49:CB:88:76:46:76:19:09:E2:4C:C8:C7:46:16:69:F5:6F:CB:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/53331bc6-138c-3866-b898-40211d5855b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl

            X509v3 Authority Key Identifier:
                keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.100.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ea:b2:11:30:43:ed:4c:a4:13:b6:74:ca:bc:cb:f5:f7:2d:d8:
         c6:9c:4e:b4:d2:c9:cf:f7:f3:c7:08:96:1f:c9:2e:e2:10:67:
         37:7c:ce:3a:bd:4b:82:58:d2:6c:e3:cf:eb:b0:c1:fe:4d:53:
         33:71:99:2e:e4:a6:f5:11:fa:eb:cd:10:15:3b:37:f8:18:53:
         e9:e9:34:cf:30:76:26:f9:da:b3:ea:fe:a1:19:6a:c5:95:d6:
         a0:c7:62:79:2b:e6:d5:ca:a1:71:b5:ac:f9:d5:34:85:20:57:
         e3:d5:98:c9:8d:a4:f7:ae:d1:5e:71:04:d6:26:71:0b:0e:40:
         ca:0b:cc:5f:a7:cf:3d:90:74:a8:fb:e5:39:18:6e:2b:49:15:
         30:90:52:3a:14:33:b8:30:0c:34:2b:fb:db:b6:e1:f7:81:6a:
         e3:12:9e:c5:e9:ee:32:bb:bb:df:e3:fc:e5:77:58:d6:b4:7e:
         62:a9:56:c2:ff:eb:55:80:8c:94:c8:a5:08:ab:2e:71:94:92:
         65:63:00:30:2c:39:3f:07:a7:84:d8:3c:69:b3:0e:a7:ea:ff:
         ba:53:5a:f1:26:1d:98:87:ef:f9:be:c8:98:0b:6c:13:42:12:
         fc:15:68:d8:71:42:fc:c9:a2:11:90:d0:f1:69:3f:ac:28:bc:
         d0:e0:0e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:10:26 2025 by rpki-client