Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/53ba14ec-84a6-38f5-af8b-c9b61e8caf3a.roa
File:                     53ba14ec-84a6-38f5-af8b-c9b61e8caf3a.roa (raw, json)
Hash identifier:          Futc5Z+H/TSTPXhD3YypaV3V2OMgLJNnQMyq36K+q2k=
Subject key identifier:   5C:4C:F6:1A:99:3A:2F:09:49:C6:D0:FF:48:4C:23:53:98:1A:74:88
Certificate issuer:       /CN=55feeaf5-abfd-4f9c-9707-9236ce5397bd
Certificate serial:       010D0C9F4328584B6201EE180ADA65E61CF74A40
Authority key identifier: C9:EF:4B:01:33:02:5C:34:66:53:86:01:A7:05:AC:03:48:05:9A:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/53ba14ec-84a6-38f5-af8b-c9b61e8caf3a.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     11272
IP address blocks:        198.28.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:01:ee:18:0a:da:65:e6:1c:f7:4a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55feeaf5-abfd-4f9c-9707-9236ce5397bd
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=466b95ad-ca09-4ece-b989-b3f17f1d83da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:15:8b:61:48:88:2b:77:3f:e7:a2:cd:a3:26:
                    0e:c7:02:d9:4a:53:af:64:bc:25:23:5f:a4:7d:e1:
                    aa:32:49:4a:9d:50:13:ef:8f:68:61:10:ad:5b:ae:
                    9f:85:17:33:7a:32:3c:a3:5e:ea:0c:bb:b0:1d:bc:
                    2a:7a:57:12:97:e1:dc:56:d1:d8:6a:cd:0f:b8:55:
                    38:65:03:76:9a:bc:fe:48:e1:05:58:06:d2:54:6c:
                    43:33:d4:5a:38:f4:32:a4:a7:65:fe:7a:23:78:67:
                    bb:ff:6b:70:e7:a0:e8:17:2b:cd:0a:91:eb:06:b2:
                    20:61:75:69:d9:1c:ed:87:df:2f:c0:c4:b6:0c:ca:
                    52:34:f0:13:60:72:be:98:94:fb:24:61:90:83:72:
                    50:c2:11:60:4c:8c:0d:78:01:79:00:38:e5:e6:5d:
                    b3:d3:8d:fe:36:c2:6d:3e:38:c8:90:29:dc:59:86:
                    f7:0a:f8:ad:f4:c9:a4:ba:3c:16:4b:ee:ef:70:f2:
                    eb:95:6f:9a:78:bc:61:7f:d1:02:03:8c:74:6a:ae:
                    5c:49:fc:c5:d2:91:33:af:71:34:a4:83:59:fc:e5:
                    46:28:94:b0:98:82:43:f6:20:06:65:9d:7c:fa:40:
                    d3:22:a8:bc:a4:47:a9:af:0c:93:db:26:03:04:03:
                    dc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:4C:F6:1A:99:3A:2F:09:49:C6:D0:FF:48:4C:23:53:98:1A:74:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/53ba14ec-84a6-38f5-af8b-c9b61e8caf3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.crl

            X509v3 Authority Key Identifier:
                keyid:C9:EF:4B:01:33:02:5C:34:66:53:86:01:A7:05:AC:03:48:05:9A:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.28.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:99:aa:8f:dc:ce:f5:08:0c:2e:1b:a5:66:26:68:3d:b3:cf:
         69:e5:65:77:42:26:44:a2:07:76:cc:04:2a:5e:90:ef:77:94:
         a0:e6:d8:90:81:1b:b7:94:3a:8f:20:92:33:90:56:c2:6f:8d:
         d7:00:66:f4:ad:ae:22:12:a5:51:a8:cf:39:06:0a:39:20:f0:
         a0:30:fe:a6:7e:15:00:e7:ff:6e:36:54:b1:33:f3:ac:2a:7c:
         d6:82:71:f2:55:c8:2c:45:1c:34:8b:f9:7e:8f:39:97:fc:a8:
         3b:40:7b:83:2c:eb:7e:55:95:08:00:1d:21:a8:89:ed:73:27:
         be:ef:2c:06:a7:71:08:e2:58:9e:e0:aa:65:48:f2:44:71:4e:
         5b:b9:e8:30:cd:f6:d5:7a:91:43:27:6e:11:4e:14:30:9e:f6:
         ab:13:07:38:75:2c:b5:8b:7f:50:7c:f6:e3:46:39:9f:6f:dc:
         cf:24:4b:44:de:43:30:42:3c:5c:e9:e2:1d:c4:70:f5:fd:f9:
         ff:93:89:49:07:34:79:92:83:ce:d0:1b:72:0f:ae:45:88:fc:
         0a:cd:17:43:63:66:2b:4f:13:27:42:31:62:63:8f:e6:bb:b6:
         8e:39:c8:c8:38:21:fd:d1:7e:4f:27:a6:d4:b9:9b:52:30:59:
         99:0c:af:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 09:30:04 2025 by rpki-client