Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ce28e6f-b3a0-32d0-9520-cf046430ba67.roa
File:                     4ce28e6f-b3a0-32d0-9520-cf046430ba67.roa (raw, json)
Hash identifier:          HaBFm/htt/nEMaTzUFIXka7g7PuYHxWPQJpbs9UBmRk=
Subject key identifier:   CD:90:A1:FB:A4:13:98:45:AC:BC:71:C7:12:6F:19:FF:A9:B6:4A:D9
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584B64CD55D4792E5E072F36D380
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ce28e6f-b3a0-32d0-9520-cf046430ba67.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     15169
IP address blocks:        173.194.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:55:d4:79:2e:5e:07:2f:36:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=0fe2cc3b-1ab6-435c-9b7b-f89a7f276c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ef:40:9d:f6:f5:d7:30:dc:76:9b:dc:fc:08:
                    6e:83:7f:c1:bb:0a:6b:0f:39:33:6b:c9:05:f8:7e:
                    79:e7:c7:89:ad:4c:37:12:91:bc:ca:40:81:44:c8:
                    d7:6d:4f:98:72:84:91:bb:c9:90:96:a1:85:a0:57:
                    55:6f:90:dc:ab:71:53:88:7f:21:dc:66:86:0f:aa:
                    6d:c0:31:b7:ea:0d:ee:39:3f:1d:b3:d4:78:23:bc:
                    95:95:f7:ea:f0:87:60:df:46:dc:0e:32:5c:4d:fa:
                    d8:df:42:b0:44:73:b0:cc:73:c7:72:fd:f4:2a:72:
                    d4:9c:2a:f6:db:6f:9f:c2:a8:6b:99:78:f4:29:52:
                    2d:9f:28:23:49:b7:bf:8b:02:88:23:cd:8b:76:ac:
                    78:56:1c:fb:07:88:c3:7b:e8:f4:15:ee:d2:6d:42:
                    0a:e1:32:5f:4e:2f:9e:71:7c:3a:54:60:66:c0:31:
                    fb:bd:d1:1f:e0:90:d2:44:15:21:2f:5e:9f:c1:ac:
                    46:6f:f4:83:50:9d:95:27:8e:36:86:62:fe:2e:d2:
                    dc:db:ea:c4:04:ab:31:69:6b:61:02:1f:e4:16:92:
                    5e:88:51:a4:c4:b4:00:10:5a:58:f6:76:4d:3b:4e:
                    11:1d:0c:00:ca:02:2b:8c:18:ae:1a:13:68:f3:26:
                    be:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:90:A1:FB:A4:13:98:45:AC:BC:71:C7:12:6F:19:FF:A9:B6:4A:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ce28e6f-b3a0-32d0-9520-cf046430ba67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.194.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:9f:8b:b2:aa:40:82:b2:c6:ef:d9:57:c8:68:24:02:33:28:
         b4:67:7d:eb:67:c9:00:35:bb:33:3a:2a:eb:0d:7c:81:52:db:
         65:d8:52:b1:f7:29:57:b0:a1:52:c2:e1:72:0d:fe:16:57:97:
         09:59:86:af:3c:05:14:41:74:f4:da:9e:59:11:94:ae:90:88:
         a3:ba:aa:11:ac:a0:60:6b:18:0b:58:95:f4:65:c8:6b:5d:a5:
         6f:00:50:74:4b:e9:1e:17:69:c5:64:f8:4f:3e:8a:f7:39:45:
         ab:67:f9:e3:c1:df:c9:df:fe:92:df:69:e5:3f:2d:8d:3c:13:
         10:0f:e9:6c:9a:51:90:0c:6b:0f:50:7b:c0:a5:a4:e7:c3:fa:
         9f:9b:65:18:10:c0:c2:8c:f9:60:04:08:6e:bb:de:04:eb:e4:
         f5:d9:a2:d9:e9:a5:e5:83:e0:b2:03:04:7d:37:ea:6d:77:59:
         b7:bd:be:26:c2:74:2c:5c:55:b8:e2:68:c0:77:14:89:ac:bc:
         d5:41:03:b4:a2:89:45:e4:f0:51:7b:13:27:08:10:bb:fc:ce:
         90:69:b2:0c:89:4b:5a:74:ef:71:46:7d:e3:fd:b0:24:83:71:
         98:07:4b:fb:60:45:63:eb:f5:af:3d:53:8a:c5:5d:c8:49:cf:
         f3:2e:8c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 08:45:02 2025 by rpki-client