Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/5aed8da3-b3dc-381f-914f-0c94d970bb74.roa
File:                     5aed8da3-b3dc-381f-914f-0c94d970bb74.roa (raw, json)
Hash identifier:          vU87oFDfeUrr2QJrNN79vO+qNFYuwJJEm08tpbMkJQY=
Subject key identifier:   98:67:92:A3:A2:B6:7B:FC:65:6F:6E:DE:F5:16:6C:6F:59:05:9B:8C
Certificate issuer:       /CN=c25f4d8e-220d-4b21-a8f8-57ed91ba86e4
Certificate serial:       010D0C9F4328584B515FF08293F18EBEFB940D00
Authority key identifier: 2C:C0:07:1C:5C:33:67:A4:13:81:79:3E:96:B7:15:D9:B3:7B:2E:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/5aed8da3-b3dc-381f-914f-0c94d970bb74.roa
Signing time:             Fri 26 Sep 2025 02:01:29 +0000
ROA not before:           Fri 26 Sep 2025 02:01:29 +0000
ROA not after:            Thu 25 Dec 2025 03:01:29 +0000
asID:                     21507
IP address blocks:        153.54.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:5f:f0:82:93:f1:8e:be:fb:94:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c25f4d8e-220d-4b21-a8f8-57ed91ba86e4
        Validity
            Not Before: Sep 26 02:01:29 2025 GMT
            Not After : Dec 25 03:01:29 2025 GMT
        Subject: CN=f313794c-1632-456e-8053-08f22942bfab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:21:a3:27:56:2e:bb:a0:d1:18:c3:40:f1:17:
                    a4:ff:01:b0:7f:71:14:fd:06:ad:3a:cc:76:a6:eb:
                    18:af:8d:54:6d:80:58:0f:3c:4d:36:f4:a7:ca:3c:
                    3f:3a:ee:1b:88:3c:c7:7c:f2:23:d3:aa:c5:04:8b:
                    9a:79:04:6a:fb:89:0f:19:79:74:74:3b:2c:d4:23:
                    32:5d:3a:ab:a9:33:e2:06:df:00:47:d1:3e:96:fe:
                    30:b9:98:cc:ad:cd:77:98:79:be:96:9f:7b:c0:48:
                    a7:34:d8:0e:be:20:de:29:eb:e6:7f:2e:fe:9e:bf:
                    ea:70:3f:84:38:0c:63:23:40:29:c5:45:7e:98:bc:
                    19:5f:a3:3a:fe:c0:41:02:e5:73:7d:54:41:f0:94:
                    87:d1:3b:27:84:0a:e4:08:c1:dc:13:11:9a:71:82:
                    ce:75:9a:56:91:9d:4f:85:7b:6e:6e:4d:d9:1c:81:
                    55:b1:36:f3:04:76:6a:8a:cc:09:da:a7:24:2d:69:
                    f2:2e:f2:d7:ec:2d:08:29:44:fe:8d:9b:63:25:91:
                    46:36:6d:70:61:e9:61:fb:70:0c:f1:ed:1b:82:50:
                    03:18:c2:ce:b0:cc:52:4f:90:92:99:e0:67:69:4e:
                    fc:32:59:6e:37:d0:f1:c9:48:5d:be:ad:81:9e:10:
                    b2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:67:92:A3:A2:B6:7B:FC:65:6F:6E:DE:F5:16:6C:6F:59:05:9B:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/5aed8da3-b3dc-381f-914f-0c94d970bb74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.crl

            X509v3 Authority Key Identifier:
                keyid:2C:C0:07:1C:5C:33:67:A4:13:81:79:3E:96:B7:15:D9:B3:7B:2E:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.54.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:8f:72:af:7d:f3:fb:fc:c3:27:a3:65:c2:b3:b8:b5:16:1d:
         1c:b4:0a:00:d9:d5:b7:51:b0:ba:b2:52:4c:19:af:f7:03:16:
         c6:61:9d:65:57:d6:15:91:2c:b0:4c:2b:f3:72:4a:94:0d:81:
         42:3e:67:df:05:a6:d1:8b:37:6c:fa:2f:59:1a:e6:ef:8a:94:
         88:92:71:51:64:0b:e4:22:fe:6c:d0:d3:44:d9:1c:af:8b:20:
         fd:a0:91:ad:e9:4f:ac:c6:f8:96:69:2c:f4:1b:81:4d:68:09:
         32:53:7d:34:18:66:e4:a8:d9:b5:53:cd:78:7f:e1:b8:c9:71:
         6d:56:5f:b1:42:b4:54:a0:53:81:56:e5:0c:4f:f8:23:5d:3b:
         e5:70:e4:25:d8:26:f3:f8:1c:c1:82:89:c1:d7:e0:aa:08:f6:
         13:0e:b3:68:0d:1b:01:06:a4:a5:b5:de:5b:f7:d2:fe:70:9d:
         f5:04:c4:56:e4:b1:eb:20:d1:85:be:55:3f:37:98:6a:89:a7:
         76:87:30:e3:41:6d:3b:6b:cd:25:ca:29:97:81:a1:e3:3d:da:
         52:e5:05:da:f9:f6:1f:e7:08:96:8a:02:34:63:02:11:5c:9a:
         04:b1:d5:ca:2b:5a:a0:b4:20:5b:85:0b:23:89:53:b5:79:66:
         5e:2b:20:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:30:09 2025 by rpki-client