Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53fc5801-ba96-3702-954a-355180a94993.roa
File:                     53fc5801-ba96-3702-954a-355180a94993.roa (raw, json)
Hash identifier:          ftojqvgrdmVQr+TA68UdXSJmdE2VTRgS1fZ4vycLbcY=
Subject key identifier:   F0:D9:38:13:1F:BF:8D:DA:E1:FF:83:7A:BE:F1:F9:50:5E:12:87:F7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A8DA2F0F4456D8BCB3C700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53fc5801-ba96-3702-954a-355180a94993.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33668
IP address blocks:        69.137.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a8:da:2f:0f:44:56:d8:bc:b3:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=597388f4-9443-4928-86ef-37df84d2b3fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9f:1b:95:1c:de:d3:bd:41:4f:48:77:d0:c8:
                    00:12:62:6f:80:1a:00:75:af:9b:d2:30:e2:09:78:
                    7f:21:08:9b:b0:5f:50:d2:17:46:31:9d:b8:5b:07:
                    c6:ab:19:30:be:ed:43:83:83:85:41:d9:ec:86:a9:
                    6c:f4:de:e9:af:2e:e6:ea:e6:48:c1:37:40:9f:37:
                    8f:94:f5:f2:20:3f:4d:de:a0:b2:d5:70:90:9a:34:
                    48:a9:4b:c2:17:b4:27:0c:7e:1b:cd:8c:e0:dc:75:
                    98:ac:10:d6:b7:8c:2d:eb:fe:bd:1c:c5:73:8c:f5:
                    4a:fb:f9:00:05:e2:1c:9d:2a:e9:ec:9c:97:c4:51:
                    65:05:96:83:a8:18:40:21:22:63:f4:6b:0e:23:f8:
                    45:aa:71:79:27:be:d0:b7:95:b0:8a:a1:c2:3f:fc:
                    4c:af:fa:d2:92:b4:72:99:83:1c:6d:9a:ea:80:c0:
                    35:28:d8:a2:34:cc:86:3c:b3:eb:03:0f:2c:58:2e:
                    be:5b:d7:bc:c2:80:87:e2:23:bc:9b:2b:3d:da:ad:
                    4b:04:f3:2d:0f:56:0b:44:00:db:53:73:70:95:64:
                    19:a7:2e:58:14:4b:3f:d0:b4:17:12:51:60:ae:5d:
                    47:cd:20:c7:e4:31:ed:04:b5:2c:30:e6:0c:44:90:
                    74:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D9:38:13:1F:BF:8D:DA:E1:FF:83:7A:BE:F1:F9:50:5E:12:87:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53fc5801-ba96-3702-954a-355180a94993.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.137.214.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:9b:ce:70:ca:18:7c:cb:39:23:3e:67:f4:93:8e:14:94:85:
         22:a3:42:ac:a1:02:05:a2:ee:ac:37:8a:33:14:b8:c9:d0:3e:
         fe:4e:7a:ef:c4:d7:e0:1d:4a:aa:3b:8c:80:65:ff:cb:09:54:
         0a:c8:16:67:ba:4c:ad:cb:af:91:b7:78:71:af:a5:03:17:10:
         e9:8d:98:63:ec:96:a9:5f:2b:0c:ae:4a:7d:a1:4e:57:62:13:
         dc:20:23:c8:c3:68:61:77:8c:d6:fc:74:48:c2:b1:77:7e:21:
         e2:ba:37:d3:d7:82:9b:a5:0d:bb:bd:51:1b:35:d2:8e:10:88:
         cb:f5:85:b9:1c:43:d9:2d:a3:42:eb:84:e6:88:e9:0a:9b:69:
         b8:fb:08:49:43:bb:e9:2a:bd:5d:3c:26:a8:13:25:fa:f2:63:
         7f:06:21:20:0b:0b:e9:1c:7e:76:6b:3a:6c:a4:7e:8b:f0:d8:
         0d:12:aa:a8:1d:1d:ba:fa:03:82:ca:19:d4:0f:85:46:a4:db:
         ab:4b:9a:77:7f:ad:c6:94:7c:44:af:30:8a:32:1f:19:7b:9e:
         e9:df:ee:2d:92:4a:af:e5:cb:22:11:e6:44:aa:92:e5:22:89:
         02:b1:9d:ff:dc:ee:af:05:29:1c:da:3b:bd:24:f3:83:fe:fb:
         b4:1b:7f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 19:45:11 2025 by rpki-client