Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28435e18-3998-3b9c-8c0f-c492e6429b55.roa
File:                     28435e18-3998-3b9c-8c0f-c492e6429b55.roa (raw, json)
Hash identifier:          zJjU+SaLlVj/j/WonXS4KXU6QMcqbeq8inY7puHl4io=
Subject key identifier:   3D:BB:34:E6:62:72:B2:35:23:C6:0F:09:E4:44:BD:F3:C8:C9:EB:64
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B196C184ED4AB95997FB46400
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28435e18-3998-3b9c-8c0f-c492e6429b55.roa
Signing time:             Sat 06 Sep 2025 01:00:33 +0000
ROA not before:           Sat 06 Sep 2025 01:00:33 +0000
ROA not after:            Fri 05 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        24.56.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:19:6c:18:4e:d4:ab:95:99:7f:b4:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  6 01:00:33 2025 GMT
            Not After : Dec  5 02:00:33 2025 GMT
        Subject: CN=00c4e269-d0b0-4ba4-ad76-2235dd0dd927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:47:00:41:37:9c:0b:c6:d3:f2:b6:cb:95:57:
                    32:a1:a0:5a:e8:f1:8f:41:81:bd:6e:4f:f6:79:cd:
                    42:d7:e6:b1:06:a9:97:66:ce:95:b9:98:cf:21:93:
                    39:90:99:fa:ef:ff:18:7c:e6:36:75:c0:a9:a2:e2:
                    58:de:b2:86:1d:31:1e:a5:23:64:a7:cf:59:6d:30:
                    64:bb:2b:19:cb:8b:32:5f:6c:57:0a:86:35:4b:7c:
                    4f:9d:f5:66:02:cb:0c:e7:2c:df:3e:64:c5:ac:a3:
                    3d:ad:0a:9d:4f:54:9e:86:18:9a:3d:30:12:ed:dd:
                    31:e7:bb:36:5b:0a:ca:5a:7c:3a:db:12:46:26:89:
                    77:9a:9e:77:fb:67:82:7a:bd:d5:d8:f6:28:94:b4:
                    f0:1a:6d:b5:3d:47:70:30:04:cf:29:9b:cc:e7:75:
                    12:fc:45:17:4a:60:8c:e9:60:bc:55:8a:49:7b:4a:
                    b7:f7:c2:53:08:94:7d:e2:9b:2a:ee:e5:e2:7e:20:
                    45:bd:44:bb:fb:95:e1:63:c4:4a:e5:2d:a8:a0:4e:
                    9b:aa:9c:29:79:7f:7e:5e:7e:73:c2:78:88:bb:f2:
                    4a:4b:5b:60:9e:b8:11:bb:ff:ef:f6:87:7e:ac:47:
                    c3:b3:e3:9d:4d:06:8d:2f:4d:39:d3:7f:b7:a2:4f:
                    f2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:BB:34:E6:62:72:B2:35:23:C6:0F:09:E4:44:BD:F3:C8:C9:EB:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28435e18-3998-3b9c-8c0f-c492e6429b55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.56.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:db:b1:d6:e6:ca:55:1f:1a:48:4c:5e:96:7c:e1:5a:41:b3:
         bd:d3:f4:8c:68:18:3c:7d:7a:db:ea:ca:3c:fb:c4:f5:ff:aa:
         23:3f:64:6d:96:69:7c:b3:5d:a9:8d:f7:b0:97:1a:31:f9:36:
         21:36:b4:ca:01:c0:cb:0b:e5:9d:47:66:23:99:b0:1a:80:88:
         25:9c:c0:9c:8f:5e:d3:87:b6:7e:b5:23:27:06:43:ab:84:6b:
         71:02:86:1c:30:d7:ee:69:16:62:b5:93:7d:ad:fc:12:0c:69:
         f8:57:e5:09:e2:2f:c3:4f:aa:8b:21:b4:00:d2:6f:46:cd:64:
         97:5d:f9:e4:50:45:d1:ca:b1:eb:f0:1b:af:1b:81:e7:95:6a:
         50:67:02:8f:42:79:f7:9f:58:1c:3e:28:af:dc:d4:ed:10:24:
         cd:c5:3c:1d:66:e5:19:38:49:bf:51:2d:ee:78:c3:bd:f2:e0:
         5e:ad:49:9b:cd:0a:8f:ac:a3:0e:53:aa:b4:88:96:d0:1d:a4:
         a8:88:7a:89:d1:4b:03:62:e0:d2:f3:e4:b1:83:17:4e:6e:c8:
         5a:af:ad:f8:33:ae:99:80:6b:db:02:cf:fe:48:f4:11:b8:b9:
         cb:68:60:2e:f3:bf:6f:59:90:94:43:32:02:e6:46:b2:f8:13:
         93:17:bc:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:33:33 2025 by rpki-client