Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/53e667fc-0a92-3242-9239-4c97251be084.roa
File:                     53e667fc-0a92-3242-9239-4c97251be084.roa (raw, json)
Hash identifier:          dvzJjicrQ2TtPChJbt+DibMPYfy7CM9+KPgUHyDq6zU=
Subject key identifier:   A2:65:1A:74:54:81:B9:E7:0F:60:A9:EA:50:10:62:E6:FC:31:EC:DB
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584B5E249DB7441B78004B7FEF00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/53e667fc-0a92-3242-9239-4c97251be084.roa
Signing time:             Tue 30 Sep 2025 15:47:28 +0000
ROA not before:           Tue 30 Sep 2025 15:47:28 +0000
ROA not after:            Mon 29 Dec 2025 16:47:28 +0000
asID:                     0
IP address blocks:        154.31.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5e:24:9d:b7:44:1b:78:00:4b:7f:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 30 15:47:28 2025 GMT
            Not After : Dec 29 16:47:28 2025 GMT
        Subject: CN=20cf333c-cccf-4836-abd1-3a154efa1e7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0f:f0:37:24:a1:a2:c8:2f:90:00:e8:da:8a:
                    34:49:cb:48:51:7a:e2:67:93:3d:83:f2:82:61:c1:
                    0b:5a:5b:33:c7:83:2e:c1:ab:25:31:a7:ab:3b:81:
                    17:6d:2b:c2:87:89:44:5b:58:8c:0c:ed:ac:89:74:
                    55:bf:7e:77:51:05:2c:36:cd:5d:2d:a1:fa:2b:48:
                    da:49:be:f0:f3:07:ac:17:ad:45:16:68:f9:ee:aa:
                    54:8c:77:a3:ec:de:37:ac:92:71:3c:5d:06:57:3e:
                    6b:9f:31:35:d1:28:d7:88:c3:42:cc:fe:e6:ef:30:
                    74:e6:ea:3d:ba:ac:17:1d:08:fd:9d:c9:54:e5:a1:
                    4d:5a:09:cd:35:c5:b2:8f:c2:56:91:34:5a:78:89:
                    56:ba:fb:55:b0:7e:78:d6:1d:1e:a2:fc:e5:1d:5d:
                    f1:7d:47:64:f3:80:10:9b:f7:52:e3:8a:44:85:12:
                    21:ae:df:da:b2:4e:45:45:26:9f:f3:7d:31:83:62:
                    c8:13:df:b2:e4:fa:3b:b0:3e:0a:71:ed:b3:67:9b:
                    08:da:a4:0f:b1:1d:1f:ca:aa:a5:cb:39:a4:99:04:
                    79:a2:63:32:e9:b0:da:ed:9a:41:1d:10:6d:b0:89:
                    9a:11:c1:d6:aa:be:15:90:1e:ec:4f:ff:4d:1e:67:
                    86:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:65:1A:74:54:81:B9:E7:0F:60:A9:EA:50:10:62:E6:FC:31:EC:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/53e667fc-0a92-3242-9239-4c97251be084.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.31.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:fd:a2:af:3b:90:c4:5e:ff:27:59:6c:9e:7c:f0:40:e3:1c:
         74:97:da:5f:49:3c:13:60:85:09:0e:b0:e0:c8:26:14:93:27:
         f9:f5:04:bb:a1:62:f4:00:31:fe:a8:c9:ba:0c:e2:37:1f:ef:
         d1:46:3c:ef:09:b6:1c:8e:07:48:dc:c0:f3:15:6e:c0:8e:74:
         a0:97:8f:27:7e:12:69:54:14:eb:de:89:40:70:b6:07:aa:93:
         7f:31:2d:30:f5:75:24:dd:16:6e:f4:af:42:d2:b1:ea:d5:73:
         34:33:64:d2:95:66:02:37:f4:88:81:e3:fd:9b:7f:94:34:2a:
         8f:d0:86:47:b6:06:c8:0d:41:ca:e8:59:7e:33:57:b5:98:79:
         37:d1:81:b4:80:99:10:aa:ac:7e:e0:87:ea:0e:f7:4a:e5:45:
         64:96:4c:a2:9b:51:6c:db:fa:8b:a4:59:22:11:53:1e:44:5d:
         a9:59:61:88:f7:db:e7:a3:42:5f:d4:ba:c7:cb:02:56:89:60:
         28:33:9a:a1:92:37:63:8b:40:a9:6e:01:ff:8f:ef:23:3c:bc:
         f8:45:54:8f:d4:58:bc:a0:ea:49:19:8b:cc:13:9d:f1:56:d4:
         18:f6:e6:a6:71:43:a4:da:af:4e:19:e1:a0:5c:36:8c:6a:f9:
         82:37:1a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 13:59:18 2025 by rpki-client