Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/53ff869c-cd2e-306b-a270-97070a097b4b.roa
File:                     53ff869c-cd2e-306b-a270-97070a097b4b.roa (raw, json)
Hash identifier:          BrD/M0OeSvcJzMr/AHCgrEafAFhfU3FrGAtagAWnPYU=
Subject key identifier:   9C:82:77:F1:C0:8A:F9:FD:36:C7:1E:67:14:BB:75:E0:C8:3E:74:AD
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584A6290847A59365DB96B7C1000
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/53ff869c-cd2e-306b-a270-97070a097b4b.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     16591
IP address blocks:        107.188.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:84:7a:59:36:5d:b9:6b:7c:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=27f00b9c-7758-49e6-ab7e-7f49ef471864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:68:8b:d1:95:7c:de:55:5a:e8:7f:31:49:dc:
                    70:88:e8:61:56:ae:3b:c7:e2:f8:5d:9a:04:35:ae:
                    11:31:62:95:d0:b1:10:53:08:5a:60:7f:59:cc:95:
                    5d:2c:93:64:d9:59:73:8d:a5:c4:5d:2e:99:f0:15:
                    42:eb:09:10:82:71:c0:e1:cd:da:7c:b9:1f:82:8f:
                    d6:24:b1:08:1e:c3:cf:df:69:c4:e3:38:8c:fe:b1:
                    c0:47:4f:52:59:da:d5:c5:09:24:f5:83:ea:2a:97:
                    3a:10:ea:37:b5:75:7d:8e:cb:0e:40:fd:ce:1c:5d:
                    9a:0d:a6:97:df:e4:d8:e2:c2:16:ae:18:0c:19:0f:
                    8e:09:54:64:82:4c:cd:27:b3:87:5b:bc:89:e7:1c:
                    b3:8e:11:b8:2c:de:7e:06:ff:ce:94:16:24:f2:6d:
                    32:92:2e:72:1f:5d:37:e6:ec:02:52:e7:c3:83:98:
                    e0:25:8c:a3:97:72:9a:2e:c9:a4:fc:0d:78:1a:39:
                    48:9a:ea:58:11:39:d1:d9:af:65:1c:28:e7:13:b0:
                    d7:f2:45:2d:5f:59:e3:5e:bd:b7:94:b6:51:81:de:
                    82:4c:20:1d:3e:02:35:d2:3b:7a:7f:2a:8f:70:ad:
                    11:64:8f:46:ba:22:47:98:3e:6c:71:00:da:91:b1:
                    3c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:82:77:F1:C0:8A:F9:FD:36:C7:1E:67:14:BB:75:E0:C8:3E:74:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/53ff869c-cd2e-306b-a270-97070a097b4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.188.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:de:2d:ff:f6:5b:b1:f2:1b:6b:eb:ca:bc:92:54:fc:c3:27:
         14:14:fb:c3:74:1c:58:a5:dd:78:d1:d2:57:a8:9a:1d:4a:5d:
         3b:7a:55:bf:0a:8e:b8:27:d9:44:00:c9:fb:da:46:90:ca:94:
         5e:3c:ad:bf:3d:c5:47:15:ee:2e:80:9b:7f:e6:4d:22:bf:94:
         c4:f7:a5:bc:c6:85:97:ac:94:7f:f8:29:5a:0a:e2:3a:5e:73:
         ac:c0:45:73:94:e8:0c:46:c0:71:3c:cc:f3:88:72:eb:06:46:
         cf:8e:ec:a2:ac:22:47:1e:24:22:9f:cc:e4:9c:ea:81:e5:a6:
         05:80:a1:38:78:b2:94:bb:ac:99:ce:17:5b:e7:cd:d1:ef:3e:
         c9:52:f3:cf:f8:f1:22:5c:a6:18:c6:dc:2d:ae:3e:a2:68:60:
         9b:e3:54:2d:ff:98:20:6f:72:f0:22:dd:5d:2e:c2:8a:41:8f:
         1a:83:e7:49:b8:1b:44:2d:c5:6e:d8:ce:b7:22:94:88:c8:70:
         cc:96:c4:97:b3:d6:2a:9a:b5:20:f3:d1:b8:79:6e:23:09:da:
         69:42:19:3a:30:71:74:84:46:11:3b:e4:79:95:ee:a6:40:49:
         0b:28:ad:e9:9e:e1:78:27:4c:63:8d:03:55:57:f2:52:a9:57:
         21:c6:ed:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 01:09:25 2025 by rpki-client