Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4ec5b803-bc8c-4215-9539-153e00d47df8/658c637a-98ca-3728-8984-bd2a8f1d8035.roa
File:                     658c637a-98ca-3728-8984-bd2a8f1d8035.roa (raw, json)
Hash identifier:          O0+B0fbz98Dsg9olYp0gaQ4KILicvDi0b+1lVd9J9Rc=
Subject key identifier:   EE:41:CE:5A:3E:55:92:7E:F0:94:49:9E:22:F9:ED:5D:AF:AE:2D:50
Certificate issuer:       /CN=4ec5b803-bc8c-4215-9539-153e00d47df8
Certificate serial:       010D0C9F4328584B4081A064283E3C5C82671380
Authority key identifier: 31:88:E1:78:F6:38:DF:1D:3B:1F:5C:AA:FF:2E:5C:1F:91:D7:60:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4ec5b803-bc8c-4215-9539-153e00d47df8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4ec5b803-bc8c-4215-9539-153e00d47df8/658c637a-98ca-3728-8984-bd2a8f1d8035.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     393463
IP address blocks:        205.153.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4ec5b803-bc8c-4215-9539-153e00d47df8/4ec5b803-bc8c-4215-9539-153e00d47df8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4ec5b803-bc8c-4215-9539-153e00d47df8/4ec5b803-bc8c-4215-9539-153e00d47df8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4ec5b803-bc8c-4215-9539-153e00d47df8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:a0:64:28:3e:3c:5c:82:67:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ec5b803-bc8c-4215-9539-153e00d47df8
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=c335d846-9006-4861-9de5-1edb077a0a13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0b:54:3f:4e:9d:ee:23:73:b1:e2:c9:bd:ec:
                    af:15:03:1f:85:89:20:a7:66:d1:91:36:51:9b:d7:
                    f2:75:49:02:06:29:2a:31:6a:9e:5e:89:ba:2b:1b:
                    08:aa:d3:ee:03:44:03:ab:7d:8e:51:80:e3:4d:59:
                    ad:e2:cd:de:38:bb:72:f1:96:90:67:b3:55:9b:7c:
                    9a:9a:93:28:31:3b:9e:8e:ed:bb:c3:48:ab:0d:6c:
                    3e:08:ef:4a:f2:07:3a:cc:8b:70:93:1e:d7:14:fb:
                    b9:9d:4d:ef:ba:2e:3c:3d:65:4f:40:83:20:9e:c4:
                    00:14:2b:29:00:5f:4c:43:e7:01:83:70:f8:ed:9d:
                    9c:4d:20:69:04:32:d1:c2:3f:d6:1c:05:af:25:ad:
                    a3:da:04:62:c5:e7:9f:b3:9b:3d:bd:46:62:13:dd:
                    c9:e3:83:e1:3c:fe:d3:9f:0e:c0:a2:9c:19:02:74:
                    12:14:41:3b:53:85:d1:2d:2e:69:11:36:5b:c0:63:
                    fa:b5:58:f3:ba:ac:82:70:de:b3:25:9f:a0:69:94:
                    12:89:88:c2:3b:4d:5d:ed:b6:59:5f:9b:53:b6:e2:
                    53:e9:11:98:78:8a:34:d1:01:b4:ff:20:20:7e:fe:
                    eb:00:88:ca:a3:b7:02:6d:86:05:8f:31:68:80:bf:
                    13:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:41:CE:5A:3E:55:92:7E:F0:94:49:9E:22:F9:ED:5D:AF:AE:2D:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4ec5b803-bc8c-4215-9539-153e00d47df8/658c637a-98ca-3728-8984-bd2a8f1d8035.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4ec5b803-bc8c-4215-9539-153e00d47df8/4ec5b803-bc8c-4215-9539-153e00d47df8.crl

            X509v3 Authority Key Identifier:
                keyid:31:88:E1:78:F6:38:DF:1D:3B:1F:5C:AA:FF:2E:5C:1F:91:D7:60:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4ec5b803-bc8c-4215-9539-153e00d47df8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.153.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:41:7a:3f:b9:04:c5:ab:ca:bc:50:62:7c:54:ea:0e:6c:44:
         82:34:26:48:65:03:c2:02:73:90:52:49:f0:63:bd:7b:14:b8:
         20:b4:9e:a3:82:8c:79:06:a1:0f:df:d7:58:b9:9d:81:f5:51:
         ee:ab:17:2f:a9:51:40:06:42:6e:fd:76:ce:18:1f:20:84:74:
         15:75:7d:1e:c7:69:6d:9a:4f:7a:14:c1:63:81:8d:98:8d:fa:
         96:1d:ef:71:c1:4e:54:d2:25:69:b0:ea:52:44:6b:3b:b6:ca:
         88:9b:32:ae:56:aa:df:57:a3:e6:d4:3e:fd:da:1f:1c:8f:8a:
         d4:95:5f:21:7c:4d:77:ff:67:dc:ba:f2:8c:97:dc:9d:fd:1c:
         d2:68:13:13:9d:21:1e:73:81:fa:27:7d:db:46:11:ab:b1:65:
         04:eb:f7:8a:61:71:45:41:1e:65:23:f4:1e:de:8b:a7:6b:02:
         cc:ec:e6:fc:66:eb:0f:12:27:06:59:04:5c:6f:9f:41:53:55:
         60:44:9b:14:1d:09:fa:7a:ba:3f:1d:6c:e0:20:ed:0b:19:34:
         f0:d2:12:3d:15:c3:5b:46:05:d3:5c:00:f7:96:b3:45:1b:7e:
         e0:fe:a3:56:69:77:4a:ba:2f:fd:ff:ae:b0:38:c8:41:d0:94:
         6a:c2:f2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 20:47:26 2025 by rpki-client