Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04723749-feb1-4da5-ac21-ba89ad1d057e/53b0015c-a0ec-3ab9-a799-bfa8ff1e26ff.roa
File:                     53b0015c-a0ec-3ab9-a799-bfa8ff1e26ff.roa (raw, json)
Hash identifier:          WIgEEeKl9aCSJuma8kamVsZGOf3z2mHhl0qL5nl9M+o=
Subject key identifier:   3F:1C:37:5D:CD:41:5D:C0:5C:CF:6C:A0:71:55:03:32:AB:0E:6D:5E
Certificate issuer:       /CN=04723749-feb1-4da5-ac21-ba89ad1d057e
Certificate serial:       010D0C9F4328584B9E07A6FE3DEC2FF4970A8D00
Authority key identifier: 60:28:32:B3:7E:3D:0C:CE:A9:F9:51:48:C3:8E:BD:E7:47:57:EC:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04723749-feb1-4da5-ac21-ba89ad1d057e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04723749-feb1-4da5-ac21-ba89ad1d057e/53b0015c-a0ec-3ab9-a799-bfa8ff1e26ff.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     398766
IP address blocks:        23.252.16.0/20 maxlen: 24
                          124.198.160.0/19 maxlen: 24
                          162.118.96.0/19 maxlen: 24
                          2605:eb40::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04723749-feb1-4da5-ac21-ba89ad1d057e/04723749-feb1-4da5-ac21-ba89ad1d057e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04723749-feb1-4da5-ac21-ba89ad1d057e/04723749-feb1-4da5-ac21-ba89ad1d057e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04723749-feb1-4da5-ac21-ba89ad1d057e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:a6:fe:3d:ec:2f:f4:97:0a:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04723749-feb1-4da5-ac21-ba89ad1d057e
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=f0d4bbc7-c090-46ac-a97f-663eb97563ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8e:e8:ed:c5:91:8d:ce:d8:49:fd:5f:e5:e8:
                    dc:21:0e:fa:6a:51:80:d7:5a:d4:b5:f5:f0:f4:62:
                    ec:23:0a:d7:bb:fa:67:cc:36:c5:e2:d5:8c:4e:2d:
                    ad:af:f2:df:72:62:0f:8d:62:3e:6e:ae:6b:53:2f:
                    7b:34:eb:37:8b:bf:63:dc:f5:f4:f2:53:36:21:36:
                    10:c4:89:ca:ea:b1:bd:40:bf:a7:9d:83:fa:22:d1:
                    5e:6c:51:43:50:14:e3:d2:96:b5:97:95:53:bf:62:
                    2f:6c:3a:c7:52:b1:94:d1:f3:23:bf:b7:75:fd:f9:
                    7e:8b:96:c0:74:54:15:18:42:06:33:11:c4:e0:80:
                    b5:97:9b:52:47:05:4e:de:45:b3:2d:c8:f2:5f:ff:
                    fe:c0:ee:aa:b6:dd:ca:78:45:9a:2c:c4:9f:db:87:
                    ea:96:2f:a7:4f:1f:04:27:43:31:f8:1d:c4:8d:03:
                    69:6b:f6:5a:34:23:1f:07:58:ab:b7:18:4f:d6:ca:
                    30:4d:bd:4a:e2:a4:ae:6f:8a:0d:5d:f8:e9:eb:c9:
                    89:73:18:e7:4a:86:eb:86:44:51:81:de:fe:af:77:
                    3f:ad:2a:7a:77:21:d5:0f:6f:43:84:35:ef:b2:bf:
                    fe:c8:b5:4c:9d:05:0b:74:b1:2b:2b:9b:86:d1:60:
                    9e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:1C:37:5D:CD:41:5D:C0:5C:CF:6C:A0:71:55:03:32:AB:0E:6D:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04723749-feb1-4da5-ac21-ba89ad1d057e/53b0015c-a0ec-3ab9-a799-bfa8ff1e26ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04723749-feb1-4da5-ac21-ba89ad1d057e/04723749-feb1-4da5-ac21-ba89ad1d057e.crl

            X509v3 Authority Key Identifier:
                keyid:60:28:32:B3:7E:3D:0C:CE:A9:F9:51:48:C3:8E:BD:E7:47:57:EC:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04723749-feb1-4da5-ac21-ba89ad1d057e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.252.16.0/20
                  124.198.160.0/19
                  162.118.96.0/19
                IPv6:
                  2605:eb40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:66:1e:73:6f:45:0e:12:c2:bc:8c:6f:7a:83:5d:79:c7:fe:
         49:fb:1f:db:76:42:d8:5e:bf:56:5b:ad:af:f2:6e:81:b2:7a:
         31:46:95:90:20:e3:b9:6e:ed:e3:7a:74:d0:ea:64:ea:49:ca:
         49:a0:85:b0:ac:14:60:a6:8d:62:8a:2c:24:82:f7:82:bb:e5:
         92:56:bd:ff:9f:e0:65:05:d9:59:c5:b7:a4:c0:e6:1d:98:b2:
         26:80:33:81:5f:ce:07:00:46:2e:81:fd:a5:32:7a:66:0c:d7:
         06:a8:f2:7d:1c:50:93:4a:01:f7:d3:42:8f:40:8c:53:3b:87:
         49:ad:62:86:0d:f4:73:50:f1:a3:2b:8b:bb:54:e5:b3:27:b4:
         a0:1e:e6:10:3f:d9:b9:05:e6:28:aa:fc:1e:ee:a4:68:4a:cc:
         59:50:68:3c:c8:fd:d8:8e:86:28:03:5f:2b:c5:4f:0d:0f:19:
         03:1d:1c:17:61:f1:ad:82:86:dc:c6:c9:9a:55:09:20:2b:94:
         40:80:86:98:01:f9:88:2a:80:5d:e3:e2:54:2d:f1:38:2d:56:
         76:bf:d3:af:48:fb:d9:64:91:2d:ea:6b:f9:3b:d4:90:59:a2:
         04:1b:14:27:f0:8c:d1:47:a3:64:0b:d0:3d:f0:9a:c9:92:c7:
         66:08:91:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 13:17:51 2025 by rpki-client