Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/5b56e057-ad94-3b64-b747-861750a9363a.roa
File:                     5b56e057-ad94-3b64-b747-861750a9363a.roa (raw, json)
Hash identifier:          PBucQtCKFUWqtzyocO8NgWguUcsit00dkEVEaUalcIU=
Subject key identifier:   EF:4B:BB:48:C5:11:F1:D7:AD:2F:E9:5E:1E:DE:BD:BC:79:33:FB:7E
Certificate issuer:       /CN=53e30d85-4474-43ab-95e5-8d5d53560b6e
Certificate serial:       010D0C9F4328584B0746A787BA5964032E00A200
Authority key identifier: E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/5b56e057-ad94-3b64-b747-861750a9363a.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     22612
IP address blocks:        203.161.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:a7:87:ba:59:64:03:2e:00:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53e30d85-4474-43ab-95e5-8d5d53560b6e
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=e600a1a5-57e1-4cfb-aa97-b97df81c2f0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:99:14:0c:e0:90:6d:07:d1:cb:9c:41:c7:ac:
                    88:98:7d:64:4f:12:95:ac:3f:86:0a:b1:1c:95:47:
                    ac:c1:cf:d0:55:bb:b5:18:cd:9c:23:2d:48:54:da:
                    90:02:dd:d8:a6:bf:f3:de:95:e5:62:f9:27:64:44:
                    f3:bc:3a:c0:5f:ca:6f:02:04:2d:df:26:74:64:f3:
                    cf:87:f9:15:d4:df:4d:4b:5f:16:df:fa:79:67:2f:
                    68:09:63:0b:9d:0b:b1:fe:5e:83:d2:53:c0:ca:ed:
                    2e:28:a6:f4:f9:e3:b8:9b:13:dc:52:4b:9d:1f:6c:
                    34:86:30:57:3a:20:42:f6:33:e8:e5:b1:39:b9:80:
                    1b:e4:1d:10:d4:47:60:fd:c8:f6:2a:ef:7f:aa:36:
                    81:b3:8e:36:4d:02:78:c3:f5:94:d0:5c:96:c4:17:
                    bc:fe:66:db:6e:79:14:c8:bb:de:0a:a1:25:7e:7f:
                    56:87:c7:56:93:57:08:5e:9d:53:08:68:e2:a5:45:
                    cd:51:ce:8d:0b:64:70:5e:2f:df:e6:f7:f0:23:5f:
                    bd:d6:af:9b:07:fd:4c:26:55:d1:e6:6f:e8:eb:0e:
                    74:c5:69:4b:51:af:50:a5:b3:e7:7e:72:64:55:8c:
                    41:35:5d:28:82:19:de:41:33:3f:8f:65:be:18:39:
                    e1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:4B:BB:48:C5:11:F1:D7:AD:2F:E9:5E:1E:DE:BD:BC:79:33:FB:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/5b56e057-ad94-3b64-b747-861750a9363a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl

            X509v3 Authority Key Identifier:
                keyid:E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.161.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:b6:1c:af:ee:b5:c8:6a:71:ce:c3:29:d9:d2:68:8c:02:e2:
         ea:a1:2b:b6:93:bf:b8:fc:1c:ed:8c:16:9a:88:fa:86:e8:5b:
         18:6d:4c:88:2d:45:6c:af:00:f0:8c:90:82:7f:96:71:49:bb:
         cb:f7:48:19:5f:0c:36:38:94:bd:3a:fc:a3:32:bd:b4:bc:52:
         04:47:d2:19:d4:4a:cd:c1:f3:f4:f3:38:98:c5:65:29:51:95:
         4e:3c:c6:b4:1d:90:99:00:41:22:91:86:ae:48:d9:51:01:d1:
         95:2a:f2:9d:7f:70:69:ea:be:e6:aa:fd:1a:02:26:70:1b:dc:
         49:ec:3c:56:6a:f6:5c:7a:bc:7d:a5:c7:37:6c:e5:b6:aa:97:
         aa:9b:25:f4:50:2a:2a:72:24:88:d5:84:df:37:62:61:83:7b:
         04:ac:cb:1f:ec:9d:44:8a:d3:4a:21:03:96:9b:cd:16:7a:34:
         fe:71:9d:29:95:41:aa:91:7e:23:df:3f:4f:17:6b:87:01:ae:
         bd:60:6d:d2:19:a2:5c:6b:bf:24:5d:d2:db:cc:e8:c8:8a:26:
         05:2c:91:27:22:dc:bf:6f:9d:01:95:10:c8:c2:ef:c3:b9:72:
         3d:94:21:7b:a8:87:94:6b:12:0b:d7:20:02:99:55:86:4a:a0:
         34:c4:37:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 13:41:43 2025 by rpki-client