Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/53ba14ec-84a6-38f5-af8b-c9b61e8caf3a.roa
File:                     53ba14ec-84a6-38f5-af8b-c9b61e8caf3a.roa (raw, json)
Hash identifier:          tWbY07lWOXW8xSqJa9999yxjju4KP0yxIsncHojDF+4=
Subject key identifier:   39:E9:03:DC:5C:66:22:20:5D:4D:60:B1:02:F1:48:24:CC:F1:FA:CC
Certificate issuer:       /CN=55feeaf5-abfd-4f9c-9707-9236ce5397bd
Certificate serial:       010D0C9F4328584A814645F8EFD8A421A7044400
Authority key identifier: C9:EF:4B:01:33:02:5C:34:66:53:86:01:A7:05:AC:03:48:05:9A:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/53ba14ec-84a6-38f5-af8b-c9b61e8caf3a.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     11272
IP address blocks:        198.28.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:45:f8:ef:d8:a4:21:a7:04:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55feeaf5-abfd-4f9c-9707-9236ce5397bd
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=cb349896-7b1d-4a39-ae21-69ecae8ac4a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:aa:78:06:c7:ee:88:72:46:d4:7b:21:11:9f:
                    b5:01:95:d9:c1:c5:69:71:a1:97:74:0d:26:fb:19:
                    7f:90:1e:b4:74:3b:f4:22:d9:38:3a:5b:aa:4a:0a:
                    52:6d:e0:5f:ba:91:55:80:22:a0:3e:e2:79:4b:23:
                    f5:b9:b8:ba:cf:59:26:34:e6:28:a5:d7:7c:fc:a7:
                    b2:e0:d7:1a:10:85:6f:58:eb:ad:b9:36:43:d6:f5:
                    98:92:d9:5e:d2:3c:b2:21:fe:c1:31:06:7a:4a:37:
                    7a:bb:25:8a:96:bd:a6:62:33:c9:d8:37:69:c2:20:
                    3b:5a:47:a9:22:c4:00:8a:04:cb:af:3a:f7:4c:f1:
                    bd:1d:04:1b:86:6c:7b:eb:9f:cd:d6:9c:60:07:82:
                    2c:cb:c5:53:6d:a4:1a:5b:12:eb:e3:b4:bd:2b:5f:
                    94:de:20:a1:85:b2:c5:76:6d:39:5c:fa:38:60:45:
                    31:74:10:cf:78:3b:66:13:92:4a:8e:43:29:66:ac:
                    cc:fa:57:bf:58:8d:0c:b8:a7:90:4a:83:b2:05:fc:
                    d2:4d:a0:b3:83:12:37:bd:c7:1c:06:d7:d5:85:c6:
                    80:2e:0c:8b:6c:db:c0:f6:f5:79:d6:da:29:d0:70:
                    03:ef:ed:a4:82:95:44:48:31:6c:90:cc:82:bb:ff:
                    92:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E9:03:DC:5C:66:22:20:5D:4D:60:B1:02:F1:48:24:CC:F1:FA:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/53ba14ec-84a6-38f5-af8b-c9b61e8caf3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.crl

            X509v3 Authority Key Identifier:
                keyid:C9:EF:4B:01:33:02:5C:34:66:53:86:01:A7:05:AC:03:48:05:9A:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.28.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:cb:6a:75:62:a2:25:15:48:f0:e8:56:5f:be:02:a9:4e:ac:
         7d:69:bf:e7:39:7d:0b:9d:4e:e2:94:eb:2b:b1:92:88:35:ca:
         a6:2a:04:92:fd:5f:7e:26:42:16:03:35:5f:5d:51:06:a4:fd:
         c6:55:1d:4b:b5:c9:51:b0:11:15:22:f5:80:83:ac:37:cb:61:
         2c:dd:e2:8d:91:65:69:cc:a6:1b:db:18:95:d5:21:4d:50:49:
         04:3a:b6:95:9f:7c:c0:53:f1:76:68:4c:d9:8c:46:4f:2a:d6:
         11:eb:b3:80:74:b2:04:fc:3a:07:15:e0:c1:c1:a5:fe:b2:46:
         24:83:31:65:43:a8:1c:ed:fb:c7:7b:b4:fa:ae:8c:c3:1d:06:
         1e:90:c3:c9:29:66:62:83:eb:ed:b6:7d:dc:ff:1f:bb:78:a8:
         bc:27:78:86:7f:55:3d:36:c7:92:09:58:be:a0:4e:05:6c:2d:
         00:52:79:ad:99:65:9e:6a:ef:3f:c6:b5:fb:a2:a8:ec:96:2b:
         a5:20:c0:b8:50:04:5d:36:64:58:27:dc:40:4e:f2:94:bb:28:
         90:82:8c:24:9a:db:d7:38:ed:11:d0:b6:ab:04:66:87:6c:9d:
         47:43:57:8a:3b:7c:18:21:ca:73:07:9f:44:73:26:94:d2:ef:
         34:27:76:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:23:56 2025 by rpki-client