Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/53bf57f8-1fad-36a5-abe4-788f451a3ade.roa
File:                     53bf57f8-1fad-36a5-abe4-788f451a3ade.roa (raw, json)
Hash identifier:          Mel64FnWle5EiXJtv47Kv142nbbQ0Ow9kj/T9TEPbxA=
Subject key identifier:   C6:17:9E:46:0A:62:95:2D:A4:24:27:61:5C:72:D1:45:25:1F:0E:2C
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584B03169AA2D5A910FD37575580
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/53bf57f8-1fad-36a5-abe4-788f451a3ade.roa
Signing time:             Fri 29 Aug 2025 01:00:32 +0000
ROA not before:           Fri 29 Aug 2025 01:00:32 +0000
ROA not after:            Thu 27 Nov 2025 02:00:32 +0000
asID:                     3477
IP address blocks:        140.90.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:03:16:9a:a2:d5:a9:10:fd:37:57:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Aug 29 01:00:32 2025 GMT
            Not After : Nov 27 02:00:32 2025 GMT
        Subject: CN=12b7dd45-a7d9-4cf0-9622-6f6e577c9002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:86:b1:cf:8f:fd:83:f8:4a:18:b5:99:c7:9f:
                    15:2a:4d:07:62:aa:34:a2:a7:78:c4:fb:eb:0e:18:
                    e6:78:0d:82:ea:cf:48:a0:40:83:f2:d4:bb:6c:4d:
                    b0:23:6a:c7:43:ac:18:79:4a:92:a4:c2:48:0e:72:
                    06:f4:4f:b9:9e:0b:d3:b7:e2:86:61:8b:5a:8e:44:
                    a2:2b:4c:0c:c3:61:2e:a2:59:20:b6:07:ab:b3:73:
                    59:f0:e4:c0:a3:c4:46:82:dc:e1:f3:8f:94:89:80:
                    4b:fa:7e:5a:94:e3:31:76:fc:88:72:f2:62:b8:9c:
                    15:b4:ba:28:05:47:8e:b9:2a:f6:2a:cc:e4:84:a9:
                    21:d7:4a:77:5e:3d:ad:8d:19:6d:d4:57:c5:33:11:
                    92:29:2b:fc:3f:35:4c:2e:69:c6:93:ab:63:47:d2:
                    eb:03:f6:15:37:7f:40:82:2a:bb:4a:57:f7:02:ee:
                    08:ee:ae:b8:bc:ef:bf:ac:ea:8e:20:b1:5c:7c:8e:
                    e2:3d:fc:0f:31:e3:5c:6a:04:f1:67:77:c2:33:10:
                    d7:a9:a8:79:fb:c7:c9:eb:95:bd:32:8b:71:71:e7:
                    a4:a4:b0:3f:8c:84:2f:02:f7:1e:07:82:43:16:bc:
                    5c:e3:30:e9:80:71:5b:2d:ca:b0:9b:93:9e:50:97:
                    ba:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:17:9E:46:0A:62:95:2D:A4:24:27:61:5C:72:D1:45:25:1F:0E:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/53bf57f8-1fad-36a5-abe4-788f451a3ade.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.90.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:c6:fb:4a:1e:8c:1d:19:0b:6d:c9:dc:7f:72:fa:6f:3f:2b:
         70:47:52:06:44:c0:00:60:c7:4a:4e:43:3b:34:b4:79:36:b0:
         a5:b2:ff:e1:3e:31:e5:12:e5:ce:3c:b6:f5:38:b7:7d:37:74:
         49:21:30:e3:db:19:52:e6:b6:9e:f0:4c:95:60:af:62:90:27:
         3e:01:f4:7d:f2:5c:96:3d:1c:ea:32:3f:31:11:e9:fd:b3:b4:
         7c:e2:75:5b:1a:60:a1:d8:94:4b:8a:57:85:a9:14:85:09:f3:
         b6:13:76:ea:fd:bb:d1:f7:af:6c:38:36:10:8d:da:0d:24:dd:
         3f:69:89:99:a7:5c:15:37:ea:89:b5:57:f4:3e:d0:85:66:b2:
         88:6f:a6:20:7c:12:0b:f5:3c:33:1a:74:e6:5f:58:5b:2c:32:
         f7:51:7a:0a:ed:af:33:ca:64:7a:83:2c:3f:bc:21:92:97:cb:
         c6:40:70:af:c5:d8:93:9c:94:13:c6:9b:a3:a5:18:41:ef:9a:
         34:d1:44:38:12:83:25:f0:1e:98:f5:65:8a:92:3c:97:06:45:
         88:cb:1c:4e:ed:cf:77:21:33:46:48:12:f9:36:e0:ec:fe:e0:
         aa:df:56:c7:c1:94:1e:0a:a7:ad:96:33:e2:0c:63:05:d9:55:
         3c:92:a0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:12:57 2025 by rpki-client