Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/53a28954-9970-39e6-a84e-6fc7573780fa.roa
File:                     53a28954-9970-39e6-a84e-6fc7573780fa.roa (raw, json)
Hash identifier:          nvCoZkI20dUiAmKdzz1efMnId5sjZAJgKdnwHASdEiw=
Subject key identifier:   C8:2A:62:63:AE:D6:69:B8:3C:FA:7B:BB:31:8A:E1:B0:AF:FE:8A:FC
Certificate issuer:       /CN=c86a7ba5-67c5-481d-b278-0b265dc97144
Certificate serial:       010D0C9F4328584B0B76AA2C61423DE9F4FCEE80
Authority key identifier: 69:92:8D:83:C4:F4:B4:92:18:C1:FE:F0:78:A4:3C:F7:1D:D0:2B:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/53a28954-9970-39e6-a84e-6fc7573780fa.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     8075
IP address blocks:        170.39.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:aa:2c:61:42:3d:e9:f4:fc:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c86a7ba5-67c5-481d-b278-0b265dc97144
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=6dc0ccfe-3620-481f-9cda-c7cd75ece3a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:52:83:db:8f:c6:ce:e0:c0:1f:be:8f:82:63:
                    74:ad:06:87:89:a2:61:76:5f:f3:98:32:4d:28:fa:
                    b7:ef:12:a0:ef:45:4f:e7:c9:df:ca:ed:19:29:71:
                    2a:41:47:4d:e1:19:5c:77:30:60:c2:30:be:5c:ce:
                    97:dd:a0:11:7a:2c:a0:ea:75:ad:2f:93:f5:7f:7a:
                    47:51:4f:d3:56:55:bf:f2:8d:df:c9:22:0b:20:6b:
                    13:2f:49:6d:c3:3d:d8:29:e3:99:e2:71:a7:93:52:
                    f6:80:3e:9c:26:8b:e5:2b:a1:ad:73:b3:bb:70:e0:
                    05:e3:31:16:9e:0b:93:68:0c:02:32:2e:15:a5:82:
                    e7:c3:17:4d:36:05:40:bc:7c:25:1e:c5:63:2d:a1:
                    03:1d:bd:67:39:31:71:fe:4c:02:71:bb:c0:a6:fa:
                    04:f4:7f:da:83:8c:4a:73:9f:21:a3:c0:21:db:ea:
                    af:df:30:cf:95:2f:93:12:b4:e2:04:f7:91:33:d7:
                    98:91:50:46:8e:78:8d:05:71:c2:bf:6e:55:9a:85:
                    69:a1:24:03:dd:71:8c:eb:2f:dd:06:e4:c7:17:e1:
                    24:54:92:8a:db:92:65:76:54:7e:f7:3d:a4:98:88:
                    ec:d0:b5:5a:dc:dd:3d:fa:5d:15:a4:67:03:01:a9:
                    e0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:2A:62:63:AE:D6:69:B8:3C:FA:7B:BB:31:8A:E1:B0:AF:FE:8A:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/53a28954-9970-39e6-a84e-6fc7573780fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.crl

            X509v3 Authority Key Identifier:
                keyid:69:92:8D:83:C4:F4:B4:92:18:C1:FE:F0:78:A4:3C:F7:1D:D0:2B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:47:73:36:c6:81:ae:42:05:fd:da:32:9b:88:ba:db:c6:7d:
         53:17:a6:91:76:44:dd:1a:7b:f5:82:3a:c7:5b:c2:18:09:1f:
         02:00:95:bf:b1:92:2b:4e:23:ba:d3:04:18:11:8d:2b:f2:c9:
         4c:7d:b3:99:a5:d9:09:79:04:ef:4a:16:1e:e4:fb:f6:40:13:
         f8:55:ab:a5:32:2f:4b:a7:9a:ed:72:0e:b1:88:77:0f:2d:9b:
         18:95:e3:ad:d4:42:d7:02:af:35:f3:7d:71:83:89:e7:d2:a5:
         54:90:e3:45:bd:09:de:e9:2c:a7:11:72:05:61:af:ad:af:2b:
         9b:ce:28:2e:9b:12:d2:ac:6f:9f:c4:c1:49:0e:9e:58:37:22:
         cf:b2:e5:db:c8:d7:79:1e:6b:c5:46:94:6b:be:52:d5:f1:b4:
         a9:61:0a:e9:15:9f:9d:03:53:08:99:ec:79:ed:5c:e4:b3:04:
         29:37:48:7d:fc:40:7e:bd:ce:24:8a:b9:11:e9:2e:6a:7d:6f:
         d9:55:d0:f6:2d:30:fc:31:cc:64:a3:27:79:9e:fb:23:4e:68:
         f0:87:5e:20:70:20:b2:03:bc:39:63:e6:70:d8:c0:12:3e:9e:
         84:f6:40:dc:dd:81:52:96:9c:ca:79:1e:bf:4c:fe:6d:f5:e1:
         1f:99:ff:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:28:05 2025 by rpki-client