Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/b58ea8dc-de4c-3765-81b8-39248b9bd5f0.roa
File:                     b58ea8dc-de4c-3765-81b8-39248b9bd5f0.roa (raw, json)
Hash identifier:          yR7CEbYThof/0fL/4zkFAvWqSK7tf53jxq8CSKG69w0=
Subject key identifier:   FD:5C:72:D9:91:04:C7:E4:4A:9C:D2:44:E0:A1:A4:6D:EB:A0:84:72
Certificate issuer:       /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
Certificate serial:       010D0C9F4328584B8A25E212F627CD37AEB2C580
Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/b58ea8dc-de4c-3765-81b8-39248b9bd5f0.roa
Signing time:             Thu 16 Oct 2025 10:05:35 +0000
ROA not before:           Thu 16 Oct 2025 10:05:35 +0000
ROA not after:            Wed 14 Jan 2026 11:05:35 +0000
asID:                     14555
IP address blocks:        198.23.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8a:25:e2:12:f6:27:cd:37:ae:b2:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
        Validity
            Not Before: Oct 16 10:05:35 2025 GMT
            Not After : Jan 14 11:05:35 2026 GMT
        Subject: CN=6511778d-a9c7-49b2-8c29-ecfcdd645043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:86:b4:22:86:30:df:7a:e9:ef:3f:48:4a:35:
                    2a:1b:95:c2:aa:96:44:2f:35:d7:6b:35:6d:b5:f1:
                    a9:1b:59:f3:8b:7f:b7:cd:1b:5f:d8:fd:8f:ec:1b:
                    6d:dc:0e:f6:5c:29:41:a2:c1:f5:51:00:5d:9f:ff:
                    51:91:69:ed:5a:b7:97:8d:88:53:87:45:c3:42:ba:
                    bb:79:f3:07:8b:84:b3:35:4b:11:dd:0d:88:7c:e5:
                    8e:0a:34:d8:79:39:eb:21:45:da:58:92:7f:0e:cf:
                    6e:99:31:0f:83:91:47:48:82:5e:cd:f2:9f:80:d8:
                    52:1d:e8:75:49:a8:db:5e:e7:15:ca:c4:9e:5e:84:
                    88:55:7d:4a:18:b6:a6:e7:a2:65:10:d4:1d:72:ea:
                    71:ce:8a:c5:b5:34:82:27:a2:7b:5b:cf:16:d9:8f:
                    df:0d:f0:29:25:1c:b5:27:c1:56:98:b6:88:e1:d9:
                    23:83:ee:fb:f5:24:ef:1c:ce:64:47:9e:3c:4e:b3:
                    fc:8a:d8:17:cd:c3:8e:5c:2e:7c:7d:a3:4e:25:db:
                    1a:4c:75:60:ac:c0:30:bc:06:35:52:c2:f7:6e:6a:
                    88:5f:c6:33:a2:86:64:00:5c:7e:9a:04:b4:5e:a5:
                    15:08:35:f0:f6:e7:23:97:fb:e5:4f:3c:2e:72:2a:
                    bc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:5C:72:D9:91:04:C7:E4:4A:9C:D2:44:E0:A1:A4:6D:EB:A0:84:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/b58ea8dc-de4c-3765-81b8-39248b9bd5f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl

            X509v3 Authority Key Identifier:
                keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.23.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:db:3f:dc:09:2b:f1:5e:5c:d3:8c:de:89:4c:7b:75:da:73:
         08:2c:97:36:81:eb:b8:b4:4d:2d:d9:dc:bd:12:81:f5:66:d5:
         51:e3:5c:a9:0c:59:84:a1:e3:ed:85:16:3b:f3:f7:00:c4:31:
         5a:c7:c0:88:5b:7a:8b:52:84:57:fa:cd:5c:92:35:69:bf:b5:
         a5:f7:12:e8:4f:52:ff:dc:bb:59:b1:e7:94:04:d3:26:57:89:
         d4:0c:70:72:e8:a7:a4:6f:0e:12:7d:74:50:f5:49:ff:cb:e9:
         33:ed:9a:3b:e7:1a:f5:92:15:50:83:4f:93:bf:36:89:11:38:
         7a:5e:68:ca:4d:eb:fc:3e:cc:c6:ea:aa:4a:91:2b:07:e8:24:
         b3:4e:8d:71:60:ee:0a:b8:34:7b:27:c4:a6:2a:da:59:34:46:
         c1:19:3a:7d:4e:8d:89:86:53:28:90:67:01:50:ab:3c:4d:91:
         66:15:ca:34:07:d9:9e:5e:4c:50:70:c2:ce:e1:35:4a:88:b8:
         31:65:be:84:6f:36:04:9f:6e:cd:91:fe:f4:23:1d:e6:4a:60:
         89:f3:3c:1c:e8:83:78:d5:a0:b1:99:1e:dc:ae:78:d7:6b:dd:
         08:33:4a:a8:2f:99:67:4c:be:92:9b:5a:74:6c:0e:88:7f:46:
         92:f7:c7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:16:11 2025 by rpki-client