Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/18c1bebe-d1f9-4e18-91eb-c1bad64a3be8/dde5cdc2-3c4a-3c42-959f-3fa395e2bfac.roa
File:                     dde5cdc2-3c4a-3c42-959f-3fa395e2bfac.roa (raw, json)
Hash identifier:          eyQQMLtJUHUGMwirN9jvyHGhkWLHl4wMDgHbWokUc/8=
Subject key identifier:   C8:08:8A:B5:94:5E:FD:23:95:61:3B:2F:76:AD:60:0B:71:8D:C6:53
Certificate issuer:       /CN=18c1bebe-d1f9-4e18-91eb-c1bad64a3be8
Certificate serial:       010D0C9F4328584B821CD2E423C345CEDDD85B00
Authority key identifier: 5E:DB:47:B5:30:53:E8:80:06:00:66:00:FD:3E:0C:ED:39:72:51:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/18c1bebe-d1f9-4e18-91eb-c1bad64a3be8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/18c1bebe-d1f9-4e18-91eb-c1bad64a3be8/dde5cdc2-3c4a-3c42-959f-3fa395e2bfac.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     19104
IP address blocks:        203.26.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/18c1bebe-d1f9-4e18-91eb-c1bad64a3be8/18c1bebe-d1f9-4e18-91eb-c1bad64a3be8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/18c1bebe-d1f9-4e18-91eb-c1bad64a3be8/18c1bebe-d1f9-4e18-91eb-c1bad64a3be8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/18c1bebe-d1f9-4e18-91eb-c1bad64a3be8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:d2:e4:23:c3:45:ce:dd:d8:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18c1bebe-d1f9-4e18-91eb-c1bad64a3be8
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=db559b97-4c7b-4c53-8315-37a785be2702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:62:6f:8e:94:25:40:67:89:4b:af:56:14:7d:
                    50:2c:70:02:92:88:c1:af:a8:12:4a:ec:c7:a4:04:
                    8b:54:d4:f5:27:d5:d6:be:8e:ed:d4:5a:b0:d5:29:
                    08:65:77:5f:d8:43:fb:3e:9d:ce:50:5f:d1:15:1c:
                    03:2a:ef:33:8c:80:ee:3c:15:26:ca:5c:04:1d:03:
                    d2:72:37:34:aa:cb:64:20:70:a6:83:56:87:3d:39:
                    a9:ae:69:cb:f6:4e:9a:53:01:95:df:05:d6:ef:36:
                    06:95:79:b5:35:11:c9:32:0a:ab:cc:70:fe:85:eb:
                    69:6c:cc:b1:26:b6:63:6b:28:f4:ff:27:18:44:e1:
                    51:e3:90:68:c1:bd:bb:57:c5:37:2a:6d:ca:c7:71:
                    01:95:bd:a9:3e:1f:af:5b:46:f7:56:ef:14:9a:10:
                    cd:c1:53:77:60:d2:9c:ab:59:b5:db:32:a0:03:51:
                    50:d4:96:77:fa:4d:a3:52:46:7a:0c:b0:9d:c8:58:
                    3f:fa:50:e7:cf:df:fa:ba:e6:eb:81:66:92:1f:3d:
                    1a:93:bf:ce:95:9c:c1:d0:33:85:e9:bb:f7:0d:f9:
                    05:e4:e2:a9:97:0e:1e:e2:34:00:2b:ee:80:90:e2:
                    22:55:83:67:38:71:52:2c:fd:9f:fc:82:cb:ff:44:
                    9d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:08:8A:B5:94:5E:FD:23:95:61:3B:2F:76:AD:60:0B:71:8D:C6:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/18c1bebe-d1f9-4e18-91eb-c1bad64a3be8/dde5cdc2-3c4a-3c42-959f-3fa395e2bfac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/18c1bebe-d1f9-4e18-91eb-c1bad64a3be8/18c1bebe-d1f9-4e18-91eb-c1bad64a3be8.crl

            X509v3 Authority Key Identifier:
                keyid:5E:DB:47:B5:30:53:E8:80:06:00:66:00:FD:3E:0C:ED:39:72:51:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/18c1bebe-d1f9-4e18-91eb-c1bad64a3be8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.26.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:5a:1e:f2:a0:4c:91:89:36:ff:7f:5e:a1:7e:71:eb:e3:1d:
         92:61:bd:a3:06:1b:3e:20:ee:ee:90:b7:cc:54:9d:d5:ea:9e:
         d9:88:d2:2f:fe:96:8d:ad:e9:f5:d3:e9:d8:09:9e:db:c2:3b:
         ab:db:43:60:35:4f:90:a5:45:91:6f:59:01:00:61:49:64:db:
         50:db:95:5f:df:f4:33:88:ee:8d:db:21:24:57:58:97:0f:a1:
         73:1f:7d:80:b6:95:79:4f:8c:14:03:71:d5:45:aa:47:85:2f:
         7b:e5:ac:92:39:18:87:b2:c9:40:5b:20:07:6d:73:3d:48:04:
         03:53:f1:b7:7b:8f:5c:ce:c2:54:47:f6:9d:90:2a:80:20:5a:
         db:0d:a3:75:68:84:d6:1a:e4:09:83:85:99:79:34:1b:d5:c5:
         35:c8:c7:b3:f5:26:69:d4:8e:69:62:83:13:51:45:5f:8e:6e:
         26:b7:32:5e:d7:6f:18:13:79:ed:c2:2d:3c:c1:c7:b8:5b:dc:
         dd:06:a3:84:75:76:13:6f:87:5a:33:e7:14:2a:4d:35:76:9b:
         62:64:2d:e7:fa:39:16:a5:12:d8:c1:60:3d:c7:53:8c:4d:fa:
         2a:5b:32:37:93:0c:c6:97:c5:8d:25:06:f6:b1:be:47:1f:96:
         b2:b7:bb:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 00:51:42 2025 by rpki-client