Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/7323319d-4a50-3a5e-a517-47fd2b9aa544.roa
File:                     7323319d-4a50-3a5e-a517-47fd2b9aa544.roa (raw, json)
Hash identifier:          xgwpGFq1z/t2gxdKJxbZDHTA98Yo4KORteWqH3yFWfU=
Subject key identifier:   4B:F9:4C:0B:05:CC:43:00:88:CD:B3:57:E8:2E:71:A7:8B:DF:FC:17
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584B3B427E54C2DC7B1F3F006840
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/7323319d-4a50-3a5e-a517-47fd2b9aa544.roa
Signing time:             Thu 18 Sep 2025 03:54:22 +0000
ROA not before:           Thu 18 Sep 2025 03:54:22 +0000
ROA not after:            Wed 17 Dec 2025 04:54:22 +0000
asID:                     54994
IP address blocks:        153.43.10.0/24 maxlen: 24
                          153.43.11.0/24 maxlen: 24
                          153.43.12.0/24 maxlen: 24
                          153.43.13.0/24 maxlen: 24
                          153.43.14.0/24 maxlen: 24
                          153.43.15.0/24 maxlen: 24
                          153.43.16.0/24 maxlen: 24
                          153.43.17.0/24 maxlen: 24
                          153.43.18.0/24 maxlen: 24
                          153.43.19.0/24 maxlen: 24
                          153.43.20.0/24 maxlen: 24
                          153.43.21.0/24 maxlen: 24
                          153.43.22.0/24 maxlen: 24
                          153.43.23.0/24 maxlen: 24
                          153.43.24.0/24 maxlen: 24
                          153.43.25.0/24 maxlen: 24
                          153.43.26.0/24 maxlen: 24
                          153.43.27.0/24 maxlen: 24
                          153.43.28.0/24 maxlen: 24
                          153.43.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3b:42:7e:54:c2:dc:7b:1f:3f:00:68:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Sep 18 03:54:22 2025 GMT
            Not After : Dec 17 04:54:22 2025 GMT
        Subject: CN=4aa36e83-a920-42cb-a151-b30b9b382168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:05:e5:db:27:61:2f:bc:92:72:dd:6e:09:47:
                    fd:01:29:2a:ee:ca:c3:48:83:05:bf:93:a5:ef:6f:
                    9d:d2:8e:a8:7b:59:c3:81:a9:09:38:60:01:8a:74:
                    58:76:eb:e9:ed:90:88:b3:f7:f2:f9:c5:52:46:43:
                    0c:7e:04:56:2d:a1:70:97:49:a2:c1:d7:0d:a1:9f:
                    d6:44:6b:6c:c0:70:07:32:93:b2:46:e8:93:20:22:
                    9c:28:0c:3f:ef:3f:d6:97:5f:a0:3d:e3:ab:2a:62:
                    f3:5f:8f:5c:66:1c:8e:c8:1e:24:97:50:e1:21:3e:
                    ea:ed:86:59:4a:92:5c:9c:4b:e9:cd:3d:2d:82:f6:
                    56:e8:b0:88:ad:48:05:2c:6f:72:85:fc:b2:6e:51:
                    bf:91:26:ee:75:0c:16:49:d9:41:84:97:96:20:4c:
                    cd:23:8e:a8:46:53:f8:11:04:6d:a1:3f:01:f8:a9:
                    a5:fa:3a:50:a3:06:ce:82:29:f3:8e:e6:13:1c:42:
                    25:60:1a:aa:da:bf:31:67:0f:03:fa:96:46:e3:ff:
                    f2:ea:e1:12:e0:fe:62:23:3f:8d:9d:e6:2f:84:e6:
                    e4:11:79:3a:8a:ca:33:6b:0c:90:43:93:86:7a:e2:
                    c6:a5:fa:85:ba:92:68:5e:3b:ca:42:62:69:a3:89:
                    c2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F9:4C:0B:05:CC:43:00:88:CD:B3:57:E8:2E:71:A7:8B:DF:FC:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/7323319d-4a50-3a5e-a517-47fd2b9aa544.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.43.10.0-153.43.29.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:ef:4b:d4:6c:c4:2d:d2:58:32:d7:0e:0a:3d:e5:de:4b:e0:
         47:87:a1:6f:b2:ee:54:6d:6a:92:f0:52:26:25:d7:5d:b8:6d:
         d8:56:81:f2:8c:09:df:6c:27:84:83:17:e6:6c:04:5b:6e:80:
         7b:ef:d0:49:51:83:c1:43:e7:cb:2d:18:51:7c:af:b5:58:67:
         91:9f:bc:d6:a5:ea:a4:10:ee:1c:19:33:aa:6f:94:18:72:22:
         1d:01:5d:47:58:42:91:97:4b:d9:60:05:13:18:24:b4:f8:91:
         68:45:af:18:34:9b:c6:97:17:2d:4c:91:17:e4:9a:6f:5a:6a:
         07:fb:fe:93:61:c2:23:98:74:b8:c8:f7:2f:b3:cf:6e:9a:04:
         00:98:89:6c:17:80:8b:9f:2b:9d:00:1f:64:90:0e:e4:19:6e:
         bd:12:bf:e2:4e:68:b5:d7:9c:bb:df:27:54:07:01:1b:36:45:
         1c:b5:a0:a8:2b:90:2d:24:7f:ad:7d:ec:5e:c7:87:ac:26:88:
         f2:22:b2:b2:26:e0:6b:60:4e:d2:c9:b2:6c:a5:24:89:33:f4:
         ae:06:8d:b7:b1:be:bf:f3:1d:82:18:4f:cd:58:b3:fb:aa:7d:
         d2:42:20:7f:b2:d9:5c:30:af:7c:f0:66:47:68:7c:52:43:9c:
         50:6e:ab:69
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEs7Qn5Uwtx7Hz8AaEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy
ZDFiMB4XDTI1MDkxODAzNTQyMloXDTI1MTIxNzA0NTQyMlowLzEtMCsGA1UEAxMk
NGFhMzZlODMtYTkyMC00MmNiLWExNTEtYjMwYjliMzgyMTY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAXl2ydhL7ySct1uCUf9ASkq7srDSIMFv5Ol
72+d0o6oe1nDgakJOGABinRYduvp7ZCIs/fy+cVSRkMMfgRWLaFwl0miwdcNoZ/W
RGtswHAHMpOyRuiTICKcKAw/7z/Wl1+gPeOrKmLzX49cZhyOyB4kl1DhIT7q7YZZ
SpJcnEvpzT0tgvZW6LCIrUgFLG9yhfyyblG/kSbudQwWSdlBhJeWIEzNI46oRlP4
EQRtoT8B+Kml+jpQowbOginzjuYTHEIlYBqq2r8xZw8D+pZG4//y6uES4P5iIz+N
neYvhObkEXk6isozawyQQ5OGeuLGpfqFupJoXjvKQmJpo4nCRwIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFEv5TAsFzEMAiM2zV+gucaeL3/wXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi
YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvNzMyMzMxOWQtNGE1MC0z
YTVlLWE1MTctNDdmZDJiOWFhNTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj
N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw
MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw
YWY5MDJkMWIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGZKwoD
BAGZKxwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEABO9L1GzELdJYMtcOCj3l3kvgR4ehb7LuVG1qkvBSJiXX
Xbht2FaB8owJ32wnhIMX5mwEW26Ae+/QSVGDwUPnyy0YUXyvtVhnkZ+81qXqpBDu
HBkzqm+UGHIiHQFdR1hCkZdL2WAFExgktPiRaEWvGDSbxpcXLUyRF+Sab1pqB/v+
k2HCI5h0uMj3L7PPbpoEAJiJbBeAi58rnQAfZJAO5BluvRK/4k5otdecu98nVAcB
GzZFHLWgqCuQLSR/rX3sXseHrCaI8iKysibga2BO0smybKUkiTP0rgaNt7G+v/Md
ghhPzViz+6p90kIgf7LZXDCvfPBmR2h8UkOcUG6raQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:21:32 2025 by rpki-client