Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53f93371-9395-4cf9-890d-3d0895304982/4e5e9259-3990-37d6-a833-50bb61a463de.roa
File:                     4e5e9259-3990-37d6-a833-50bb61a463de.roa (raw, json)
Hash identifier:          GjonpXrCgqL+4jaBN816C74eirc9uXmKyuts5IAlSaI=
Subject key identifier:   43:99:DD:9F:0D:58:9B:DB:AF:E5:6C:E7:2E:AE:0C:9D:ED:0D:FD:45
Certificate issuer:       /CN=53f93371-9395-4cf9-890d-3d0895304982
Certificate serial:       010D0C9F4328584B92DCE89B22FE51ABDD77AA00
Authority key identifier: 3F:B6:6B:65:6D:1D:7A:B5:BE:51:27:E2:C2:5C:46:BC:4C:46:8E:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53f93371-9395-4cf9-890d-3d0895304982.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53f93371-9395-4cf9-890d-3d0895304982/4e5e9259-3990-37d6-a833-50bb61a463de.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     16509
IP address blocks:        142.202.46.0/30 maxlen: 30
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53f93371-9395-4cf9-890d-3d0895304982/53f93371-9395-4cf9-890d-3d0895304982.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53f93371-9395-4cf9-890d-3d0895304982/53f93371-9395-4cf9-890d-3d0895304982.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53f93371-9395-4cf9-890d-3d0895304982.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dc:e8:9b:22:fe:51:ab:dd:77:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53f93371-9395-4cf9-890d-3d0895304982
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=c21afc58-efc4-4585-b47b-86fff17fb172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:fa:ad:c2:3f:a8:d9:50:12:c9:37:bc:fb:dd:
                    89:b0:8c:6b:89:63:95:c6:3d:dc:9f:83:06:16:fc:
                    a2:c4:d4:f8:7d:16:9b:38:4f:a7:24:7c:8a:f5:f8:
                    ab:35:f8:47:c1:73:67:e8:d1:ed:a2:2e:ea:91:f8:
                    a3:ab:5b:3e:d1:76:e2:c9:f3:ff:76:83:de:67:5d:
                    1a:4a:65:b4:e3:72:81:31:ca:31:2e:d9:9e:ee:b9:
                    fd:71:35:a9:c4:df:a9:bf:f7:44:17:50:c0:e3:8d:
                    b3:cd:78:6d:d7:b4:9b:5c:ac:16:75:2d:7c:96:c4:
                    2d:c3:2a:24:1b:1e:1b:44:fc:24:5f:b9:85:30:70:
                    71:00:16:ff:b0:b5:c8:0a:e4:ef:fa:91:6f:ef:97:
                    00:47:1d:be:67:e8:7d:59:2a:1e:e2:69:bd:ba:8d:
                    25:42:e3:b9:10:c4:34:c6:e5:e4:9a:8a:35:d8:5f:
                    19:01:51:e3:4c:94:1c:fb:07:bb:c6:4c:47:ad:31:
                    c4:c5:83:23:08:b7:78:c4:23:d6:5e:20:8b:5c:08:
                    89:6b:dc:14:32:4a:60:d3:76:6c:5c:47:88:88:7e:
                    7d:0b:9c:69:6f:11:da:79:56:48:fb:8a:d1:2b:4e:
                    ba:98:79:bb:f4:6e:84:e2:b1:8a:fc:50:6f:e8:53:
                    d6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:99:DD:9F:0D:58:9B:DB:AF:E5:6C:E7:2E:AE:0C:9D:ED:0D:FD:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53f93371-9395-4cf9-890d-3d0895304982/4e5e9259-3990-37d6-a833-50bb61a463de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53f93371-9395-4cf9-890d-3d0895304982/53f93371-9395-4cf9-890d-3d0895304982.crl

            X509v3 Authority Key Identifier:
                keyid:3F:B6:6B:65:6D:1D:7A:B5:BE:51:27:E2:C2:5C:46:BC:4C:46:8E:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53f93371-9395-4cf9-890d-3d0895304982.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.46.0/30

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:88:26:db:25:ce:ea:29:57:8c:53:cf:a5:ba:e0:a0:bd:32:
         27:17:23:81:90:61:f4:7b:a9:40:b6:45:17:15:89:52:3b:04:
         59:ce:10:9d:a6:0b:4a:03:cb:ca:39:1b:7b:78:fd:a1:c2:f3:
         76:2b:7e:a1:80:a0:d4:cd:2e:8c:77:13:ff:56:1c:c5:2e:34:
         9a:2d:8b:30:ee:c8:bd:74:27:75:be:dc:a8:ce:26:68:06:bb:
         64:60:f4:88:2a:c4:2b:6c:1c:f0:83:82:d3:e3:82:e5:7d:1a:
         f9:dc:74:93:e8:5e:22:6d:8f:dd:23:84:98:8f:73:fa:0a:54:
         ee:5b:f0:51:cc:05:39:d5:d5:9a:7e:b3:13:2b:b9:9a:10:a8:
         25:46:dc:6c:18:84:bc:f4:35:f6:06:aa:51:93:a0:85:63:a2:
         7e:6d:07:c6:ab:48:ce:15:14:2b:05:ac:20:7b:b2:4b:d0:be:
         f8:fc:b7:db:c0:3c:11:c3:da:11:64:55:4f:ac:fd:39:af:92:
         20:4c:b7:45:b8:53:9e:8d:2a:7a:4b:8d:70:68:23:7c:22:be:
         a7:3e:f8:2b:18:33:b3:8b:c4:6d:d7:6f:3a:77:db:86:3d:6d:
         7f:ab:df:a6:48:21:df:ef:da:dd:c3:36:56:3b:af:d5:98:22:
         ce:d9:08:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:11:17 2025 by rpki-client