Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/42b05d4b-2d25-39f1-b061-7787fafdc486.roa
File:                     42b05d4b-2d25-39f1-b061-7787fafdc486.roa (raw, json)
Hash identifier:          TlCQ9G2mWIPukBy5D85IU6IdYHybEtVG1MRoSPf0hA4=
Subject key identifier:   98:0D:D5:D6:49:85:02:96:59:70:C1:5E:2F:09:D7:0C:47:84:9A:71
Certificate issuer:       /CN=53d76580-9dca-44c4-9727-ef7385e30e49
Certificate serial:       010D0C9F4328584DDBBB11E15D8F2757B2639E80
Authority key identifier: AB:09:7D:A7:E1:56:48:5C:1B:10:6F:5E:B7:0E:71:FF:AD:BA:49:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/42b05d4b-2d25-39f1-b061-7787fafdc486.roa
Signing time:             Sun 17 May 2026 01:00:24 +0000
ROA not before:           Sun 17 May 2026 01:00:24 +0000
ROA not after:            Sat 15 Aug 2026 01:00:24 +0000
asID:                     6079
IP address blocks:        167.253.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:db:bb:11:e1:5d:8f:27:57:b2:63:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d76580-9dca-44c4-9727-ef7385e30e49
        Validity
            Not Before: May 17 01:00:24 2026 GMT
            Not After : Aug 15 01:00:24 2026 GMT
        Subject: CN=50b51a31-3790-4187-9c83-a2967269e63c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ab:a9:d9:94:0b:74:d9:4d:1b:70:53:61:1d:
                    b7:f6:39:10:10:5c:a3:3b:67:06:70:2d:d5:1b:91:
                    5e:79:92:54:c4:e6:93:61:30:8c:e1:0d:8f:46:22:
                    71:25:8d:06:56:f1:92:97:65:e5:0e:9b:35:32:cf:
                    8f:e7:36:46:f0:76:cf:10:80:1a:5f:af:80:53:0a:
                    56:d6:ff:1a:53:36:e2:93:96:17:c1:d4:8b:16:f5:
                    4c:bc:61:71:05:57:f7:37:60:95:85:57:ea:ce:9a:
                    60:72:55:cc:ba:99:b5:27:7a:14:ba:94:15:66:78:
                    17:3e:3e:31:1d:28:ed:73:f5:de:e7:39:33:0d:74:
                    d4:12:81:94:4b:93:1f:d1:4b:1a:2c:e5:47:16:47:
                    73:89:d5:ef:03:af:2e:5e:3d:29:8b:2f:83:cc:b5:
                    49:96:52:4a:82:31:25:b1:84:44:6f:7a:5b:fb:9e:
                    16:1f:fc:8e:e4:83:9c:58:44:02:31:95:b8:06:1b:
                    e5:59:73:c1:da:1b:b2:cb:5f:e8:66:ce:1e:7d:00:
                    52:a4:17:73:1b:1b:94:21:e1:be:6d:29:fe:9b:1a:
                    a7:65:f1:01:e8:07:c7:34:e9:8a:34:6d:d4:a5:bf:
                    c6:62:f1:d7:6b:50:a5:24:20:1c:08:04:9f:aa:c8:
                    be:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:0D:D5:D6:49:85:02:96:59:70:C1:5E:2F:09:D7:0C:47:84:9A:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/42b05d4b-2d25-39f1-b061-7787fafdc486.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.crl

            X509v3 Authority Key Identifier:
                keyid:AB:09:7D:A7:E1:56:48:5C:1B:10:6F:5E:B7:0E:71:FF:AD:BA:49:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:e3:72:81:ca:f8:31:86:67:e8:1c:84:e5:0c:86:29:bc:35:
         a0:af:84:54:76:83:0b:73:e4:ce:47:7a:70:e3:7d:bc:65:27:
         b2:42:37:74:e7:b1:4b:e2:fa:cb:f3:7b:d5:f0:06:c1:8d:29:
         74:d7:83:f5:39:70:33:ef:6a:e5:8e:ee:80:95:77:5e:86:aa:
         23:5a:0e:b7:44:27:56:a6:12:8a:29:1b:57:b3:4b:4e:30:14:
         5d:6c:4c:05:1b:ee:a4:56:91:16:13:2f:d5:52:9d:44:da:e0:
         cb:0c:af:4e:3e:56:15:49:de:1b:a1:37:c5:fd:ce:11:45:3c:
         e7:12:e1:58:9c:75:dc:8f:5f:1e:62:b7:f6:4d:7f:d7:30:1d:
         61:88:c3:3a:55:32:3d:2c:51:6e:53:27:22:4f:80:65:2e:d1:
         b6:49:60:6c:5f:2e:1e:c0:2a:fb:6e:9f:1c:be:78:a2:28:74:
         79:79:10:26:00:c0:ac:08:c3:34:5b:58:b9:a8:9f:58:91:3c:
         e3:71:1e:55:f8:45:04:3d:02:fd:e7:3f:8b:81:a0:39:48:28:
         5b:b1:0a:d2:05:4a:47:31:7e:8d:e8:3a:59:30:25:97:7a:51:
         ce:5e:ee:33:75:60:e0:f0:5b:b6:30:53:1a:16:fc:f4:4f:10:
         fc:7d:7a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:09:21 2026 by rpki-client