Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d02e71-7d79-3b41-9ec7-575fc812cc08.roa
File:                     53d02e71-7d79-3b41-9ec7-575fc812cc08.roa (raw, json)
Hash identifier:          La/MsgVQ61LGKLgaC49MqWyU4ZjKfI4PGwsavN3Dc5A=
Subject key identifier:   A9:1E:35:18:D8:03:58:1C:46:E6:5F:01:5B:39:B9:42:76:75:5C:1F
Certificate issuer:       /CN=53d76580-9dca-44c4-9727-ef7385e30e49
Certificate serial:       010D0C9F4328584B3AEC477D6D5268F7426399E8
Authority key identifier: AB:09:7D:A7:E1:56:48:5C:1B:10:6F:5E:B7:0E:71:FF:AD:BA:49:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d02e71-7d79-3b41-9ec7-575fc812cc08.roa
Signing time:             Thu 18 Sep 2025 01:00:32 +0000
ROA not before:           Thu 18 Sep 2025 01:00:32 +0000
ROA not after:            Wed 17 Dec 2025 02:00:32 +0000
asID:                     6079
IP address blocks:        167.253.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3a:ec:47:7d:6d:52:68:f7:42:63:99:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d76580-9dca-44c4-9727-ef7385e30e49
        Validity
            Not Before: Sep 18 01:00:32 2025 GMT
            Not After : Dec 17 02:00:32 2025 GMT
        Subject: CN=5433eea4-5d93-467f-b433-45d49e5433dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f0:40:0b:85:83:d7:c9:60:e0:52:6a:a1:fc:
                    ff:33:0f:e5:06:dd:67:7e:0a:da:15:c3:fa:4f:9f:
                    34:1b:6f:63:98:aa:a7:f0:d7:9d:10:d5:cc:34:ef:
                    ce:6a:2e:df:bb:79:b0:89:4b:90:db:03:7d:5a:06:
                    0c:c4:1b:03:f2:c2:8e:0a:f5:49:e2:86:5a:ca:24:
                    bd:5e:f4:ec:d2:f7:82:99:ca:d7:4e:6d:d8:80:9e:
                    3f:57:68:9a:ff:64:97:cf:df:93:30:89:1a:3d:15:
                    44:6a:51:2a:69:84:fd:4e:0a:68:9b:60:7f:85:57:
                    ec:4f:73:dc:4c:1d:b4:d0:b7:53:f2:1c:b7:4e:c9:
                    1a:c9:bc:bb:07:b1:37:87:1f:e0:cb:84:57:07:55:
                    ec:a1:ae:bc:b7:46:0f:d8:53:49:e7:2c:4f:80:cc:
                    c3:12:0e:05:2e:85:1c:74:eb:6e:62:71:64:c3:4a:
                    21:45:7b:4d:a0:5c:23:4c:74:02:ff:f6:9b:0e:d1:
                    6a:f9:06:98:48:99:16:ef:05:8d:3b:56:ca:04:8a:
                    d6:8c:f8:d7:cd:c9:09:6a:73:eb:9d:a4:26:54:38:
                    64:8c:89:d3:c9:2e:fe:5a:8b:f3:0d:49:36:a2:5e:
                    2d:48:92:2b:60:34:5a:d8:bf:39:f2:4a:e8:63:c4:
                    bc:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:1E:35:18:D8:03:58:1C:46:E6:5F:01:5B:39:B9:42:76:75:5C:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d02e71-7d79-3b41-9ec7-575fc812cc08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.crl

            X509v3 Authority Key Identifier:
                keyid:AB:09:7D:A7:E1:56:48:5C:1B:10:6F:5E:B7:0E:71:FF:AD:BA:49:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:93:45:03:8f:0e:de:16:9b:7e:99:71:15:97:37:2a:31:9e:
         69:35:f0:11:6d:16:91:72:9a:37:ad:ef:ed:55:47:d4:d7:a5:
         d3:dd:6c:09:77:08:83:81:60:1b:33:98:7c:b3:63:6b:20:32:
         e8:28:63:b8:7c:f7:a8:32:7c:98:fe:8e:6a:df:8c:82:f4:7e:
         cb:28:65:16:ec:68:bc:1c:80:de:a7:67:22:33:f1:0b:6d:ab:
         93:36:80:33:f1:e5:11:17:5f:b1:76:98:0c:fd:de:21:6a:1c:
         5f:ec:b2:23:93:dc:e4:39:38:4e:b6:05:7b:53:19:16:07:9e:
         09:89:3e:26:dc:35:01:ab:f8:6a:49:9b:aa:4b:22:43:2f:17:
         4e:a6:dd:fb:59:fa:96:5e:78:5d:0e:34:cf:c4:85:b3:f8:71:
         da:fd:05:59:17:07:96:e2:a5:bb:18:b4:44:c0:6c:c7:bf:9c:
         e4:d1:bf:bd:20:27:9f:d7:7b:5a:75:25:fc:c2:27:85:ec:6b:
         0e:b4:51:d6:37:9a:ee:20:de:e4:4a:45:e6:89:38:7f:3d:21:
         0e:03:4d:7a:10:cd:dc:77:87:a8:42:c8:0c:c1:41:88:96:2f:
         e9:37:f5:dc:2d:d1:ca:fe:16:a0:7f:03:97:2d:5d:a5:4c:4b:
         d8:99:1e:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs67Ed9bVJo90JjmegwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTNkNzY1ODAtOWRjYS00NGM0LTk3MjctZWY3Mzg1ZTMw
ZTQ5MB4XDTI1MDkxODAxMDAzMloXDTI1MTIxNzAyMDAzMlowLzEtMCsGA1UEAxMk
NTQzM2VlYTQtNWQ5My00NjdmLWI0MzMtNDVkNDllNTQzM2RkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fBAC4WD18lg4FJqofz/Mw/lBt1nfgraFcP6
T580G29jmKqn8NedENXMNO/Oai7fu3mwiUuQ2wN9WgYMxBsD8sKOCvVJ4oZayiS9
XvTs0veCmcrXTm3YgJ4/V2ia/2SXz9+TMIkaPRVEalEqaYT9Tgpom2B/hVfsT3Pc
TB200LdT8hy3Tskayby7B7E3hx/gy4RXB1Xsoa68t0YP2FNJ5yxPgMzDEg4FLoUc
dOtuYnFkw0ohRXtNoFwjTHQC//abDtFq+QaYSJkW7wWNO1bKBIrWjPjXzckJanPr
naQmVDhkjInTyS7+WovzDUk2ol4tSJIrYDRa2L858kroY8S8ZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKkeNRjYA1gcRuZfAVs5uUJ2dVwfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81M2Q3
NjU4MC05ZGNhLTQ0YzQtOTcyNy1lZjczODVlMzBlNDkvNTNkMDJlNzEtN2Q3OS0z
YjQxLTllYzctNTc1ZmM4MTJjYzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNTNkNzY1ODAtOWRjYS00NGM0LTk3
MjctZWY3Mzg1ZTMwZTQ5LzUzZDc2NTgwLTlkY2EtNDRjNC05NzI3LWVmNzM4NWUz
MGU0OS5jcmwwHwYDVR0jBBgwFoAUqwl9p+FWSFwbEG9etw5x/626SVcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC81M2Q3NjU4MC05ZGNhLTQ0YzQtOTcyNy1lZjcz
ODVlMzBlNDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/2DMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEGTRQOPDt4Wm36ZcRWXNyoxnmk18BFtFpFymjet7+1VR9TXpdPdbAl3
CIOBYBszmHyzY2sgMugoY7h896gyfJj+jmrfjIL0fssoZRbsaLwcgN6nZyIz8Qtt
q5M2gDPx5REXX7F2mAz93iFqHF/ssiOT3OQ5OE62BXtTGRYHngmJPibcNQGr+GpJ
m6pLIkMvF06m3ftZ+pZeeF0ONM/EhbP4cdr9BVkXB5bipbsYtETAbMe/nOTRv70g
J5/Xe1p1JfzCJ4Xsaw60UdY3mu4g3uRKReaJOH89IQ4DTXoQzdx3h6hCyAzBQYiW
L+k39dwt0cr+FqB/A5ctXaVMS9iZHuI=
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:09:00 2025 by rpki-client