Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d02e71-7d79-3b41-9ec7-575fc812cc08.roa
File:                     53d02e71-7d79-3b41-9ec7-575fc812cc08.roa (raw, json)
Hash identifier:          0t69CuFFi0tZ3y+MivfbN+GLz+nVx1LFvoBGcN/X7e0=
Subject key identifier:   3A:AC:52:E7:70:27:77:BA:D7:1F:C1:A9:70:50:E0:B8:2B:3B:93:5F
Certificate issuer:       /CN=53d76580-9dca-44c4-9727-ef7385e30e49
Certificate serial:       010D0C9F432858489BA0A7ECE2373AA71A7C0B80
Authority key identifier: AB:09:7D:A7:E1:56:48:5C:1B:10:6F:5E:B7:0E:71:FF:AD:BA:49:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d02e71-7d79-3b41-9ec7-575fc812cc08.roa
Signing time:             Mon 20 Jan 2025 14:00:51 +0000
ROA not before:           Mon 20 Jan 2025 14:00:51 +0000
ROA not after:            Sun 20 Apr 2025 13:00:51 +0000
asID:                     6079
IP address blocks:        167.253.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9b:a0:a7:ec:e2:37:3a:a7:1a:7c:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d76580-9dca-44c4-9727-ef7385e30e49
        Validity
            Not Before: Jan 20 14:00:51 2025 GMT
            Not After : Apr 20 13:00:51 2025 GMT
        Subject: CN=e695710c-1abe-4a9b-a6fe-b90377bc0e29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:61:f1:ba:8c:6e:7a:c4:f1:84:7d:e4:84:8f:
                    c1:a9:b9:08:4b:df:07:3d:49:51:06:7d:22:04:f7:
                    e3:43:33:4d:29:68:10:fb:3c:dd:4a:2d:a9:69:70:
                    61:7c:c3:fe:63:0f:50:ec:af:0a:81:c9:f5:58:99:
                    a0:0b:5d:59:fa:76:91:50:b3:36:72:4c:81:5e:64:
                    8f:4a:61:03:b2:c1:9b:0c:9a:af:d9:ed:7f:3f:4a:
                    5f:a6:65:84:77:6f:9b:66:20:29:d3:ef:04:0d:ad:
                    39:cc:e1:6a:c7:12:f7:27:4d:d6:b7:5c:6d:c9:75:
                    68:79:9f:3b:ae:e5:1a:fd:f9:60:38:ef:9e:90:92:
                    7a:11:a6:6e:db:4e:54:7f:54:3c:5b:7d:49:9b:e3:
                    9e:d7:4a:49:9d:10:4a:37:5d:8f:f6:4a:48:f9:ad:
                    02:9a:0d:63:9a:59:85:ef:2d:58:44:24:e7:42:eb:
                    58:cd:97:9d:3e:ed:e1:c4:34:a5:95:c6:d8:23:aa:
                    6b:ad:7b:d1:8e:0b:7e:0d:24:17:7c:4c:d1:4b:dd:
                    51:b1:cb:b7:23:aa:ac:36:3e:98:c9:dc:60:18:f5:
                    38:aa:8c:2b:1f:58:9f:10:d2:38:e5:5e:be:42:19:
                    e4:d7:c3:f5:2e:29:f4:22:c2:50:4e:56:9d:52:f1:
                    e7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:AC:52:E7:70:27:77:BA:D7:1F:C1:A9:70:50:E0:B8:2B:3B:93:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d02e71-7d79-3b41-9ec7-575fc812cc08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.crl

            X509v3 Authority Key Identifier:
                keyid:AB:09:7D:A7:E1:56:48:5C:1B:10:6F:5E:B7:0E:71:FF:AD:BA:49:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:b6:e8:f8:14:3c:d3:eb:2a:83:35:1e:8e:b1:11:28:df:b5:
         32:c8:04:a4:82:9e:e7:73:1b:26:73:c6:e4:6a:82:52:b5:a7:
         31:28:a8:09:13:9d:7e:3c:9f:68:ab:f8:61:ae:96:86:01:89:
         80:7b:db:28:56:77:f1:78:52:81:b3:62:37:be:50:f9:4f:63:
         6e:03:d2:48:28:e4:73:da:5a:c2:65:f3:db:9b:d0:f1:ab:a2:
         a9:54:19:3c:2d:3c:bb:dc:dd:08:f2:cf:9f:dd:2c:7a:ea:f7:
         9d:03:65:2a:35:0b:2c:b2:f7:73:76:f1:48:be:11:56:a4:34:
         8c:09:f2:5d:e8:85:23:32:40:3c:1b:fe:0c:70:74:b0:e2:29:
         5c:8c:6a:e4:f0:9f:79:f4:d5:1b:2a:72:8f:a6:03:34:ed:4d:
         11:1f:74:8d:0f:13:1c:06:fe:e2:c2:7a:e3:3e:21:7b:39:6d:
         89:c7:74:df:7e:6c:ce:93:66:e7:65:ee:d9:2e:01:3f:a6:27:
         0f:ee:09:f5:cc:3d:ee:a8:ec:ec:6d:4b:a2:01:86:3d:d4:18:
         c6:c0:05:54:5b:bd:0e:e9:40:6c:d1:c9:df:bb:ef:d4:86:30:
         57:d7:91:f8:cf:87:b3:00:f7:ab:3f:1c:86:54:f9:fc:31:c0:
         b8:40:af:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:19:07 2025 by rpki-client