Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/5c38cb40-d247-3c3a-9555-6151aaab6c22.roa
File:                     5c38cb40-d247-3c3a-9555-6151aaab6c22.roa (raw, json)
Hash identifier:          PaJTFd42C9Gy2Ql/yuBtOKv24Ry9/OH/4UIfFvi8Ucg=
Subject key identifier:   F7:A1:87:70:6F:7D:BE:F5:5A:50:B8:E7:53:3B:0A:CD:DA:D9:A3:B9
Certificate issuer:       /CN=53d76580-9dca-44c4-9727-ef7385e30e49
Certificate serial:       010D0C9F4328584EA7889ADBE1160C599A4BDA10
Authority key identifier: AB:09:7D:A7:E1:56:48:5C:1B:10:6F:5E:B7:0E:71:FF:AD:BA:49:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/5c38cb40-d247-3c3a-9555-6151aaab6c22.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7018
IP address blocks:        167.253.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:9a:db:e1:16:0c:59:9a:4b:da:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d76580-9dca-44c4-9727-ef7385e30e49
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4549e1bb-0b5b-4340-b0d8-2560006d8c41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:54:0d:b4:bf:04:7d:d7:60:49:73:28:3b:2d:
                    40:72:50:1d:2e:1e:80:99:f3:c8:1b:dd:26:08:aa:
                    d4:f9:55:15:16:b2:38:1a:0e:89:93:7d:09:b8:70:
                    12:98:5f:6c:fe:37:e0:95:c1:d0:1c:3e:34:80:bd:
                    e8:1c:2e:9f:77:c3:2b:c2:a8:7c:92:95:65:f0:97:
                    f2:9a:c0:97:e6:b1:67:7b:65:5d:83:7e:d3:11:df:
                    d0:37:37:fe:72:71:18:64:6d:9f:ce:0f:17:7b:2e:
                    0f:e5:b5:7c:f4:4f:be:c3:77:f2:67:9d:39:91:aa:
                    83:2d:95:5e:b1:a0:88:91:d3:29:f1:0e:20:4e:63:
                    c0:a5:49:79:9f:21:5d:d8:f3:51:60:5e:aa:c2:24:
                    d6:38:37:4c:01:b2:5f:79:53:a1:96:03:39:f3:eb:
                    d1:4d:4e:c6:8a:9b:21:1c:0a:0d:da:19:4e:e2:d8:
                    87:37:61:bb:3e:f6:a3:9a:9b:fe:eb:9b:58:1c:ec:
                    ba:33:82:78:9e:2c:af:f7:7e:f3:44:8e:df:12:38:
                    ef:a7:5c:9a:0b:ff:2d:06:78:f1:19:0b:1e:27:24:
                    7d:97:ca:b1:69:87:ab:e3:46:37:95:00:b7:76:17:
                    4a:21:1b:9d:65:14:d4:33:cf:19:0c:0d:8a:ec:6f:
                    29:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A1:87:70:6F:7D:BE:F5:5A:50:B8:E7:53:3B:0A:CD:DA:D9:A3:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/5c38cb40-d247-3c3a-9555-6151aaab6c22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.crl

            X509v3 Authority Key Identifier:
                keyid:AB:09:7D:A7:E1:56:48:5C:1B:10:6F:5E:B7:0E:71:FF:AD:BA:49:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:93:e5:37:0f:d0:79:a7:a9:10:40:75:00:d5:1c:bc:c5:1b:
         7c:6f:55:21:3b:ef:54:25:0c:bd:3d:56:0a:f2:0c:2a:0a:b0:
         7f:68:28:b5:cc:c4:91:f0:b5:53:48:57:ba:11:7e:aa:82:47:
         4d:6e:67:b9:cb:04:df:e8:bc:a8:b2:a8:51:e8:93:18:75:94:
         81:2c:0f:f1:c0:b9:5d:76:ea:2f:84:b8:5a:df:6e:84:1f:eb:
         ed:ff:12:c8:08:20:7e:b8:bc:1d:a0:b2:8c:f6:ac:bc:85:6e:
         8d:31:af:f4:3d:06:6e:6a:9a:44:d0:a4:4d:92:21:22:77:61:
         83:3d:78:c3:0c:67:6c:3b:88:b7:d2:3c:bc:6a:0d:c6:2e:c1:
         de:e4:e6:88:7f:56:7a:c2:21:85:78:08:45:b8:18:dc:20:27:
         11:d4:40:ef:bc:f4:39:a9:8a:39:86:13:4e:3a:04:ba:fa:e8:
         59:35:97:3c:ea:df:47:54:e2:b8:1c:c7:19:4e:c2:67:da:a8:
         ba:6f:bf:0e:49:30:73:33:c3:aa:1c:7d:ed:f6:1a:8f:a9:17:
         7a:61:61:be:ad:34:86:d6:6a:24:23:e0:5b:d9:3e:41:08:c9:
         65:48:fc:78:7e:cf:65:3d:d9:2a:41:d3:d8:d1:58:03:58:a0:
         a9:e5:af:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:41:34 2026 by rpki-client