Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/d884356d-6b66-398b-b1cd-f3edf2325b79.roa
File:                     d884356d-6b66-398b-b1cd-f3edf2325b79.roa (raw, json)
Hash identifier:          uelKAvDzaS9yHOo4TFCqSZLyeJVKsq+CAXVrSnfewXE=
Subject key identifier:   79:E4:99:DC:8F:82:0F:87:5B:67:CE:97:7F:63:68:2E:07:1B:A9:37
Certificate issuer:       /CN=53d76580-9dca-44c4-9727-ef7385e30e49
Certificate serial:       010D0C9F4328584B3AEC4750FF4082887B371880
Authority key identifier: AB:09:7D:A7:E1:56:48:5C:1B:10:6F:5E:B7:0E:71:FF:AD:BA:49:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/d884356d-6b66-398b-b1cd-f3edf2325b79.roa
Signing time:             Thu 18 Sep 2025 01:00:32 +0000
ROA not before:           Thu 18 Sep 2025 01:00:32 +0000
ROA not after:            Wed 17 Dec 2025 02:00:32 +0000
asID:                     6079
IP address blocks:        167.253.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3a:ec:47:50:ff:40:82:88:7b:37:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d76580-9dca-44c4-9727-ef7385e30e49
        Validity
            Not Before: Sep 18 01:00:32 2025 GMT
            Not After : Dec 17 02:00:32 2025 GMT
        Subject: CN=e18d8178-0227-46e5-bea9-ecc959d53d21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:47:9b:81:31:a7:a7:cf:6b:50:97:2f:64:03:
                    e5:a3:8c:cd:76:46:bb:91:c0:68:91:86:a3:07:a2:
                    6b:a8:68:8b:f0:4a:10:84:25:0f:83:ba:b9:33:c3:
                    b6:3d:92:90:5a:a1:03:4a:f3:99:3a:33:75:8e:ce:
                    b7:db:ca:48:fc:c5:ec:04:bd:54:1d:e0:83:61:4b:
                    e1:f7:7f:d1:f9:d5:93:87:92:dd:43:81:fd:08:76:
                    a3:d8:63:b2:2d:0f:7a:0d:df:ed:c0:b0:54:1e:9b:
                    5a:8f:0a:34:f3:51:e8:06:ab:f4:db:ba:f3:c0:83:
                    ab:79:8f:0a:16:20:60:52:18:e8:42:0b:db:18:9e:
                    af:48:a5:05:9d:d3:48:e1:ab:0e:8e:d9:5b:ef:db:
                    63:fd:43:df:88:fa:3c:31:0c:2a:0f:46:52:84:e0:
                    8d:04:e1:a8:21:a2:47:c6:d7:19:89:0e:c1:17:95:
                    04:05:36:71:06:4f:bc:c3:83:33:58:62:22:f1:18:
                    31:d6:db:a5:4e:2f:51:53:91:8a:66:53:40:2c:2d:
                    80:fe:b8:62:87:2d:7b:e7:9f:57:de:6d:6f:ac:9f:
                    d8:5b:ab:6d:48:bd:d7:a9:68:8b:ca:2c:a7:05:28:
                    64:14:1d:97:b8:77:c3:ff:fa:89:45:e9:e3:e8:35:
                    7b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E4:99:DC:8F:82:0F:87:5B:67:CE:97:7F:63:68:2E:07:1B:A9:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/d884356d-6b66-398b-b1cd-f3edf2325b79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.crl

            X509v3 Authority Key Identifier:
                keyid:AB:09:7D:A7:E1:56:48:5C:1B:10:6F:5E:B7:0E:71:FF:AD:BA:49:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:b2:6b:99:7e:73:6f:3f:9b:0c:6b:a0:14:18:d4:d9:a7:07:
         58:15:42:44:c9:78:66:19:1d:7e:39:70:dd:b8:c9:6d:31:88:
         11:f6:6a:7f:27:a0:fc:60:47:81:1e:ef:57:e7:d6:bf:2f:f2:
         f7:58:58:33:66:9f:6a:01:ce:90:e0:6e:11:6d:8e:e4:77:65:
         16:4c:e3:c4:e6:b6:35:1a:77:30:78:eb:d5:50:72:02:8e:df:
         6e:3e:d8:29:86:b9:4f:42:83:16:f1:8b:ab:02:b8:44:ef:1f:
         16:3a:e0:ec:2b:3b:d9:78:84:6c:a9:e5:e5:2e:a2:0d:5b:4b:
         34:4b:4b:2c:24:74:94:fd:2e:fd:25:46:f2:48:f9:36:63:59:
         7a:16:71:ef:d9:4e:64:6f:d7:2b:f6:cc:db:1d:d4:95:78:2b:
         bf:6f:c2:86:e3:bb:5a:25:5e:7b:5d:ef:59:72:3e:59:8f:6b:
         2c:18:00:d8:ef:1c:82:81:9f:ec:01:01:91:35:ee:41:2e:0a:
         72:1c:df:f1:97:3f:e1:f6:51:bb:a1:53:b6:0d:4f:87:09:67:
         cf:7f:03:57:eb:51:72:b1:7e:2b:c1:10:1a:ec:be:bd:49:0b:
         da:2c:9f:c2:11:b0:0a:fa:c8:57:5d:8f:97:3d:e2:53:4a:c7:
         50:b8:65:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:08:58 2025 by rpki-client