Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5/7531577c-052a-335e-b81a-b93ea9025e27.roa
File:                     7531577c-052a-335e-b81a-b93ea9025e27.roa (raw, json)
Hash identifier:          SPy0dCqVCNhXcj83d/QZd6vjNSZR+jXktqhJCPiuJ8s=
Subject key identifier:   C2:AD:18:72:FB:42:E7:53:79:40:08:A7:15:F9:79:B3:FE:61:57:71
Certificate issuer:       /CN=4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5
Certificate serial:       010D0C9F4328584EF2E78152B6C0FD10E0B4EA80
Authority key identifier: 3D:CC:92:ED:AA:88:DE:1A:64:44:15:F6:EC:41:AE:0E:FF:5D:84:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5/7531577c-052a-335e-b81a-b93ea9025e27.roa
Signing time:             Tue 25 Aug 2026 01:00:12 +0000
ROA not before:           Tue 25 Aug 2026 01:00:12 +0000
ROA not after:            Mon 23 Nov 2026 02:00:12 +0000
asID:                     26548
IP address blocks:        167.253.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f2:e7:81:52:b6:c0:fd:10:e0:b4:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5
        Validity
            Not Before: Aug 25 01:00:12 2026 GMT
            Not After : Nov 23 02:00:12 2026 GMT
        Subject: CN=7779e762-9c97-4c2c-b858-a83c7644da29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:3f:59:a7:fc:22:a8:00:d5:25:ae:47:44:e3:
                    d8:fe:8e:2e:18:6b:d9:ec:a4:57:bd:34:aa:99:0a:
                    4f:ce:9e:37:3c:0b:89:d4:71:1a:68:78:77:35:36:
                    39:bb:00:75:a4:c2:80:56:2d:f6:10:f4:2c:f2:4d:
                    95:f0:90:18:f6:33:3a:42:56:e8:a6:7b:b0:cc:1c:
                    af:8e:cb:65:a9:1f:8b:8e:6a:bd:15:d5:61:bf:6e:
                    aa:65:f8:4b:17:16:0c:65:1b:06:8c:0c:b1:6b:0f:
                    9e:c9:94:4f:fe:ba:3a:15:a0:18:85:de:43:ca:62:
                    e0:c5:17:de:2b:71:4a:cc:f2:d5:dc:39:e1:d5:f4:
                    64:75:ea:20:f2:f2:47:bc:82:a0:17:b3:a6:5a:50:
                    04:48:71:f5:d8:60:8f:f3:a7:90:72:91:db:7d:da:
                    93:b1:45:94:12:54:31:99:56:f2:f5:4f:db:71:b7:
                    05:5b:1f:b1:19:c7:89:9e:a1:92:e0:a1:2e:96:3e:
                    eb:b6:16:94:65:5e:67:ea:0e:2d:46:0d:25:5d:c7:
                    4b:da:fc:b7:76:ae:ed:8d:4b:90:5e:cd:e5:73:22:
                    f7:ae:84:75:61:78:66:12:88:1f:3b:90:d7:2c:13:
                    70:4d:7b:8d:b6:03:84:e0:92:75:c2:99:95:30:f3:
                    e8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:AD:18:72:FB:42:E7:53:79:40:08:A7:15:F9:79:B3:FE:61:57:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5/7531577c-052a-335e-b81a-b93ea9025e27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5.crl

            X509v3 Authority Key Identifier:
                keyid:3D:CC:92:ED:AA:88:DE:1A:64:44:15:F6:EC:41:AE:0E:FF:5D:84:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:ff:f9:31:c8:4f:62:3a:04:89:66:44:3f:87:a9:7a:0d:da:
         19:79:a7:44:19:2b:00:62:10:30:dd:d7:72:29:87:f4:d9:e7:
         d4:d5:39:3d:b4:3f:c6:d8:50:bc:c9:4f:e9:d7:dd:86:18:67:
         88:85:6f:f3:8e:e8:56:34:bc:21:3e:91:f7:e2:2b:99:bc:c8:
         18:b6:9c:15:9f:d8:f5:ff:a4:36:f7:80:b1:82:07:68:dc:f9:
         79:4d:10:29:35:56:eb:8f:e1:15:b1:8a:d1:0d:e1:35:da:32:
         70:b5:da:ea:41:cd:c1:92:57:db:da:10:8a:53:2f:06:d9:dc:
         ea:fb:d0:8c:1f:b9:98:ae:99:e2:c1:85:d2:3b:e3:de:b7:77:
         39:71:38:26:ce:1a:bf:e1:a0:29:29:12:e2:15:a3:f6:eb:f8:
         d5:12:6e:90:7b:89:b0:b7:42:87:d0:77:88:5d:ec:d4:31:39:
         31:2a:f7:4f:05:b4:5d:ed:e7:5f:3e:c8:94:40:33:44:ed:eb:
         51:69:04:b6:1c:3f:55:48:e5:4a:33:11:c6:7b:36:b0:28:8b:
         2d:d7:8d:6a:98:c5:de:e6:f1:a7:f8:1a:ad:64:44:33:16:7b:
         f2:42:ee:ac:02:78:c1:e5:f0:b4:a8:3c:de:1a:89:cf:4a:5e:
         d9:73:7a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 10:21:43 2026 by rpki-client