Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c50e3d6-0902-477b-85fe-37d2d7c97e30/53cef460-001d-3986-aa8d-57e45633957e.roa
File:                     53cef460-001d-3986-aa8d-57e45633957e.roa (raw, json)
Hash identifier:          TDjxcQB7EtdNi9F8/T9XVM3616qwEw/DY+4ftnZ55O8=
Subject key identifier:   28:5B:FD:9C:29:4D:BD:6C:B4:F7:99:BA:09:57:97:86:9B:56:2D:F3
Certificate issuer:       /CN=0c50e3d6-0902-477b-85fe-37d2d7c97e30
Certificate serial:       010D0C9F4328584B92DCF6F57FB43380CBC250A0
Authority key identifier: C1:36:E9:3C:D0:03:48:7A:EC:54:B6:CB:90:1A:24:7C:3E:D8:ED:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c50e3d6-0902-477b-85fe-37d2d7c97e30.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c50e3d6-0902-477b-85fe-37d2d7c97e30/53cef460-001d-3986-aa8d-57e45633957e.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     22497
IP address blocks:        167.253.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c50e3d6-0902-477b-85fe-37d2d7c97e30/0c50e3d6-0902-477b-85fe-37d2d7c97e30.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c50e3d6-0902-477b-85fe-37d2d7c97e30/0c50e3d6-0902-477b-85fe-37d2d7c97e30.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c50e3d6-0902-477b-85fe-37d2d7c97e30.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dc:f6:f5:7f:b4:33:80:cb:c2:50:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c50e3d6-0902-477b-85fe-37d2d7c97e30
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=4cd94fdb-4768-4fad-be62-22103193c27d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e9:77:4f:60:1e:63:f7:71:9d:37:2f:1d:e9:
                    f6:b4:8b:bb:f5:63:cb:cf:46:72:41:5a:4a:d8:37:
                    a4:c7:c5:f9:63:37:73:a0:dc:21:3f:27:7c:66:9b:
                    df:89:84:cf:0a:c8:52:22:a2:c0:a0:d1:7e:97:34:
                    04:03:fc:1a:cd:c8:54:53:9a:88:29:57:46:ee:8b:
                    ee:90:1a:96:55:d9:6e:18:0f:7e:67:11:d3:86:99:
                    c3:6a:0f:05:f1:68:a0:a8:fd:c8:b8:d5:e3:d4:32:
                    11:60:81:0f:bc:e8:f4:7b:07:a0:17:2e:ad:70:84:
                    f9:a2:9c:72:1e:dd:a4:fa:94:ba:f4:6d:a2:ef:91:
                    48:68:9f:d7:e2:60:ab:9a:aa:65:07:ee:25:2d:51:
                    2a:e7:f1:88:bb:10:be:f0:86:e7:5c:a4:0e:ab:2d:
                    6e:df:69:7e:ce:eb:0f:e1:21:1b:f7:18:0e:8d:d5:
                    e3:22:95:78:cf:b6:8e:30:25:9a:49:af:e8:75:52:
                    24:99:54:61:71:6c:6f:78:29:78:35:cc:b7:cc:34:
                    27:09:e0:f4:e2:9c:3f:1a:83:dc:23:a8:06:be:5c:
                    d2:1c:5f:4b:4a:f1:00:e0:6e:ad:e6:6e:9f:f8:d5:
                    64:57:59:bb:ba:7f:ab:f8:57:9c:e1:c2:b3:e1:88:
                    11:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:5B:FD:9C:29:4D:BD:6C:B4:F7:99:BA:09:57:97:86:9B:56:2D:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c50e3d6-0902-477b-85fe-37d2d7c97e30/53cef460-001d-3986-aa8d-57e45633957e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c50e3d6-0902-477b-85fe-37d2d7c97e30/0c50e3d6-0902-477b-85fe-37d2d7c97e30.crl

            X509v3 Authority Key Identifier:
                keyid:C1:36:E9:3C:D0:03:48:7A:EC:54:B6:CB:90:1A:24:7C:3E:D8:ED:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c50e3d6-0902-477b-85fe-37d2d7c97e30.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:63:90:6c:ec:00:fb:25:bd:0a:b7:43:35:35:4c:44:72:f3:
         f7:8c:56:7e:fc:4d:ce:d0:d1:a1:9c:da:2a:e6:53:4b:73:32:
         d7:b6:e6:dd:d3:86:56:f4:e6:7b:97:88:0f:ad:d0:3d:d7:a0:
         bd:96:e3:b3:62:0a:77:57:13:0b:fe:1c:e3:87:11:58:ed:d6:
         7a:bd:12:80:cb:f0:94:98:ee:3d:0f:56:88:b7:be:3b:55:ef:
         76:24:31:5c:00:f1:35:a7:96:96:00:8a:ca:27:71:4b:9d:87:
         67:f2:8b:ad:99:66:14:9d:60:91:1c:ab:ed:48:8a:2c:1f:0f:
         7d:8c:24:52:51:7a:57:5c:bd:c4:7a:26:b7:86:a2:d2:7a:b7:
         fb:f2:3b:3d:69:43:40:d4:04:9c:8e:1e:5c:77:cf:e7:de:7c:
         0b:ab:60:e2:3c:1c:8f:c9:3d:b8:b7:29:90:ad:54:9e:45:23:
         0d:b5:38:d7:8f:8b:1d:5f:9a:e3:76:2b:0f:3b:9f:46:91:09:
         78:7e:0a:8d:8b:62:75:f6:1a:3a:e3:9f:35:35:d2:7f:cd:bc:
         70:ca:fb:f6:36:03:88:aa:71:ad:60:e3:98:85:43:0f:eb:0c:
         8b:6d:48:1f:6c:e5:74:1a:18:37:ed:c8:8f:44:7f:80:09:d9:
         21:e3:ea:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:04:19 2025 by rpki-client