Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d02e71-7d79-3b41-9ec7-575fc812cc08.roa
File:                     53d02e71-7d79-3b41-9ec7-575fc812cc08.roa (raw, json)
Hash identifier:          LX8XW5MlIy799QqjBn/1aUGcRn58ORjg71YZdme2iH4=
Subject key identifier:   DA:9E:8B:8C:F3:B1:C1:D6:B2:AE:FC:78:06:41:96:71:72:36:79:F0
Certificate issuer:       /CN=53d76580-9dca-44c4-9727-ef7385e30e49
Certificate serial:       010D0C9F4328584A5A30788F3C3587A2B3498480
Authority key identifier: AB:09:7D:A7:E1:56:48:5C:1B:10:6F:5E:B7:0E:71:FF:AD:BA:49:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d02e71-7d79-3b41-9ec7-575fc812cc08.roa
Signing time:             Sun 29 Jun 2025 13:01:03 +0000
ROA not before:           Sun 29 Jun 2025 13:01:03 +0000
ROA not after:            Sat 27 Sep 2025 13:01:03 +0000
asID:                     6079
IP address blocks:        167.253.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5a:30:78:8f:3c:35:87:a2:b3:49:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d76580-9dca-44c4-9727-ef7385e30e49
        Validity
            Not Before: Jun 29 13:01:03 2025 GMT
            Not After : Sep 27 13:01:03 2025 GMT
        Subject: CN=72ab9366-cd63-457b-b647-492031561f3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fc:32:57:0d:c0:98:48:05:03:51:28:10:0d:
                    05:1d:97:2e:ef:66:03:b9:7c:75:db:f1:af:3b:48:
                    9e:f3:5a:91:20:32:2b:c9:5e:ce:6c:0c:ea:45:0e:
                    b8:3c:40:a7:c3:65:86:f2:d0:f6:84:be:df:54:27:
                    92:38:aa:ff:97:c3:93:5c:27:2d:b3:c7:6e:58:b1:
                    9b:59:5a:e5:ab:45:ab:be:7c:26:10:97:5d:a0:e0:
                    54:42:d3:b8:16:3c:c2:e6:f0:69:80:f3:88:04:92:
                    6b:14:55:0e:ab:91:74:af:df:f1:b8:c8:7e:39:89:
                    dc:d1:7f:cf:3c:aa:fa:2a:1e:cf:11:ed:a7:bb:b3:
                    e9:ca:1c:4c:01:1b:69:8d:d7:b1:45:1c:5a:51:c8:
                    cb:65:a8:40:e1:de:33:40:af:05:b9:3e:12:92:0b:
                    7f:0a:8d:02:7a:44:04:38:7f:1e:b4:c8:04:a1:e1:
                    45:8d:2f:44:20:43:f7:4c:ec:0c:7c:41:9b:37:e3:
                    f2:e9:60:44:02:1e:98:02:a4:92:8b:3e:c1:d6:6d:
                    6f:71:a2:4c:33:59:44:ee:55:8d:76:8d:fd:5e:bd:
                    8a:b9:ff:72:ea:3a:7c:0f:8d:92:3b:a0:65:6a:07:
                    df:52:81:38:34:79:ca:c4:b2:53:1e:f6:d5:14:d7:
                    5e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:9E:8B:8C:F3:B1:C1:D6:B2:AE:FC:78:06:41:96:71:72:36:79:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d02e71-7d79-3b41-9ec7-575fc812cc08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.crl

            X509v3 Authority Key Identifier:
                keyid:AB:09:7D:A7:E1:56:48:5C:1B:10:6F:5E:B7:0E:71:FF:AD:BA:49:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:d0:72:a9:78:9e:76:4d:b6:5e:40:73:31:c8:9b:af:db:51:
         37:20:0b:56:9f:b7:52:b0:97:f1:43:5f:94:03:96:78:a6:74:
         d2:d9:1a:93:d0:72:92:85:ea:39:13:5f:33:c6:94:51:1f:82:
         0c:f1:85:c7:6e:66:9f:fb:6b:87:84:69:de:50:d5:07:c8:fa:
         6a:3a:70:22:6c:35:14:73:1e:68:d4:56:53:73:7c:cc:cd:22:
         9d:e4:36:5c:aa:3a:6e:32:26:fe:4b:97:c7:c3:9c:f0:88:58:
         e0:c6:31:ea:93:64:85:34:e3:04:c5:d1:78:2e:ff:f4:36:e3:
         19:fd:ea:43:73:f1:3f:9b:91:9a:d7:6e:17:3f:61:e9:fc:d8:
         bd:fb:26:dc:4b:a6:0c:1e:88:55:40:0e:f9:d3:4f:c7:73:87:
         76:20:df:7a:a6:b3:e8:46:5f:1e:d9:c6:ef:6c:24:b4:24:01:
         6a:64:5f:5f:11:35:1f:2e:41:94:97:2b:b3:27:7d:14:51:8f:
         12:47:c1:96:02:a1:9e:7e:f4:6e:13:27:9f:4f:e6:02:41:77:
         69:1e:85:26:58:e1:48:75:b6:02:ea:33:98:5e:ff:f3:48:ed:
         4b:ad:fe:3d:60:e0:46:4c:04:9b:0a:50:ce:a4:e0:b3:5c:85:
         a4:c2:34:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 11:54:50 2025 by rpki-client