Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/d884356d-6b66-398b-b1cd-f3edf2325b79.roa
File:                     d884356d-6b66-398b-b1cd-f3edf2325b79.roa (raw, json)
Hash identifier:          cNYjgDOTkbGxzTy/q9o73qw8TXYqSmRuYC4iidtdmyo=
Subject key identifier:   0B:69:EA:B8:C9:57:BC:8C:D6:08:77:9B:E5:B3:15:ED:C7:17:28:6B
Certificate issuer:       /CN=53d76580-9dca-44c4-9727-ef7385e30e49
Certificate serial:       010D0C9F4328584A5A30786AE4C425DE77D6F03C
Authority key identifier: AB:09:7D:A7:E1:56:48:5C:1B:10:6F:5E:B7:0E:71:FF:AD:BA:49:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/d884356d-6b66-398b-b1cd-f3edf2325b79.roa
Signing time:             Sun 29 Jun 2025 13:01:03 +0000
ROA not before:           Sun 29 Jun 2025 13:01:03 +0000
ROA not after:            Sat 27 Sep 2025 13:01:03 +0000
asID:                     6079
IP address blocks:        167.253.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5a:30:78:6a:e4:c4:25:de:77:d6:f0:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d76580-9dca-44c4-9727-ef7385e30e49
        Validity
            Not Before: Jun 29 13:01:03 2025 GMT
            Not After : Sep 27 13:01:03 2025 GMT
        Subject: CN=8a078838-8ddc-4069-8f15-29b62ca4bba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7a:93:43:fb:2b:3e:8d:a5:68:8c:d0:32:ff:
                    3c:db:3d:a1:ec:c7:8e:2a:6b:1b:87:92:d9:2b:d6:
                    45:d3:e7:30:a2:c8:4e:a1:be:d3:6e:af:98:d5:76:
                    ec:da:1a:91:52:f9:71:28:87:a2:d1:b1:e0:2e:da:
                    a7:8b:82:7a:99:14:77:9b:8f:2a:30:57:a4:d8:d9:
                    35:45:bf:62:82:a4:45:18:73:ba:f7:ac:58:b5:47:
                    14:36:42:87:0d:06:f2:62:8d:51:f3:5e:b3:26:4e:
                    47:38:9a:16:69:1c:39:0a:da:7a:ff:df:02:8f:42:
                    de:e7:77:14:29:bb:54:b7:14:2f:17:a0:32:d0:f6:
                    ca:8c:00:27:e2:c0:44:9f:24:39:28:e0:52:bd:c8:
                    ec:ad:b8:62:06:e7:75:6f:53:d0:44:ad:9e:a8:83:
                    25:5e:dd:38:a7:19:a1:11:7f:40:ce:b5:9b:86:94:
                    bd:76:d9:49:38:0a:51:3f:2a:a2:f2:99:82:ce:a0:
                    0f:8f:d1:56:bd:72:79:9e:b4:4a:36:00:ea:ab:c9:
                    71:38:42:2f:f9:b6:70:40:19:12:68:fb:1d:ef:53:
                    16:a4:84:68:0f:57:5f:73:d7:89:b7:f2:c2:51:ec:
                    c0:75:06:4c:93:39:0e:f6:94:85:1b:97:e9:1c:76:
                    a8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:69:EA:B8:C9:57:BC:8C:D6:08:77:9B:E5:B3:15:ED:C7:17:28:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/d884356d-6b66-398b-b1cd-f3edf2325b79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.crl

            X509v3 Authority Key Identifier:
                keyid:AB:09:7D:A7:E1:56:48:5C:1B:10:6F:5E:B7:0E:71:FF:AD:BA:49:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:e2:41:bc:0a:29:a2:1f:ca:09:55:7d:78:b0:8e:d2:45:2a:
         ee:88:9a:0d:26:4c:31:2d:a1:a8:10:8f:9d:b6:eb:99:c2:61:
         6a:4f:6a:8c:fb:da:44:52:05:0c:f3:e7:13:fa:fc:02:c3:94:
         c7:d4:25:86:b2:a1:be:7b:91:1e:1e:a9:88:ce:41:ea:cf:d0:
         cc:76:ff:f3:21:e8:a8:ec:34:d4:c4:df:9e:b4:a2:e3:f7:a7:
         4f:0f:b0:d7:9d:38:94:3a:34:22:1a:d5:c9:34:aa:54:08:c3:
         bd:08:91:80:6d:f8:23:82:d7:8d:97:58:d8:19:33:df:be:91:
         c6:d4:a5:9d:4f:87:39:5c:fd:0c:36:97:e4:e1:d6:34:3e:55:
         05:ae:5f:ec:38:89:8b:cd:5f:2e:38:dd:86:0e:0a:6c:2c:aa:
         f8:d6:8f:07:a9:53:c2:32:bb:28:97:89:12:0b:bd:11:d4:40:
         d4:fb:e3:c5:fd:fc:12:6c:32:cc:54:a4:49:bd:b4:4b:59:14:
         76:ea:fd:1c:d9:0c:ed:46:5a:38:c1:86:a3:80:3c:66:ae:b9:
         bc:dd:d3:5b:6d:32:7e:86:c5:15:8f:4e:74:dd:5f:44:9e:65:
         59:21:64:24:c7:3f:35:30:af:85:7b:8c:c4:df:93:93:bb:ff:
         e8:a8:84:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpaMHhq5MQl3nfW8DwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTNkNzY1ODAtOWRjYS00NGM0LTk3MjctZWY3Mzg1ZTMw
ZTQ5MB4XDTI1MDYyOTEzMDEwM1oXDTI1MDkyNzEzMDEwM1owLzEtMCsGA1UEAxMk
OGEwNzg4MzgtOGRkYy00MDY5LThmMTUtMjliNjJjYTRiYmEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnqTQ/srPo2laIzQMv882z2h7MeOKmsbh5LZ
K9ZF0+cwoshOob7Tbq+Y1Xbs2hqRUvlxKIei0bHgLtqni4J6mRR3m48qMFek2Nk1
Rb9igqRFGHO696xYtUcUNkKHDQbyYo1R816zJk5HOJoWaRw5Ctp6/98Cj0Le53cU
KbtUtxQvF6Ay0PbKjAAn4sBEnyQ5KOBSvcjsrbhiBud1b1PQRK2eqIMlXt04pxmh
EX9AzrWbhpS9dtlJOApRPyqi8pmCzqAPj9FWvXJ5nrRKNgDqq8lxOEIv+bZwQBkS
aPsd71MWpIRoD1dfc9eJt/LCUezAdQZMkzkO9pSFG5fpHHaouQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAtp6rjJV7yM1gh3m+WzFe3HFyhrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81M2Q3
NjU4MC05ZGNhLTQ0YzQtOTcyNy1lZjczODVlMzBlNDkvZDg4NDM1NmQtNmI2Ni0z
OThiLWIxY2QtZjNlZGYyMzI1Yjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNTNkNzY1ODAtOWRjYS00NGM0LTk3
MjctZWY3Mzg1ZTMwZTQ5LzUzZDc2NTgwLTlkY2EtNDRjNC05NzI3LWVmNzM4NWUz
MGU0OS5jcmwwHwYDVR0jBBgwFoAUqwl9p+FWSFwbEG9etw5x/626SVcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC81M2Q3NjU4MC05ZGNhLTQ0YzQtOTcyNy1lZjcz
ODVlMzBlNDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/2CMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA/iQbwKKaIfyglVfXiwjtJFKu6Img0mTDEtoagQj52265nCYWpPaoz7
2kRSBQzz5xP6/ALDlMfUJYayob57kR4eqYjOQerP0Mx2//Mh6KjsNNTE3560ouP3
p08PsNedOJQ6NCIa1ck0qlQIw70IkYBt+COC142XWNgZM9++kcbUpZ1Phzlc/Qw2
l+Th1jQ+VQWuX+w4iYvNXy443YYOCmwsqvjWjwepU8IyuyiXiRILvRHUQNT748X9
/BJsMsxUpEm9tEtZFHbq/RzZDO1GWjjBhqOAPGauubzd01ttMn6GxRWPTnTdX0Se
ZVkhZCTHPzUwr4V7jMTfk5O7/+iohJY=
-----END CERTIFICATE-----
Generated at Wed Jul 2 19:19:36 2025 by rpki-client