Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5/7531577c-052a-335e-b81a-b93ea9025e27.roa
File:                     7531577c-052a-335e-b81a-b93ea9025e27.roa (raw, json)
Hash identifier:          T+o/534mDNwe0sG2N9ogcVSEfMAi4mEqmacUtdXio1s=
Subject key identifier:   A2:17:82:89:1C:BC:24:EB:9C:E1:DE:20:26:53:62:58:AA:49:76:F7
Certificate issuer:       /CN=4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5
Certificate serial:       010D0C9F4328584AD0C57773F1CB7A5FE2B59A80
Authority key identifier: 3D:CC:92:ED:AA:88:DE:1A:64:44:15:F6:EC:41:AE:0E:FF:5D:84:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5/7531577c-052a-335e-b81a-b93ea9025e27.roa
Signing time:             Mon 11 Aug 2025 00:26:46 +0000
ROA not before:           Mon 11 Aug 2025 00:26:46 +0000
ROA not after:            Sun 09 Nov 2025 01:26:46 +0000
asID:                     26548
IP address blocks:        167.253.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d0:c5:77:73:f1:cb:7a:5f:e2:b5:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5
        Validity
            Not Before: Aug 11 00:26:46 2025 GMT
            Not After : Nov  9 01:26:46 2025 GMT
        Subject: CN=b9278295-190a-44b4-a35e-1f4bb32a6392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f1:67:47:6d:e9:eb:cd:fb:86:a2:e2:51:8f:
                    72:9a:ea:81:fb:48:9d:94:ee:05:40:f8:88:be:1d:
                    06:a7:c9:1b:ba:39:5a:c2:47:41:8c:79:90:3e:78:
                    f5:68:4b:08:86:e7:1c:ee:02:e6:b6:38:0f:09:4f:
                    e2:ce:cc:75:58:22:92:5e:d2:34:73:ef:d5:9d:77:
                    1c:79:72:4b:c0:b8:98:20:7d:5e:42:a2:93:9b:0c:
                    a8:00:07:b8:f5:44:bf:32:d3:d1:17:c7:43:f2:ce:
                    2a:aa:9e:aa:a1:40:64:1a:d8:1f:e4:c8:3e:b1:3d:
                    9e:9c:18:70:fc:1f:2c:55:b2:80:31:c0:96:90:db:
                    0d:a6:ee:67:a0:ef:aa:e1:a0:73:33:88:a4:b8:02:
                    a9:a1:24:bf:0e:94:e6:55:9b:65:3b:61:5f:52:aa:
                    74:89:6a:4b:1f:d7:8e:02:d6:42:85:9f:32:f6:dd:
                    ee:db:7a:10:bd:47:c7:c1:aa:b9:77:46:2a:fd:91:
                    22:cb:b5:c8:d4:b3:cc:95:be:32:b4:b7:e0:47:25:
                    b3:42:49:8f:be:24:e0:42:04:89:25:37:a1:81:1d:
                    f8:7c:62:35:ae:36:bb:58:bd:59:91:3e:2c:5c:d7:
                    6e:67:da:86:c2:3c:0b:06:d3:91:a8:c0:3e:61:27:
                    28:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:17:82:89:1C:BC:24:EB:9C:E1:DE:20:26:53:62:58:AA:49:76:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5/7531577c-052a-335e-b81a-b93ea9025e27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5.crl

            X509v3 Authority Key Identifier:
                keyid:3D:CC:92:ED:AA:88:DE:1A:64:44:15:F6:EC:41:AE:0E:FF:5D:84:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:81:ee:2d:e0:11:d2:5f:0e:76:81:da:f7:ff:e5:ea:86:d3:
         03:f5:ab:c8:c2:64:c4:b8:f2:e5:98:cb:6a:59:00:39:62:62:
         ea:7d:27:67:68:fe:36:b6:e5:fe:3c:b3:0e:68:b3:a0:3e:d3:
         14:b3:99:8b:8e:88:4d:38:f6:dd:1d:c9:28:4d:54:2c:74:eb:
         a9:a9:61:44:cb:72:7f:89:57:cd:b9:31:82:cd:06:68:90:32:
         89:06:c7:f5:9a:ce:d5:bc:f7:51:97:66:96:02:e0:c8:16:31:
         e2:c6:54:ac:7c:2a:bf:56:34:32:61:ae:19:ce:51:73:4e:d8:
         28:24:2d:a1:f3:55:cc:83:a8:0f:13:d2:e9:92:b2:e3:b0:07:
         bc:cb:d5:ed:6e:dd:48:b7:aa:91:ca:ca:dd:e8:35:9c:41:13:
         bc:1e:d2:71:76:87:e2:72:07:5c:b0:ef:93:f6:b8:0c:02:0b:
         a3:ed:ff:7d:48:2d:f2:2a:03:5c:79:67:5e:39:81:fb:ac:e5:
         eb:74:50:8a:67:16:79:cf:16:e2:33:70:79:ca:df:d6:44:2b:
         3c:d0:7b:34:00:7b:40:3c:6f:fb:59:a9:55:14:14:d7:55:50:
         1f:b6:90:98:db:1d:37:71:51:81:ef:bd:62:c8:78:fa:c4:bc:
         7c:6a:52:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:47:29 2025 by rpki-client