Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/176385df-23a6-41a1-bbc0-dd5116b049c5/253ea996-4b7d-3d3c-9ca8-15f5e0028a93.roa
File:                     253ea996-4b7d-3d3c-9ca8-15f5e0028a93.roa (raw, json)
Hash identifier:          6KpezSvO7w4oj2o08i9kwDBpqGnbX0Lwx3FPzxj/VNU=
Subject key identifier:   8F:C4:95:23:B9:4C:FC:E6:F5:5A:E5:4B:96:05:99:8A:CF:3B:DA:62
Certificate issuer:       /CN=176385df-23a6-41a1-bbc0-dd5116b049c5
Certificate serial:       010D0C9F4328584E210EF8210D60B3C354304220
Authority key identifier: C7:5D:43:5D:FB:A7:95:DA:30:8A:1D:20:BA:16:11:A9:2A:8A:04:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/176385df-23a6-41a1-bbc0-dd5116b049c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/176385df-23a6-41a1-bbc0-dd5116b049c5/253ea996-4b7d-3d3c-9ca8-15f5e0028a93.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     394037
IP address blocks:        134.195.54.0/23 maxlen: 24
                          172.110.180.0/22 maxlen: 24
                          2602:fd38::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/176385df-23a6-41a1-bbc0-dd5116b049c5/176385df-23a6-41a1-bbc0-dd5116b049c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/176385df-23a6-41a1-bbc0-dd5116b049c5/176385df-23a6-41a1-bbc0-dd5116b049c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/176385df-23a6-41a1-bbc0-dd5116b049c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0e:f8:21:0d:60:b3:c3:54:30:42:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=176385df-23a6-41a1-bbc0-dd5116b049c5
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=4722d6a3-ff1c-473e-a337-dc8ab66b94b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1c:7b:e0:52:3a:42:a4:6d:79:4e:b8:d7:14:
                    00:3e:f6:16:d2:df:20:e3:d0:c8:d9:ef:1b:dc:94:
                    4a:4d:71:88:f2:40:be:89:7b:cb:6e:31:83:5b:87:
                    2f:1f:02:bb:46:f8:f8:dd:2e:4c:55:e4:5f:a0:1b:
                    af:74:31:2e:33:1a:08:54:cf:d1:9b:6e:7c:14:76:
                    2e:02:9c:98:4f:ab:53:9d:45:06:ad:92:a8:87:71:
                    de:10:bc:71:15:15:73:d1:50:04:38:e0:6c:2f:90:
                    9c:68:c0:56:fe:ae:aa:e4:fe:55:eb:aa:1e:7e:a8:
                    ba:95:2b:52:ea:84:59:c1:63:8d:82:71:a4:bb:9f:
                    15:02:69:c3:4d:95:45:69:47:59:9f:ae:79:81:2f:
                    f5:16:e9:9d:ad:47:e4:9b:2f:47:f8:83:81:bf:7e:
                    ef:2d:18:fd:43:0f:52:a6:30:9f:eb:51:9e:58:df:
                    39:53:42:34:6e:39:0f:52:8f:22:ff:91:a6:39:65:
                    69:0b:62:53:18:39:c5:5c:87:15:5d:4c:89:18:9e:
                    36:e4:e8:85:10:53:5f:be:5e:2f:56:f5:8d:cd:32:
                    12:cf:49:fa:09:57:01:6b:6d:9e:98:f1:45:46:22:
                    2c:e0:05:fb:67:50:9f:b3:c9:ea:81:02:99:bf:7b:
                    0a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:C4:95:23:B9:4C:FC:E6:F5:5A:E5:4B:96:05:99:8A:CF:3B:DA:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/176385df-23a6-41a1-bbc0-dd5116b049c5/253ea996-4b7d-3d3c-9ca8-15f5e0028a93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/176385df-23a6-41a1-bbc0-dd5116b049c5/176385df-23a6-41a1-bbc0-dd5116b049c5.crl

            X509v3 Authority Key Identifier:
                keyid:C7:5D:43:5D:FB:A7:95:DA:30:8A:1D:20:BA:16:11:A9:2A:8A:04:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/176385df-23a6-41a1-bbc0-dd5116b049c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.54.0/23
                  172.110.180.0/22
                IPv6:
                  2602:fd38::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:ba:bd:38:1e:5c:40:58:1f:14:a6:11:b4:f7:ad:83:20:ef:
         d7:17:39:eb:a3:6c:26:65:e0:15:06:7d:df:ce:44:81:ce:b4:
         1b:4d:c9:df:47:18:00:2e:01:75:19:5f:ae:cb:d8:24:65:a3:
         45:e0:dc:a2:77:9a:84:3c:74:b1:f9:60:34:85:e0:62:c7:bf:
         4b:a5:16:f5:47:0d:b0:9d:70:9f:2d:5a:7f:93:c1:08:eb:3c:
         0a:1b:78:49:89:92:a9:34:5d:ad:37:ec:a0:73:cc:48:ee:62:
         0a:90:d8:2d:f2:60:10:ad:71:20:80:2a:b9:f8:76:0a:04:d7:
         d3:39:a5:56:eb:28:d9:a8:19:25:d0:16:ad:7d:8f:69:8b:92:
         c9:5d:aa:96:4b:80:6b:fb:2d:c4:53:84:cb:0c:12:57:88:1d:
         54:f8:a8:0b:fe:b3:7f:bb:5a:69:6f:bc:ba:c4:f0:11:e0:07:
         52:9d:00:fa:a4:20:b0:20:b3:bf:e9:76:dd:49:37:20:8e:35:
         cd:51:86:5a:8a:59:52:70:4e:fc:59:11:9e:94:db:09:ae:bb:
         92:c5:22:88:6d:b1:18:e1:6f:8a:c8:b7:4b:65:6a:7e:7c:f7:
         29:a1:27:c7:20:cb:90:41:81:73:66:3e:56:1b:a4:c3:a4:04:
         74:43:10:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:21:28 2026 by rpki-client