Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/176385df-23a6-41a1-bbc0-dd5116b049c5/253ea996-4b7d-3d3c-9ca8-15f5e0028a93.roa
File:                     253ea996-4b7d-3d3c-9ca8-15f5e0028a93.roa (raw, json)
Hash identifier:          DRxptZCQ/Dqe0OXc7/vgd2QDN32WNrxGMpixcSbFxF4=
Subject key identifier:   58:90:63:BA:E2:77:69:CF:D3:77:90:C0:B7:E3:D6:95:D3:B0:0F:09
Certificate issuer:       /CN=176385df-23a6-41a1-bbc0-dd5116b049c5
Certificate serial:       010D0C9F4328584AA160DA14CAAE21E55657AF40
Authority key identifier: C7:5D:43:5D:FB:A7:95:DA:30:8A:1D:20:BA:16:11:A9:2A:8A:04:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/176385df-23a6-41a1-bbc0-dd5116b049c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/176385df-23a6-41a1-bbc0-dd5116b049c5/253ea996-4b7d-3d3c-9ca8-15f5e0028a93.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     394037
IP address blocks:        134.195.54.0/23 maxlen: 24
                          172.110.180.0/22 maxlen: 24
                          2602:fd38::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/176385df-23a6-41a1-bbc0-dd5116b049c5/176385df-23a6-41a1-bbc0-dd5116b049c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/176385df-23a6-41a1-bbc0-dd5116b049c5/176385df-23a6-41a1-bbc0-dd5116b049c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/176385df-23a6-41a1-bbc0-dd5116b049c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:da:14:ca:ae:21:e5:56:57:af:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=176385df-23a6-41a1-bbc0-dd5116b049c5
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=a2e7e454-0f42-4c69-a90e-8d6433f9409f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:09:3f:ed:d7:1d:a4:71:60:2e:e0:bd:10:76:
                    8a:51:f5:52:b6:9d:bb:c3:c4:36:42:6a:10:4f:90:
                    b7:5e:03:bd:e2:93:b9:ae:90:fb:73:fd:3e:33:87:
                    b3:35:89:3a:05:29:8f:a6:2d:d5:cb:96:ee:4a:f8:
                    cf:fe:72:55:d3:c3:aa:78:ef:e5:db:98:02:07:c7:
                    2f:fb:86:f3:cf:1e:ef:42:db:44:27:81:05:96:a2:
                    02:7b:1c:f0:af:59:7d:cd:52:31:ed:7f:03:83:a6:
                    ff:78:a0:ed:0d:b9:34:6a:5a:82:69:40:d9:2a:ea:
                    e4:8c:fb:11:17:01:b7:70:19:4e:c8:8b:53:2b:3a:
                    e2:e5:63:9d:f1:df:6b:3b:69:25:20:a4:25:9f:2c:
                    fd:ba:d9:60:c3:ce:7f:88:4b:72:d9:12:bc:6c:3f:
                    55:1d:87:c8:f6:7b:1e:c9:ef:7e:76:99:86:dc:d5:
                    b8:33:bc:86:0d:33:82:6f:e0:2b:18:0d:06:6c:58:
                    20:b2:39:e2:ee:5b:59:a0:00:d8:5c:2e:f9:27:f9:
                    60:35:54:fe:85:fa:a7:6b:67:16:4d:e2:85:97:de:
                    93:f9:6c:56:fb:c9:c4:65:69:35:37:7b:06:8c:1d:
                    46:52:a6:c4:93:39:f5:84:c5:85:c9:c8:2d:de:8b:
                    96:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:90:63:BA:E2:77:69:CF:D3:77:90:C0:B7:E3:D6:95:D3:B0:0F:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/176385df-23a6-41a1-bbc0-dd5116b049c5/253ea996-4b7d-3d3c-9ca8-15f5e0028a93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/176385df-23a6-41a1-bbc0-dd5116b049c5/176385df-23a6-41a1-bbc0-dd5116b049c5.crl

            X509v3 Authority Key Identifier:
                keyid:C7:5D:43:5D:FB:A7:95:DA:30:8A:1D:20:BA:16:11:A9:2A:8A:04:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/176385df-23a6-41a1-bbc0-dd5116b049c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.54.0/23
                  172.110.180.0/22
                IPv6:
                  2602:fd38::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:53:6f:fc:9e:7a:a7:29:12:37:a6:e8:c2:ca:40:87:cc:16:
         d1:5a:86:e9:dd:d9:2b:c1:33:c8:bf:f5:c2:c5:ea:2f:d7:1e:
         29:1d:f2:ee:70:fb:a1:c5:2b:56:b5:9b:74:5a:f2:9d:d8:74:
         7c:20:6d:b9:89:6c:45:bb:93:c6:65:a1:45:0c:a4:bd:40:4b:
         58:a3:ab:0a:ad:18:8f:b2:f9:6a:84:47:67:b6:64:0e:d6:52:
         df:59:01:cf:2f:ab:58:a5:c0:97:e6:f6:78:9f:f2:f5:f7:02:
         ea:f9:e2:a2:31:f7:d7:dd:de:b6:67:fe:62:42:c5:42:15:1b:
         ef:8e:ee:b8:48:b2:93:3e:65:ee:e5:59:f8:7f:fe:1c:e9:04:
         4b:1f:77:e8:5d:22:27:2b:08:5e:66:03:8c:de:f5:38:b2:2b:
         24:b8:43:dc:e5:df:80:ce:2f:49:b2:22:6d:20:1f:10:0b:ea:
         38:45:74:96:39:65:74:78:94:bc:2f:c0:d8:5a:6e:e9:9c:42:
         4d:38:50:9a:8e:81:7a:1b:eb:b4:90:a7:5a:bc:4e:c2:dd:1d:
         9b:38:9e:64:71:f1:13:03:2f:6e:b4:b8:10:83:8a:10:04:a2:
         ca:b3:b3:9a:57:cc:e2:a9:e3:72:75:9f:b3:ab:a1:30:01:2e:
         1f:b3:47:50
-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEqhYNoUyq4h5VZXr0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTc2Mzg1ZGYtMjNhNi00MWExLWJiYzAtZGQ1MTE2YjA0
OWM1MB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk
YTJlN2U0NTQtMGY0Mi00YzY5LWE5MGUtOGQ2NDMzZjk0MDlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAk/7dcdpHFgLuC9EHaKUfVStp27w8Q2QmoQ
T5C3XgO94pO5rpD7c/0+M4ezNYk6BSmPpi3Vy5buSvjP/nJV08OqeO/l25gCB8cv
+4bzzx7vQttEJ4EFlqICexzwr1l9zVIx7X8Dg6b/eKDtDbk0alqCaUDZKurkjPsR
FwG3cBlOyItTKzri5WOd8d9rO2klIKQlnyz9utlgw85/iEty2RK8bD9VHYfI9nse
ye9+dpmG3NW4M7yGDTOCb+ArGA0GbFggsjni7ltZoADYXC75J/lgNVT+hfqna2cW
TeKFl96T+WxW+8nEZWk1N3sGjB1GUqbEkzn1hMWFycgt3ouWIwIDAQABo4IDazCC
A2cwHQYDVR0OBBYEFFiQY7rid2nP03eQwLfj1pXTsA8JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xNzYz
ODVkZi0yM2E2LTQxYTEtYmJjMC1kZDUxMTZiMDQ5YzUvMjUzZWE5OTYtNGI3ZC0z
ZDNjLTljYTgtMTVmNWUwMDI4YTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMTc2Mzg1ZGYtMjNhNi00MWExLWJi
YzAtZGQ1MTE2YjA0OWM1LzE3NjM4NWRmLTIzYTYtNDFhMS1iYmMwLWRkNTExNmIw
NDljNS5jcmwwHwYDVR0jBBgwFoAUx11DXfunldowih0guhYRqSqKBK8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xNzYzODVkZi0yM2E2LTQxYTEtYmJjMC1kZDUx
MTZiMDQ5YzUuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQBhsM2AwQC
rG60MA4EAgACMAgDBgQmAv04ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCWU2/8nnqnKRI3pujCykCHzBbR
Wobp3dkrwTPIv/XCxeov1x4pHfLucPuhxStWtZt0WvKd2HR8IG25iWxFu5PGZaFF
DKS9QEtYo6sKrRiPsvlqhEdntmQO1lLfWQHPL6tYpcCX5vZ4n/L19wLq+eKiMffX
3d62Z/5iQsVCFRvvju64SLKTPmXu5Vn4f/4c6QRLH3foXSInKwheZgOM3vU4sisk
uEPc5d+Azi9JsiJtIB8QC+o4RXSWOWV0eJS8L8DYWm7pnEJNOFCajoF6G+u0kKda
vE7C3R2bOJ5kcfETAy9utLgQg4oQBKLKs7OaV8ziqeNydZ+zq6EwAS4fs0dQ
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:51:07 2025 by rpki-client