Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/270e83cd-3da3-324a-a778-d4c20816c3ca.roa
File:                     270e83cd-3da3-324a-a778-d4c20816c3ca.roa (raw, json)
Hash identifier:          ZCD3IovTL6wbyVF9GtIiQWHHHNFQjDOVe84iXU3b+6g=
Subject key identifier:   8A:9B:0F:A6:01:8F:48:A7:2B:6B:CE:10:F6:B7:6B:A5:DC:14:FC:97
Certificate issuer:       /CN=3daec053-17f8-47be-a17c-d2007ce5700c
Certificate serial:       010D0C9F4328584D571FB82AA4532597DCF81200
Authority key identifier: EB:1F:65:DD:61:C2:51:D6:C2:94:08:68:B9:B3:43:A9:85:37:B7:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/270e83cd-3da3-324a-a778-d4c20816c3ca.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     32775
IP address blocks:        167.253.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:b8:2a:a4:53:25:97:dc:f8:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3daec053-17f8-47be-a17c-d2007ce5700c
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=a4a6517f-87d1-4eb4-8ec8-3d6f1f58c836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:78:05:ab:20:00:4b:de:ce:f7:28:41:61:a2:
                    49:d2:95:27:01:bf:9a:b1:e1:48:9d:ef:a1:48:b7:
                    71:81:3c:8b:e0:85:2f:7b:03:5b:ca:57:c8:ea:81:
                    10:01:d7:81:bf:6c:62:2d:ad:85:4d:38:96:12:e4:
                    80:71:97:31:46:fe:3c:3a:1b:94:24:3e:2e:a9:16:
                    d4:ef:8b:e0:08:fa:a3:0f:3b:54:93:da:91:c0:7b:
                    f3:02:f0:16:df:28:2c:ea:00:6a:13:74:9f:46:8f:
                    c5:97:5b:d2:39:d6:7f:15:05:52:01:4b:40:e4:8f:
                    7f:4c:b3:9f:35:70:07:92:35:a1:1a:45:22:1a:21:
                    c1:e3:94:ee:5a:2c:73:89:6f:ea:84:0f:b1:4f:60:
                    eb:1b:2e:83:7f:dd:18:8d:a3:3d:5d:0d:ab:71:c5:
                    89:9b:95:eb:ce:72:40:ba:3c:7d:61:0f:5a:fa:7d:
                    d0:37:2d:9b:cf:f8:f4:47:5e:1c:57:2f:fc:79:e0:
                    25:c8:e7:c3:0d:90:87:12:cb:81:c0:97:8c:49:ba:
                    99:2a:84:98:0d:e9:75:33:b2:c3:92:00:5c:aa:17:
                    98:e4:e5:37:cd:7f:3b:aa:69:89:a5:8f:03:28:2b:
                    c0:30:fe:d2:9e:2e:4e:19:e5:cc:65:5d:5d:d5:19:
                    91:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:9B:0F:A6:01:8F:48:A7:2B:6B:CE:10:F6:B7:6B:A5:DC:14:FC:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/270e83cd-3da3-324a-a778-d4c20816c3ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.crl

            X509v3 Authority Key Identifier:
                keyid:EB:1F:65:DD:61:C2:51:D6:C2:94:08:68:B9:B3:43:A9:85:37:B7:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:e1:9c:0a:5e:48:24:6d:f6:a5:7e:be:6c:01:44:66:53:9f:
         af:26:57:dd:35:b2:6c:41:51:b6:bc:02:56:8e:1c:90:63:d8:
         d0:2a:3d:ac:0c:be:25:38:ad:1e:00:8e:8a:1c:0e:2f:95:08:
         72:ce:0c:1e:1b:19:b7:69:12:d6:95:be:2c:f6:de:62:6d:b5:
         00:5b:48:97:5d:98:a7:85:89:4c:84:c0:5c:08:89:5f:ca:0e:
         54:b0:ee:c4:fc:0f:c5:1f:eb:e9:cb:b5:eb:5b:44:75:df:b4:
         d1:9b:d3:6c:0e:4e:01:05:81:75:73:c8:24:59:ed:6e:c5:6f:
         a7:49:0b:df:58:7b:5c:55:bc:b0:86:91:02:73:9e:77:c5:96:
         39:8f:fd:b4:28:c9:da:23:03:e1:d2:3f:8a:b7:9d:90:01:bd:
         d3:e1:76:7c:f8:c6:01:c9:8b:cb:cb:7c:9a:e6:c3:de:ac:b5:
         a0:4f:ee:39:17:03:b4:44:af:4e:90:4e:df:fd:c4:3a:bf:5f:
         11:91:c7:20:7a:0e:11:b8:fe:83:cb:d5:ee:9e:b6:1a:60:33:
         5b:9e:29:f0:cc:57:5a:64:cd:27:db:86:96:5d:f8:4a:28:2b:
         36:a7:29:d3:f4:ee:1a:7c:75:39:b1:f5:d3:a3:4d:8e:82:fe:
         76:14:70:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:14:05 2026 by rpki-client