Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d02e71-7d79-3b41-9ec7-575fc812cc08.roa
File:                     53d02e71-7d79-3b41-9ec7-575fc812cc08.roa (raw, json)
Hash identifier:          rPyeSrUu90XXrMd81cxIOdOr8VJ2IAOoU/clSXi9QQU=
Subject key identifier:   03:38:7C:BC:FE:A4:A0:B7:2B:8D:6A:EF:73:98:68:C2:9F:8D:39:6E
Certificate issuer:       /CN=53d76580-9dca-44c4-9727-ef7385e30e49
Certificate serial:       010D0C9F432858497AD9BF9FF5AEAA17C36ACA00
Authority key identifier: AB:09:7D:A7:E1:56:48:5C:1B:10:6F:5E:B7:0E:71:FF:AD:BA:49:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d02e71-7d79-3b41-9ec7-575fc812cc08.roa
Signing time:             Thu 10 Apr 2025 13:00:59 +0000
ROA not before:           Thu 10 Apr 2025 13:00:59 +0000
ROA not after:            Wed 09 Jul 2025 13:00:59 +0000
asID:                     6079
IP address blocks:        167.253.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7a:d9:bf:9f:f5:ae:aa:17:c3:6a:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d76580-9dca-44c4-9727-ef7385e30e49
        Validity
            Not Before: Apr 10 13:00:59 2025 GMT
            Not After : Jul  9 13:00:59 2025 GMT
        Subject: CN=8040f4b2-9ee9-4b05-b40a-3139c6f04b9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d7:6b:36:5b:e8:0e:40:4d:df:64:2c:d8:c8:
                    de:0f:f9:bb:29:4a:01:29:d7:bc:78:06:8f:19:10:
                    9f:7c:35:ac:ac:07:fc:95:bf:12:8d:4f:c1:b8:a1:
                    86:cd:b8:9c:4e:e7:78:0a:7e:c6:e0:6f:3c:78:f5:
                    27:33:9b:8a:77:73:e2:84:2e:ba:d3:b4:7c:52:b0:
                    27:a6:b1:50:92:20:14:66:ea:52:ce:81:78:a8:93:
                    33:33:2d:14:ff:ba:41:29:22:57:9a:4a:b9:2a:fb:
                    0f:cb:73:3b:4a:14:cd:d0:16:00:38:ea:73:3b:d5:
                    e0:14:01:3a:23:8c:8b:f4:8e:7d:6a:c1:2d:59:90:
                    42:a7:e9:c7:08:e5:e2:20:1d:34:12:29:ef:ce:3f:
                    a6:96:a3:61:f3:de:a0:bd:70:8e:0a:c6:3d:18:7f:
                    f9:49:2b:dc:34:11:8d:11:45:3d:e5:35:7a:81:08:
                    3c:33:15:9d:0a:e6:5a:6c:b8:63:f3:1a:ae:c0:f6:
                    87:f7:0a:7b:9b:1b:83:ba:51:de:f9:27:22:ad:69:
                    42:b8:e0:47:53:0c:e1:60:52:ac:af:53:be:a7:9f:
                    b9:36:d7:c1:24:de:a0:04:40:82:e0:e0:9d:ef:62:
                    df:6c:26:92:06:c6:6c:c1:d7:40:8a:5d:0c:69:87:
                    e3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:38:7C:BC:FE:A4:A0:B7:2B:8D:6A:EF:73:98:68:C2:9F:8D:39:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d02e71-7d79-3b41-9ec7-575fc812cc08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.crl

            X509v3 Authority Key Identifier:
                keyid:AB:09:7D:A7:E1:56:48:5C:1B:10:6F:5E:B7:0E:71:FF:AD:BA:49:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:0d:8e:f0:af:39:22:88:ff:b8:a0:de:42:51:31:16:39:b2:
         5d:55:c0:f5:48:44:2c:e3:b9:bb:89:9f:92:68:4d:0a:b4:e7:
         2c:08:d4:08:98:e3:79:6b:e1:b0:a0:37:01:98:3b:30:aa:de:
         bc:4e:82:c1:49:5c:25:4f:75:74:1a:03:a9:fb:e6:53:ac:28:
         b1:ff:81:f4:9c:c0:71:b1:53:cf:f2:b0:b2:94:41:da:72:f2:
         f9:b3:4b:0f:3e:34:d8:e9:ee:b3:fd:7e:58:a9:da:4d:af:26:
         e6:94:58:42:48:c3:34:6e:da:83:11:c2:24:c5:ad:2c:7c:a4:
         3c:7c:b6:19:6f:4d:ab:a3:ec:51:09:97:da:17:5e:53:ec:fe:
         09:9a:69:76:ce:e3:35:09:4c:ac:b6:5d:10:22:e9:2c:db:40:
         11:12:63:28:8e:54:5c:3f:4e:7a:96:9c:2c:0a:a9:e0:f4:93:
         cc:20:fc:65:88:ba:6b:1f:a7:a1:c2:0b:48:23:c0:a7:5f:08:
         50:12:c3:c6:50:60:c4:e7:d8:88:9e:9d:44:9a:3d:a7:2a:ac:
         91:8b:30:5e:85:32:43:9b:09:95:52:b5:c7:30:ad:91:4e:1f:
         61:53:ec:71:dc:e0:ab:74:a6:5e:73:78:2a:2e:28:bd:2c:20:
         c2:10:da:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:06:36 2025 by rpki-client