Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/d884356d-6b66-398b-b1cd-f3edf2325b79.roa
File:                     d884356d-6b66-398b-b1cd-f3edf2325b79.roa (raw, json)
Hash identifier:          3HUH+HUr2N3PcwPVgcFlMW7rbMnMO73lkeNyQkfCoC4=
Subject key identifier:   54:7D:44:97:20:DF:C1:03:A1:1C:2A:9C:F2:F7:32:37:9E:B2:CC:59
Certificate issuer:       /CN=53d76580-9dca-44c4-9727-ef7385e30e49
Certificate serial:       010D0C9F4328584EA788ACEDA8C110C72197B580
Authority key identifier: AB:09:7D:A7:E1:56:48:5C:1B:10:6F:5E:B7:0E:71:FF:AD:BA:49:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/d884356d-6b66-398b-b1cd-f3edf2325b79.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6079
IP address blocks:        167.253.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:ac:ed:a8:c1:10:c7:21:97:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d76580-9dca-44c4-9727-ef7385e30e49
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4f9dbd17-7c71-47c0-9fe7-b1dd7e89c187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2b:dd:ea:a3:86:83:b2:ac:21:0c:0f:e3:c4:
                    6b:04:f3:0b:02:0a:18:7b:14:e3:6e:0e:7c:5e:bd:
                    a4:a7:7a:44:99:19:25:30:d9:84:39:76:91:e7:28:
                    5e:d6:fc:83:75:6e:d9:5a:83:cb:78:e4:ba:a8:a3:
                    bb:dc:a4:34:2c:d8:3b:d5:a4:58:74:fa:7a:86:84:
                    33:15:38:16:88:cc:ab:6b:2e:74:be:20:ac:52:48:
                    4b:0e:0e:78:57:3f:05:e6:a4:ef:e9:62:86:39:29:
                    35:fa:c8:18:a0:86:00:2f:da:1d:3a:f9:3c:4b:bc:
                    03:24:70:9f:da:da:2d:3a:d1:d4:9b:a9:ed:cf:55:
                    f3:0d:97:bc:b1:8a:fe:3b:b0:11:70:76:8f:ae:0e:
                    a2:88:8f:24:ab:d2:38:d0:cd:1a:a7:25:83:0b:e5:
                    32:64:30:84:fc:32:1e:24:60:b5:29:34:b4:e0:19:
                    51:07:41:a8:2b:55:22:14:ef:ac:5f:7c:c5:1f:b6:
                    65:53:34:e9:53:14:0e:8d:ef:55:5a:6f:26:2c:05:
                    cc:2e:64:53:94:58:fa:7e:ca:48:d1:59:14:ee:57:
                    be:cb:95:37:43:9f:d6:e9:31:43:41:2d:2d:49:49:
                    27:00:e1:84:4d:a1:30:f9:86:16:97:37:30:f1:50:
                    3e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:7D:44:97:20:DF:C1:03:A1:1C:2A:9C:F2:F7:32:37:9E:B2:CC:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/d884356d-6b66-398b-b1cd-f3edf2325b79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.crl

            X509v3 Authority Key Identifier:
                keyid:AB:09:7D:A7:E1:56:48:5C:1B:10:6F:5E:B7:0E:71:FF:AD:BA:49:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:0c:90:f4:fa:d9:32:6d:b5:30:7f:fb:e4:ab:a3:b7:72:56:
         57:cc:27:df:b6:0c:99:40:e7:09:a4:25:4e:ba:33:49:3e:50:
         92:5d:09:17:20:96:0e:e3:3e:95:f6:e9:33:7d:dc:b5:a7:9c:
         20:d1:d5:8b:59:7a:64:ef:bb:d5:40:d5:88:57:f6:2b:37:bd:
         ac:7c:d6:05:75:3f:52:5e:a0:50:5c:53:45:1e:de:bf:f7:d9:
         e6:37:b9:0c:d7:b9:67:6c:b6:d0:5c:58:20:72:78:e9:7b:3b:
         96:da:b2:49:28:51:60:40:13:29:e0:85:70:6c:16:f6:2a:39:
         23:d8:cd:df:f4:ec:82:51:71:ca:56:a1:5e:1f:ca:86:66:2c:
         f6:fa:5d:21:19:29:83:75:c5:05:4a:54:82:fa:0e:f0:63:c8:
         d5:93:9c:b4:1f:ff:3b:28:f2:7e:29:ae:02:14:63:65:ab:60:
         6e:f3:74:f4:2b:82:49:95:18:fc:17:52:cf:66:9f:a6:34:05:
         70:20:48:88:28:7e:76:c8:7a:96:49:2a:c3:ff:62:d4:09:bc:
         37:90:da:06:47:1f:4a:22:2f:8b:5d:25:4b:b3:4f:f3:91:08:
         b7:dc:06:53:6a:e5:1c:fa:14:70:0e:19:8a:dc:c4:da:37:40:
         53:94:00:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:00:33 2026 by rpki-client