Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/fd7537f2-ffc4-362a-9bd4-cfa44d19ff2a.roa
File:                     fd7537f2-ffc4-362a-9bd4-cfa44d19ff2a.roa (raw, json)
Hash identifier:          MzPQFjAypzKAnLgPPFQB6IcorS/FNdnQdip72XYMlkk=
Subject key identifier:   A3:43:8B:AD:6A:72:27:90:D6:E8:6E:F7:53:CD:D3:7B:4E:8B:23:1A
Certificate issuer:       /CN=26dda032-79f9-423e-9994-33fdb1cd44db
Certificate serial:       010D0C9F43285849D85F8B2114A16FE4EC9EB060
Authority key identifier: 94:EC:47:35:2C:31:EC:44:41:FF:E1:E1:D7:7A:71:05:4F:15:1D:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/fd7537f2-ffc4-362a-9bd4-cfa44d19ff2a.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        162.253.3.0/24 maxlen: 24
                          162.253.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/26dda032-79f9-423e-9994-33fdb1cd44db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/26dda032-79f9-423e-9994-33fdb1cd44db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:8b:21:14:a1:6f:e4:ec:9e:b0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26dda032-79f9-423e-9994-33fdb1cd44db
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=ddbe2700-a1f9-4e01-a93a-4c5d35f846d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5a:ae:b3:c9:fa:6e:f9:f7:b5:16:2a:f5:47:
                    e3:18:cb:bd:d1:87:ed:26:51:07:cf:81:85:60:98:
                    35:40:f2:e3:44:e5:02:66:c6:6f:72:c6:77:6a:78:
                    2f:f5:d4:95:c1:c4:af:51:13:59:27:f5:8d:6b:7a:
                    98:fe:be:92:32:8e:b5:6e:be:82:40:bf:78:c7:66:
                    9e:b7:5d:18:6a:65:7c:02:ca:e9:f1:16:97:07:83:
                    8b:4d:a3:82:b4:03:ca:d2:c4:4c:9c:c6:49:60:48:
                    c6:75:40:10:50:25:a0:f7:f4:f1:b5:55:68:60:b1:
                    3f:90:f3:cd:c4:c3:50:1c:ef:a8:08:40:7e:d7:32:
                    d6:71:9c:05:a0:b5:ec:13:0c:69:4b:39:c2:81:cb:
                    ed:6d:f2:b7:76:dc:11:9e:bd:51:fe:7f:b6:05:27:
                    e7:fe:0b:e0:b8:68:ff:4f:a7:e9:ae:ad:54:10:d6:
                    68:32:48:47:01:2b:98:a0:9c:bb:0b:59:e5:ea:cf:
                    bc:1b:e9:f1:6c:3f:09:6c:e7:2a:5b:6a:06:38:03:
                    ba:84:dd:54:81:12:46:48:c2:72:1c:84:d7:66:c2:
                    e5:db:ac:1c:6e:49:97:0d:46:f9:ea:7f:b3:7d:a8:
                    b3:ad:8d:99:48:1f:d8:4f:6a:18:1c:26:1a:96:6d:
                    c9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:43:8B:AD:6A:72:27:90:D6:E8:6E:F7:53:CD:D3:7B:4E:8B:23:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/fd7537f2-ffc4-362a-9bd4-cfa44d19ff2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/26dda032-79f9-423e-9994-33fdb1cd44db.crl

            X509v3 Authority Key Identifier:
                keyid:94:EC:47:35:2C:31:EC:44:41:FF:E1:E1:D7:7A:71:05:4F:15:1D:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.253.3.0-162.253.4.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:db:81:7c:23:53:bb:78:50:33:43:d4:74:11:b1:03:2f:9e:
         92:b9:c3:11:48:ff:4a:c6:12:1f:20:16:fa:87:d3:e3:76:e1:
         1a:af:0b:8d:a3:fa:dd:d4:1f:ea:a3:e5:38:1d:79:f2:62:59:
         1d:d9:00:d2:97:89:17:0d:7f:90:3e:06:34:51:fa:d4:d1:63:
         e4:3f:da:56:ac:02:21:0c:e8:3f:a9:82:5e:a6:f3:16:40:a5:
         83:39:bf:1e:80:c3:84:5c:9f:4a:3d:23:fa:60:a2:b6:7f:eb:
         af:e6:66:8a:b8:4d:c0:72:40:0e:67:87:b9:63:91:45:ff:b0:
         ca:8c:c6:6c:de:83:23:8f:67:22:81:a5:0e:24:98:4e:fe:d0:
         10:ad:38:46:a2:eb:16:b0:b6:0b:ba:f1:9d:30:64:f4:d5:c0:
         21:12:98:0d:13:e9:83:0e:72:46:79:c6:a0:ab:4b:82:2b:1a:
         78:ca:fb:60:48:73:08:22:6e:5d:f1:b0:52:96:c6:8d:6a:15:
         b0:87:37:83:e0:89:b6:15:b6:a7:4c:e8:6d:6a:14:53:59:ab:
         e1:d6:b5:9b:3d:95:78:aa:94:d6:6f:33:12:cf:c4:c8:ce:54:
         4d:46:da:ef:16:68:6d:d6:52:cf:5f:84:d5:c9:36:b3:8b:16:
         54:6b:c7:6e
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEnYX4shFKFv5OyesGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjZkZGEwMzItNzlmOS00MjNlLTk5OTQtMzNmZGIxY2Q0
NGRiMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk
ZGRiZTI3MDAtYTFmOS00ZTAxLWE5M2EtNGM1ZDM1Zjg0NmQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVqus8n6bvn3tRYq9UfjGMu90YftJlEHz4GF
YJg1QPLjROUCZsZvcsZ3angv9dSVwcSvURNZJ/WNa3qY/r6SMo61br6CQL94x2ae
t10YamV8Asrp8RaXB4OLTaOCtAPK0sRMnMZJYEjGdUAQUCWg9/TxtVVoYLE/kPPN
xMNQHO+oCEB+1zLWcZwFoLXsEwxpSznCgcvtbfK3dtwRnr1R/n+2BSfn/gvguGj/
T6fprq1UENZoMkhHASuYoJy7C1nl6s+8G+nxbD8JbOcqW2oGOAO6hN1UgRJGSMJy
HITXZsLl26wcbkmXDUb56n+zfaizrY2ZSB/YT2oYHCYalm3JjwIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFKNDi61qcieQ1uhu91PN03tOiyMaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yNmRk
YTAzMi03OWY5LTQyM2UtOTk5NC0zM2ZkYjFjZDQ0ZGIvZmQ3NTM3ZjItZmZjNC0z
NjJhLTliZDQtY2ZhNDRkMTlmZjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjZkZGEwMzItNzlmOS00MjNlLTk5
OTQtMzNmZGIxY2Q0NGRiLzI2ZGRhMDMyLTc5ZjktNDIzZS05OTk0LTMzZmRiMWNk
NDRkYi5jcmwwHwYDVR0jBBgwFoAUlOxHNSwx7ERB/+Hh13pxBU8VHbQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yNmRkYTAzMi03OWY5LTQyM2UtOTk5NC0zM2Zk
YjFjZDQ0ZGIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACi/QMD
BACi/QQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEARNuBfCNTu3hQM0PUdBGxAy+ekrnDEUj/SsYSHyAW+ofT
43bhGq8LjaP63dQf6qPlOB158mJZHdkA0peJFw1/kD4GNFH61NFj5D/aVqwCIQzo
P6mCXqbzFkClgzm/HoDDhFyfSj0j+mCitn/rr+ZmirhNwHJADmeHuWORRf+wyozG
bN6DI49nIoGlDiSYTv7QEK04RqLrFrC2C7rxnTBk9NXAIRKYDRPpgw5yRnnGoKtL
gisaeMr7YEhzCCJuXfGwUpbGjWoVsIc3g+CJthW2p0zobWoUU1mr4da1mz2VeKqU
1m8zEs/EyM5UTUba7xZobdZSz1+E1ck2s4sWVGvHbg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:11:59 2025 by rpki-client