Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/fd7537f2-ffc4-362a-9bd4-cfa44d19ff2a.roa
File:                     fd7537f2-ffc4-362a-9bd4-cfa44d19ff2a.roa (raw, json)
Hash identifier:          //IAjMKP1aOgNlLX5yzRocpd9rzmwJ5x0bvsyg0AJE4=
Subject key identifier:   EE:D9:E5:FC:9C:9D:2D:57:2E:AC:3A:3F:47:3E:33:BB:A3:67:AB:AA
Certificate issuer:       /CN=26dda032-79f9-423e-9994-33fdb1cd44db
Certificate serial:       010D0C9F4328584B99D78B469465FE3818D8C421
Authority key identifier: 94:EC:47:35:2C:31:EC:44:41:FF:E1:E1:D7:7A:71:05:4F:15:1D:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/fd7537f2-ffc4-362a-9bd4-cfa44d19ff2a.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     16509
IP address blocks:        162.253.3.0/24 maxlen: 24
                          162.253.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/26dda032-79f9-423e-9994-33fdb1cd44db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/26dda032-79f9-423e-9994-33fdb1cd44db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:8b:46:94:65:fe:38:18:d8:c4:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26dda032-79f9-423e-9994-33fdb1cd44db
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=e68acc6c-46c7-4c76-8296-1c82721ade3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f6:c7:ee:83:80:76:8e:a6:9a:5a:38:62:a5:
                    f0:76:f5:2c:88:df:f4:a9:e0:29:b9:3c:8d:4c:19:
                    3a:33:f0:56:59:92:c5:3c:94:1c:70:23:10:83:8b:
                    ad:ce:93:6b:7a:c0:70:3f:e0:2e:81:ad:9f:cc:d0:
                    66:4e:d0:97:2c:5b:d0:21:f6:c0:22:cd:8d:4e:05:
                    77:de:b4:c2:de:f1:61:13:40:9a:a9:dc:43:f9:2e:
                    6f:34:f6:0f:fc:6e:64:41:7f:46:98:f6:20:80:8e:
                    1c:60:3c:cf:dc:e1:71:13:48:55:48:6d:ae:c3:4d:
                    d3:88:b0:57:dc:96:b4:89:6e:ae:0b:db:3f:6d:84:
                    2d:b3:71:18:a9:86:56:c6:aa:dc:50:10:9a:38:8a:
                    70:39:f3:92:4a:05:d8:34:b0:29:c2:5b:e7:c7:ea:
                    ed:10:85:2d:48:2c:84:af:60:61:57:2c:84:d1:ed:
                    7e:38:86:e5:55:30:51:bd:45:d2:32:0a:0e:22:b5:
                    51:9d:a0:82:98:67:70:b3:e6:f9:bb:da:38:43:b3:
                    ba:5f:4c:2c:9e:f0:0a:c0:77:fd:5a:f5:8f:63:25:
                    98:c3:97:1f:a3:be:12:75:e9:1a:0d:75:1f:7f:1a:
                    b3:53:6d:24:bc:f5:50:e5:3f:76:28:df:c0:40:56:
                    73:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D9:E5:FC:9C:9D:2D:57:2E:AC:3A:3F:47:3E:33:BB:A3:67:AB:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/fd7537f2-ffc4-362a-9bd4-cfa44d19ff2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/26dda032-79f9-423e-9994-33fdb1cd44db.crl

            X509v3 Authority Key Identifier:
                keyid:94:EC:47:35:2C:31:EC:44:41:FF:E1:E1:D7:7A:71:05:4F:15:1D:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.253.3.0-162.253.4.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:e1:9d:f1:14:b2:34:48:8f:6a:9b:b9:14:f0:24:bf:a8:79:
         1d:6b:6e:91:83:ee:a9:2d:42:11:9f:bb:7e:0f:f1:6d:3d:e7:
         77:67:d4:68:8f:3a:ed:53:cf:d2:d0:f6:97:2f:c8:84:a1:98:
         bd:2a:d4:a2:af:22:3a:d1:f3:1b:11:bc:dc:81:af:ac:9e:e0:
         85:81:b7:16:0e:82:65:0c:82:dd:bd:b3:da:8a:19:6c:be:5c:
         81:aa:05:9c:08:cc:ec:32:76:84:82:cb:61:7d:f5:11:a3:9b:
         50:61:5d:1b:5b:ba:ab:70:f1:71:b0:35:63:a4:f2:c8:a3:50:
         43:ec:52:b7:fe:37:ff:db:47:9f:a5:eb:ac:f4:52:45:9b:28:
         b7:06:4f:79:85:b7:d9:73:4f:03:b1:69:6b:d4:55:4a:a5:cf:
         03:20:7c:e1:9f:6e:b3:dc:e9:e5:e3:ed:c7:63:26:a2:84:d6:
         b0:73:14:5f:7f:ec:dd:7c:a6:48:69:04:8d:18:6d:a9:bc:91:
         ca:0f:c9:ab:87:29:13:c9:a0:c7:54:98:56:55:2e:c3:34:c7:
         d8:33:44:55:9e:7f:8b:4d:83:5f:53:bb:eb:30:9b:a9:62:36:
         31:35:e4:da:18:1f:24:f1:63:f1:ca:58:7a:fc:36:6f:37:6d:
         b2:ec:ac:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:04:16 2025 by rpki-client