Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/3a16ace7-fcb3-3752-9319-1e5f56d19707.roa
File:                     3a16ace7-fcb3-3752-9319-1e5f56d19707.roa (raw, json)
Hash identifier:          97rugIhysN5X3PCSiKR3mRYtywZP9uH1hHSBS9oN6Cg=
Subject key identifier:   05:6F:80:C3:C8:84:43:DD:38:A9:EF:A9:CC:CF:D6:68:58:F8:ED:5C
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584B004BEC14A47A2EF6CF164100
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/3a16ace7-fcb3-3752-9319-1e5f56d19707.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     396955
IP address blocks:        163.253.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4b:ec:14:a4:7a:2e:f6:cf:16:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=329ee1bb-26b0-4a37-b97f-312ae9417d6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:19:ed:e8:9a:cf:bc:d8:b6:54:73:12:46:b3:
                    56:55:c4:e0:30:e9:90:95:33:62:9b:5f:5b:dd:a5:
                    8b:84:41:b5:0c:90:6d:e7:f1:f2:93:68:2f:4d:6b:
                    48:58:76:e4:f1:1e:08:11:b1:c8:6a:68:60:fc:fb:
                    3b:cc:ec:1f:1e:3f:5e:db:e7:c6:89:7b:75:63:f9:
                    d7:0f:59:3d:91:06:19:c0:5e:dd:22:38:3c:38:ae:
                    c9:07:57:ea:8a:dd:01:f9:cb:a7:f4:69:a5:b8:a3:
                    b3:52:09:ea:dc:aa:e5:a4:12:a3:bb:4b:9d:db:d8:
                    53:35:a0:62:98:77:78:d0:f8:73:68:c0:75:29:d6:
                    d7:88:4a:51:2d:e2:73:bb:0d:60:e5:ac:f7:3f:b8:
                    0a:70:ad:a5:78:ad:c8:6f:78:b2:df:c8:09:ab:56:
                    e6:b1:42:bb:67:b6:d5:37:05:69:be:79:5e:7e:b2:
                    85:eb:8c:00:b8:5f:e9:fc:5f:ee:e6:69:6a:7b:7c:
                    78:79:bc:7d:cc:11:93:6e:b5:33:7e:59:09:aa:6f:
                    b0:d8:32:19:98:8c:db:b5:a4:e3:a9:f2:0e:9b:b1:
                    fb:bb:9e:29:c1:54:5e:c5:dc:28:a2:65:4c:b0:e3:
                    de:3d:01:a1:9b:ae:b8:01:e0:38:65:e6:c1:22:ca:
                    6a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:6F:80:C3:C8:84:43:DD:38:A9:EF:A9:CC:CF:D6:68:58:F8:ED:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/3a16ace7-fcb3-3752-9319-1e5f56d19707.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:93:8f:94:bb:f4:8b:d3:38:bb:82:1d:86:22:e4:6b:c2:18:
         6e:b0:79:60:53:fe:48:2d:51:49:4c:e7:69:e6:dd:ff:08:8d:
         cc:96:84:11:89:8b:69:d5:0c:55:ee:e0:24:3e:19:11:c4:36:
         f2:05:f5:57:d3:6d:e2:16:33:08:21:ce:11:c6:f6:76:53:c9:
         8d:c9:82:1e:75:50:d7:84:2b:43:87:3f:ca:bc:e0:06:68:23:
         a1:a6:05:03:85:a4:5e:cb:33:f8:ec:3c:32:9e:6b:fe:6b:60:
         9a:da:a5:65:d2:e0:53:4e:ab:b4:d2:1d:a2:55:56:07:94:ed:
         ec:56:25:30:68:60:b6:86:79:1d:85:42:38:af:79:55:43:ed:
         35:8e:5b:1e:30:2b:35:1b:53:8f:08:74:99:8a:ca:c3:38:cb:
         e8:d7:6d:c7:a9:ad:c0:ec:10:1c:ce:43:fe:26:fd:c8:08:7d:
         bf:7d:41:de:0a:42:3c:03:01:23:4c:4e:af:4c:2f:59:1b:01:
         87:f1:1e:25:0c:0e:89:ff:03:8d:bb:c3:2b:ed:c8:59:fc:51:
         5c:be:8e:03:33:13:da:7e:a1:ed:48:ae:a1:9e:e2:6e:04:87:
         c1:fc:1c:81:21:04:54:56:a6:42:1a:60:f3:eb:dc:d1:0c:c0:
         1e:b3:87:ef
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsAS+wUpHou9s8WQQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy
ZjgyMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk
MzI5ZWUxYmItMjZiMC00YTM3LWI5N2YtMzEyYWU5NDE3ZDZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRnt6JrPvNi2VHMSRrNWVcTgMOmQlTNim19b
3aWLhEG1DJBt5/Hyk2gvTWtIWHbk8R4IEbHIamhg/Ps7zOwfHj9e2+fGiXt1Y/nX
D1k9kQYZwF7dIjg8OK7JB1fqit0B+cun9GmluKOzUgnq3KrlpBKju0ud29hTNaBi
mHd40PhzaMB1KdbXiEpRLeJzuw1g5az3P7gKcK2leK3Ib3iy38gJq1bmsUK7Z7bV
NwVpvnlefrKF64wAuF/p/F/u5mlqe3x4ebx9zBGTbrUzflkJqm+w2DIZmIzbtaTj
qfIOm7H7u54pwVRexdwoomVMsOPePQGhm664AeA4ZebBIspqGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAVvgMPIhEPdOKnvqczP1mhY+O1cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl
MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvM2ExNmFjZTctZmNiMy0z
NzUyLTkzMTktMWU1ZjU2ZDE5NzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5
MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2
MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4
YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo/0QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHuTj5S79IvTOLuCHYYi5GvCGG6weWBT/kgtUUlM52nm3f8IjcyWhBGJ
i2nVDFXu4CQ+GRHENvIF9VfTbeIWMwghzhHG9nZTyY3Jgh51UNeEK0OHP8q84AZo
I6GmBQOFpF7LM/jsPDKea/5rYJrapWXS4FNOq7TSHaJVVgeU7exWJTBoYLaGeR2F
QjiveVVD7TWOWx4wKzUbU48IdJmKysM4y+jXbceprcDsEBzOQ/4m/cgIfb99Qd4K
QjwDASNMTq9ML1kbAYfxHiUMDon/A427wyvtyFn8UVy+jgMzE9p+oe1IrqGe4m4E
h8H8HIEhBFRWpkIaYPPr3NEMwB6zh+8=
-----END CERTIFICATE-----
Generated at Mon Sep 15 21:23:27 2025 by rpki-client