Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/947c816e-83e3-3e0c-bc4d-fee99495eb34.roa
File:                     947c816e-83e3-3e0c-bc4d-fee99495eb34.roa (raw, json)
Hash identifier:          M/Xqnbq8RoyaqaiL63+YXUwXOiJRFhvCEbC4T0/kBE4=
Subject key identifier:   F3:58:C4:1C:E8:B3:63:82:76:A4:8A:23:E8:A5:93:A4:15:84:4D:C0
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584A6C55DDFA83DF92529C1DC300
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/947c816e-83e3-3e0c-bc4d-fee99495eb34.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     396955
IP address blocks:        163.253.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:dd:fa:83:df:92:52:9c:1d:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=a3f5307a-7def-4ca1-9f2a-0eb020dddd13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d5:76:fc:97:37:1c:b7:56:d0:58:63:94:d1:
                    ac:45:93:24:9e:f3:a8:e0:dd:ab:0d:9b:a7:c3:ac:
                    68:19:24:3b:a8:5c:80:f7:e9:8f:0d:83:38:5f:83:
                    eb:84:d1:22:71:a2:98:8f:2f:05:9e:62:07:d3:fe:
                    3e:b1:cb:b8:4b:96:9e:e4:01:d3:07:50:aa:62:2c:
                    1f:9c:f5:29:24:07:c6:40:72:f6:bb:06:2d:c2:15:
                    e5:dc:16:31:53:d1:b4:19:50:c8:f5:00:62:ea:74:
                    25:4e:2f:46:83:1c:35:ee:67:50:a6:ce:82:4d:e3:
                    d4:98:c1:24:2f:bd:07:6a:57:74:18:27:c1:f1:5a:
                    92:00:11:a0:2b:f3:e4:5e:9f:db:91:6b:32:75:e2:
                    0d:30:4f:4c:6a:0b:40:b2:a2:06:da:de:60:9a:27:
                    8e:b8:ad:13:b0:74:67:fe:cb:19:57:f9:71:b2:1e:
                    35:68:f2:43:3d:0f:67:88:e8:c8:f5:0d:6d:f0:6c:
                    30:6b:f7:9f:64:94:e2:75:5f:9b:59:15:5c:64:c7:
                    1b:24:32:6d:1e:45:5f:0b:05:46:53:b7:60:90:84:
                    cd:33:68:9f:10:ab:da:8f:8b:d1:56:77:7e:f8:2a:
                    42:cd:27:bc:88:56:01:87:27:c0:62:30:b8:6e:0a:
                    49:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:58:C4:1C:E8:B3:63:82:76:A4:8A:23:E8:A5:93:A4:15:84:4D:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/947c816e-83e3-3e0c-bc4d-fee99495eb34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:6b:05:dd:27:7e:a3:ae:2b:85:64:8b:6c:cc:f8:e0:f4:92:
         69:0b:96:9d:bd:d0:b6:c5:90:4c:12:9c:a6:f5:6d:bf:3d:2a:
         82:a6:3e:7e:e9:2e:dc:ee:85:b9:f2:b9:74:8e:72:e6:b1:e8:
         a5:69:68:14:94:1d:16:0b:4a:01:9b:b1:7f:e5:a7:fa:e6:7d:
         79:81:fe:f3:33:e1:a7:09:68:fe:aa:7e:3a:f4:e3:cc:2c:fd:
         e0:1f:ab:fd:f9:a4:cd:08:b6:70:6a:c1:0f:56:1b:9b:e5:6c:
         bd:a3:a0:b4:81:50:50:39:6c:7e:6d:3d:8b:e5:83:9f:f1:9f:
         94:88:50:0e:17:db:8e:60:30:f0:7a:f7:86:9f:d9:c6:b7:aa:
         8f:94:ed:4e:e7:76:69:3e:c5:3f:5b:7b:5b:3e:24:b2:7e:e6:
         47:6e:67:32:11:6f:38:7c:d2:e4:58:cd:43:63:3e:e0:5c:bf:
         6d:21:af:c5:1d:78:fd:a5:29:4c:cb:5b:90:dc:0e:7e:03:62:
         dd:e1:55:5b:bd:18:39:b8:20:6b:78:8d:17:dd:e9:db:00:0c:
         fa:1b:4c:8e:7d:64:f4:6a:2c:c7:45:81:8f:c8:31:e9:15:af:
         f0:d7:c5:4e:5e:74:eb:02:87:18:8e:79:26:42:f0:13:cf:52:
         d8:10:33:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:04:52 2025 by rpki-client