Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b9903dfd-ddbe-3fba-9d99-deda5659260c.roa
File:                     b9903dfd-ddbe-3fba-9d99-deda5659260c.roa (raw, json)
Hash identifier:          qED9bHV2vNxPdQ5L7Y1Sd1b0YCTKmPa2ooWWgCX7jvc=
Subject key identifier:   43:D9:26:33:2B:A6:F7:23:2B:FF:CA:61:FB:D3:2D:19:03:7C:03:BD
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584A6C55DE09B33912839B4D0400
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b9903dfd-ddbe-3fba-9d99-deda5659260c.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     11537
IP address blocks:        163.253.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:de:09:b3:39:12:83:9b:4d:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=5024c03d-4e67-4230-b656-5f623f93d055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:87:b5:0c:8c:35:1f:a4:03:ae:ec:52:c6:77:
                    f3:4d:bc:47:99:8a:b4:ba:54:c8:8b:e2:83:d0:d5:
                    b7:09:12:2e:bc:dd:cf:76:43:e8:84:a6:b4:ab:bc:
                    18:c5:9b:ca:76:63:45:c1:18:a0:7f:bc:b0:73:f0:
                    28:ab:52:89:2c:47:22:1e:d4:0d:03:20:ad:3b:70:
                    49:36:4e:4e:3d:ec:f5:d2:c6:5e:c5:be:8a:ea:e8:
                    11:43:e0:46:d9:51:ec:32:42:b3:d0:bc:6c:cd:db:
                    34:2c:58:d5:4f:c7:fc:77:94:86:fc:87:5d:34:9a:
                    a1:fa:9a:6b:68:69:a2:7b:89:33:82:de:52:ca:c6:
                    c2:04:83:df:ae:af:86:47:d6:a8:d6:cc:8b:ba:e3:
                    56:34:95:0f:50:fd:fb:d6:04:67:bd:12:4c:83:16:
                    32:33:6f:e6:1a:79:b2:cb:74:6c:67:0f:9d:b9:6f:
                    31:94:c8:ab:84:55:6e:6e:bb:ad:be:6f:d0:51:1a:
                    65:0f:fe:98:f8:b4:3a:fa:7e:74:69:ff:33:23:31:
                    26:bd:15:d6:36:40:d9:74:a8:a5:fa:fd:45:3a:38:
                    e0:d3:d4:b0:3b:07:78:e3:26:3b:5b:67:81:ca:fd:
                    5a:13:29:be:71:8f:18:43:a4:01:f3:a1:c9:c5:a9:
                    d4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D9:26:33:2B:A6:F7:23:2B:FF:CA:61:FB:D3:2D:19:03:7C:03:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b9903dfd-ddbe-3fba-9d99-deda5659260c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:ee:ca:6c:7d:32:f5:76:a8:92:b6:16:1e:e5:e3:8c:da:63:
         98:9a:4c:2b:1a:27:45:75:46:5e:aa:46:1d:76:8b:d6:dd:ec:
         e5:e9:7c:da:0b:27:cc:63:3d:5b:bc:fb:1f:10:7b:1b:b6:df:
         43:4a:69:92:11:aa:ea:90:fc:23:f6:36:8d:76:c4:e1:c7:67:
         22:08:09:ac:ed:f9:65:b9:9f:7e:64:4e:39:93:1f:90:c4:74:
         dc:9f:23:46:79:75:2b:84:f5:da:4c:14:3c:42:96:44:08:92:
         b9:c1:18:a2:68:ee:97:6c:e0:9b:d3:30:96:c4:51:45:39:8f:
         04:67:16:dc:53:ef:cb:16:a3:75:ab:87:33:ea:f8:9a:3b:00:
         81:05:bb:81:ad:09:31:68:f5:c0:76:7d:b3:72:8c:30:40:c4:
         07:32:69:fd:5a:c3:ef:e4:49:33:fd:0b:34:0e:99:eb:f7:dc:
         45:98:63:cd:19:99:62:b4:92:1f:44:fa:03:4c:3c:d2:1b:f9:
         c0:cb:65:7f:67:ac:e1:49:b8:80:e9:81:62:d2:e0:c7:00:da:
         a9:2c:64:d2:c9:1a:43:cd:9c:cc:3d:6d:95:78:be:e6:c3:44:
         53:2c:5a:7b:a1:65:0f:60:6e:ed:28:1c:43:07:85:8c:b0:b9:
         f0:00:c2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:07:55 2025 by rpki-client