Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/e1298d81-0038-39ef-81b2-9f80ebc14025.roa
File:                     e1298d81-0038-39ef-81b2-9f80ebc14025.roa (raw, json)
Hash identifier:          PYeHBgfiI44f5xYsYClYzRA9Xem0ENC7kCyUzcQOnX0=
Subject key identifier:   32:CE:3E:6C:53:D6:EE:55:83:19:CE:16:FD:7E:DD:92:C3:95:7F:A6
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584B1C36C4964D7156B8AC687C80
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/e1298d81-0038-39ef-81b2-9f80ebc14025.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     11537
IP address blocks:        163.253.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:c4:96:4d:71:56:b8:ac:68:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=a29c0fbb-7eb4-46a8-80ad-bdbc559cbc42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1a:ef:73:1c:73:64:9c:13:7c:83:6e:1e:9c:
                    e0:e9:fe:61:c2:9d:db:4a:80:7f:ff:68:7f:50:50:
                    83:68:42:6d:3c:26:30:7a:d4:cd:f4:de:6c:e9:3b:
                    9e:8c:74:b1:6a:f7:7c:d5:07:ef:3e:13:6d:26:96:
                    09:9c:26:b9:e1:ca:77:12:96:fb:ff:e4:1d:eb:c2:
                    c0:f6:03:0c:bf:10:aa:22:e3:87:e1:d0:79:bc:e5:
                    26:b5:0a:98:66:72:21:15:69:dd:c4:56:96:ab:0c:
                    e9:0a:a1:8b:33:3f:92:0a:fc:58:08:b4:bd:8a:b5:
                    02:03:30:18:0b:34:2a:72:59:bf:94:a2:84:cc:e9:
                    93:41:e6:30:cb:62:37:f6:32:9d:34:be:ee:c6:c1:
                    2e:01:0d:53:af:23:a1:3f:76:29:bd:1f:ac:cc:ff:
                    c8:a9:b9:36:98:45:bf:13:0e:ab:be:51:74:a0:51:
                    d2:16:a3:77:ae:1a:6b:c9:0e:3e:43:e0:e0:c1:b2:
                    fc:8c:7f:75:6c:fa:fd:06:30:2b:28:69:f7:12:cf:
                    1c:25:52:a1:a3:ed:a4:16:d9:00:74:74:2b:d1:f4:
                    e0:3d:79:00:06:36:8b:b1:13:19:29:5c:19:cb:27:
                    3e:71:9a:c0:0f:88:b1:79:58:5f:ef:33:6e:84:d7:
                    47:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:CE:3E:6C:53:D6:EE:55:83:19:CE:16:FD:7E:DD:92:C3:95:7F:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/e1298d81-0038-39ef-81b2-9f80ebc14025.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:88:b0:84:66:0c:1d:35:33:f7:36:af:a8:5c:d2:cb:23:98:
         75:0d:9d:71:37:f0:24:62:04:df:97:52:c7:db:ad:16:f9:85:
         d3:19:88:5f:ee:72:b9:f6:3a:6e:93:32:e4:3e:e6:cd:46:ce:
         89:49:f3:27:03:74:7c:90:a1:08:9e:6f:28:ac:ea:4b:45:9c:
         91:63:60:87:ff:27:a6:b3:a3:ba:a8:3e:39:25:5f:47:7f:a9:
         16:e0:f9:9e:36:02:29:9e:da:86:82:83:a9:6e:72:27:75:3f:
         ea:2a:3c:68:50:4c:42:74:63:e3:80:77:dd:94:26:68:8b:d6:
         21:e8:5d:fc:08:ac:b9:4b:0d:87:e4:7f:06:fb:c6:01:b6:92:
         e7:20:61:e5:5e:59:a0:7a:83:2f:86:62:68:5c:c5:bd:5b:38:
         9c:6b:6e:d1:bb:aa:5a:ef:df:5c:78:41:49:6c:51:f8:ac:90:
         a6:d7:cb:b9:6e:35:6a:6b:50:79:bb:84:9e:07:cc:28:81:cb:
         be:b1:9a:73:2c:6b:42:6a:fb:b4:e5:9f:11:68:5f:da:8e:68:
         c4:4a:26:0f:05:20:8a:f4:fa:6e:01:23:46:c7:f6:6e:f3:08:
         c6:0d:16:01:d0:0a:e6:97:4e:b8:87:29:3a:a0:cd:d3:46:2b:
         94:c2:55:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNsSWTXFWuKxofIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy
ZjgyMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk
YTI5YzBmYmItN2ViNC00NmE4LTgwYWQtYmRiYzU1OWNiYzQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBrvcxxzZJwTfINuHpzg6f5hwp3bSoB//2h/
UFCDaEJtPCYwetTN9N5s6TuejHSxavd81QfvPhNtJpYJnCa54cp3Epb7/+Qd68LA
9gMMvxCqIuOH4dB5vOUmtQqYZnIhFWndxFaWqwzpCqGLMz+SCvxYCLS9irUCAzAY
CzQqclm/lKKEzOmTQeYwy2I39jKdNL7uxsEuAQ1TryOhP3YpvR+szP/Iqbk2mEW/
Ew6rvlF0oFHSFqN3rhpryQ4+Q+DgwbL8jH91bPr9BjArKGn3Es8cJVKho+2kFtkA
dHQr0fTgPXkABjaLsRMZKVwZyyc+cZrAD4ixeVhf7zNuhNdHXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDLOPmxT1u5VgxnOFv1+3ZLDlX+mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl
MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvZTEyOThkODEtMDAzOC0z
OWVmLTgxYjItOWY4MGViYzE0MDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5
MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2
MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4
YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo/0JMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ+IsIRmDB01M/c2r6hc0ssjmHUNnXE38CRiBN+XUsfbrRb5hdMZiF/u
crn2Om6TMuQ+5s1GzolJ8ycDdHyQoQiebyis6ktFnJFjYIf/J6azo7qoPjklX0d/
qRbg+Z42Aime2oaCg6lucid1P+oqPGhQTEJ0Y+OAd92UJmiL1iHoXfwIrLlLDYfk
fwb7xgG2kucgYeVeWaB6gy+GYmhcxb1bOJxrbtG7qlrv31x4QUlsUfiskKbXy7lu
NWprUHm7hJ4HzCiBy76xmnMsa0Jq+7TlnxFoX9qOaMRKJg8FIIr0+m4BI0bH9m7z
CMYNFgHQCuaXTriHKTqgzdNGK5TCVTY=
-----END CERTIFICATE-----
Generated at Mon Sep 15 21:22:32 2025 by rpki-client