Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ffacc189-d65e-32bb-af51-afeaba78e251.roa
File:                     ffacc189-d65e-32bb-af51-afeaba78e251.roa (raw, json)
Hash identifier:          cw8YT7zVComWQtEhBVGnCNhUN6sik9FXGcDRTw5Oauw=
Subject key identifier:   70:B8:06:00:CE:77:5C:36:36:E9:F3:6F:F1:77:FC:EE:7E:11:CC:0D
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584AA160D4DE21959C33499D6780
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ffacc189-d65e-32bb-af51-afeaba78e251.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     396961
IP address blocks:        163.253.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:d4:de:21:95:9c:33:49:9d:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=a7eed1c2-02e3-4d44-98ef-348996e1ab99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:66:70:84:49:52:13:1c:46:01:00:1c:23:42:
                    0b:c3:6a:c7:c8:1c:2a:3e:9d:f2:69:1f:0e:e0:8c:
                    60:7f:4e:cf:26:9d:4c:f8:2e:6a:31:6e:d8:f8:8a:
                    ce:cc:2c:9e:05:0c:13:54:99:74:e7:26:ee:68:16:
                    1e:30:bf:d0:13:13:56:20:56:fe:af:2c:23:05:59:
                    2a:da:ab:30:36:a7:ad:7d:0f:2b:e7:1c:f2:45:87:
                    79:58:b5:37:22:c1:0b:68:d2:1e:0d:47:ad:b0:f9:
                    6d:3d:29:ae:c3:bb:69:ca:ef:5e:ee:7c:d2:84:18:
                    92:e5:ce:99:a9:d5:ff:63:73:85:91:7d:fe:de:24:
                    a3:39:15:b3:2f:ba:48:08:1c:b6:21:24:a3:02:ec:
                    05:96:5a:68:b0:25:04:60:67:ac:a5:5e:b9:94:20:
                    1f:be:73:72:39:38:21:5d:4e:6e:3e:67:19:ff:cb:
                    7a:bf:57:72:66:02:ca:70:e1:f9:44:21:c0:4c:0b:
                    92:c2:3c:d2:b6:72:b4:8e:f9:8a:cb:a1:db:9a:ae:
                    d6:1d:16:1e:66:ee:be:30:86:4a:f1:5f:42:de:c5:
                    7a:ac:39:97:bb:ce:12:21:92:d6:1e:91:d5:c4:19:
                    aa:bb:df:b1:0c:d8:6e:2c:6c:18:39:d6:81:fe:3d:
                    bc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:B8:06:00:CE:77:5C:36:36:E9:F3:6F:F1:77:FC:EE:7E:11:CC:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ffacc189-d65e-32bb-af51-afeaba78e251.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:03:f8:9f:71:99:26:7e:02:cb:d4:82:6e:c0:fb:d1:80:92:
         6f:ec:fb:c5:73:a3:94:97:ee:a7:c2:5a:e6:93:5e:87:ba:65:
         c5:da:36:87:d3:af:d3:44:89:47:be:6f:3f:ef:38:36:79:b9:
         bd:25:19:12:af:0b:82:75:28:df:c4:f0:1b:33:36:e4:dd:73:
         71:54:c1:ce:0d:cd:a3:a3:f7:5b:30:0b:d6:bf:ae:c4:55:13:
         7b:38:38:99:24:7f:6c:f9:92:60:70:33:bc:8e:21:b1:4f:ae:
         5f:28:75:1e:89:53:81:18:84:00:2e:53:33:22:72:2e:37:6a:
         f1:d8:ee:34:e7:a2:43:88:4c:a6:1e:a5:53:d3:3b:29:12:2a:
         f2:6e:99:cf:cb:8e:10:e1:fb:82:bb:39:60:45:f2:0b:d8:99:
         5d:7c:21:ca:28:22:ca:d8:ce:3e:3b:9a:c2:94:53:f9:cc:c4:
         69:3c:5c:4d:19:4a:64:13:cb:32:ec:96:6c:ca:66:7e:ae:23:
         71:88:93:81:f1:84:30:31:ea:73:40:fd:68:65:4e:d7:04:94:
         5a:aa:48:3d:ee:97:d4:9a:26:31:43:2d:c2:fb:96:9c:66:00:
         77:2a:4a:bf:52:fc:19:78:1d:1d:ef:42:61:ba:25:d6:db:4c:
         9b:38:19:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:14:24 2025 by rpki-client