Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/d7dd5709-9667-372c-9cec-74583a3fe27b.roa
File:                     d7dd5709-9667-372c-9cec-74583a3fe27b.roa (raw, json)
Hash identifier:          KIkMp9hko0XM68OTsF1OlfrqcF+6Pw/tnFLoSaP+Tt4=
Subject key identifier:   54:D3:E2:92:AC:46:B6:A2:FE:6F:07:24:04:7D:5A:58:78:5E:00:75
Certificate issuer:       /CN=5410af3b-1667-4dd4-9260-1835889ae3a3
Certificate serial:       010D0C9F4328584ECBD1D43755C1E5A9FBEACD00
Authority key identifier: B8:7F:76:B3:F1:DA:95:1F:69:6F:EC:30:F0:FB:FA:25:16:48:C1:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/d7dd5709-9667-372c-9cec-74583a3fe27b.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     16509
IP address blocks:        162.247.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/5410af3b-1667-4dd4-9260-1835889ae3a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/5410af3b-1667-4dd4-9260-1835889ae3a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:d4:37:55:c1:e5:a9:fb:ea:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5410af3b-1667-4dd4-9260-1835889ae3a3
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=97204edb-16c7-48dd-a515-a2b4e720f0b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:8c:64:f1:46:96:76:72:2a:75:be:80:03:b7:
                    45:b0:d2:9b:2e:0f:b9:67:53:8b:af:d8:d0:d9:6c:
                    df:ce:56:6f:cb:41:1c:dc:c8:94:09:86:d9:57:b4:
                    18:69:e2:68:90:e9:c2:e6:fd:3d:44:bf:d4:7d:1d:
                    4a:12:42:7d:e5:2b:6a:2e:90:c4:b5:a7:ac:49:7f:
                    72:4f:7a:4d:5a:66:5b:67:25:d8:80:7e:d3:82:20:
                    96:55:09:3b:a1:db:8d:fc:b7:25:bf:d2:5d:8d:ad:
                    f4:b0:2e:33:97:15:f4:57:67:11:cb:f0:65:9c:53:
                    f6:b9:ac:02:05:31:48:07:53:9f:39:50:64:dd:19:
                    8b:17:ff:26:dc:60:a0:06:cf:87:25:c7:ae:4e:2b:
                    54:92:b9:71:f8:93:2a:02:8c:81:d4:7a:a4:85:4c:
                    eb:9e:1e:22:60:02:8b:a7:bc:90:a7:d3:99:b5:6d:
                    fb:2a:d5:e9:db:ba:15:91:bf:f8:e0:b7:0f:87:77:
                    55:be:87:a4:60:68:37:a6:51:6c:50:77:e7:0e:2e:
                    61:07:cc:52:30:71:27:a0:53:ce:dd:c6:1e:af:3a:
                    ef:2b:bf:03:ec:e3:05:46:ee:da:17:8e:ab:48:6f:
                    78:56:18:88:12:21:db:62:fb:ab:d3:6e:d9:f8:6d:
                    52:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D3:E2:92:AC:46:B6:A2:FE:6F:07:24:04:7D:5A:58:78:5E:00:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/d7dd5709-9667-372c-9cec-74583a3fe27b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/5410af3b-1667-4dd4-9260-1835889ae3a3.crl

            X509v3 Authority Key Identifier:
                keyid:B8:7F:76:B3:F1:DA:95:1F:69:6F:EC:30:F0:FB:FA:25:16:48:C1:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.247.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:22:d3:84:be:aa:cf:12:35:53:b4:c9:86:76:ef:18:1c:c4:
         cb:a2:2d:6b:6c:9b:e5:68:de:d1:8e:ab:96:1f:f8:37:ea:ff:
         b8:c0:a6:35:3b:6a:f4:e2:d0:26:03:9c:4a:e4:23:f0:5e:b2:
         1a:b2:c7:21:f1:58:7b:4f:e0:60:5e:d3:8d:73:4a:1d:48:42:
         e4:cb:97:45:3d:36:52:a2:4b:5c:e4:4a:64:96:3f:b7:81:53:
         e4:f0:84:4b:ec:58:38:a4:de:45:8b:cd:7a:6a:4c:28:0a:bf:
         07:9e:2d:bf:82:40:0b:b7:69:72:cd:f8:b3:f9:1a:42:77:8b:
         01:1d:a6:06:3d:ca:44:c7:9f:32:54:70:d4:91:a5:70:8e:9d:
         d0:ba:7b:d4:fc:a2:c5:a8:f7:49:27:2a:45:1f:b5:b5:4a:4b:
         c1:d5:04:eb:25:34:ef:e3:8c:90:bf:fc:64:f4:86:60:3a:03:
         d1:b1:8b:de:8d:2a:57:07:8f:8a:37:b4:ec:7a:b5:06:96:19:
         78:4d:8b:6e:3f:8e:7b:d2:7a:57:3e:1c:85:3b:c6:d8:bf:5c:
         1c:65:f5:2d:de:15:9d:5f:a5:dc:a7:02:91:bc:82:61:0b:c3:
         55:7f:9e:16:da:93:e4:ab:cb:16:df:d9:46:4d:7d:2b:21:26:
         24:22:c0:1c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7L0dQ3VcHlqfvqzQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTQxMGFmM2ItMTY2Ny00ZGQ0LTkyNjAtMTgzNTg4OWFl
M2EzMB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk
OTcyMDRlZGItMTZjNy00OGRkLWE1MTUtYTJiNGU3MjBmMGIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYxk8UaWdnIqdb6AA7dFsNKbLg+5Z1OLr9jQ
2WzfzlZvy0Ec3MiUCYbZV7QYaeJokOnC5v09RL/UfR1KEkJ95StqLpDEtaesSX9y
T3pNWmZbZyXYgH7TgiCWVQk7oduN/Lclv9Jdja30sC4zlxX0V2cRy/BlnFP2uawC
BTFIB1OfOVBk3RmLF/8m3GCgBs+HJceuTitUkrlx+JMqAoyB1HqkhUzrnh4iYAKL
p7yQp9OZtW37KtXp27oVkb/44LcPh3dVvoekYGg3plFsUHfnDi5hB8xSMHEnoFPO
3cYerzrvK78D7OMFRu7aF46rSG94VhiIEiHbYvur027Z+G1SlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFTT4pKsRrai/m8HJAR9Wlh4XgB1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81NDEw
YWYzYi0xNjY3LTRkZDQtOTI2MC0xODM1ODg5YWUzYTMvZDdkZDU3MDktOTY2Ny0z
NzJjLTljZWMtNzQ1ODNhM2ZlMjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTQxMGFmM2ItMTY2Ny00ZGQ0LTky
NjAtMTgzNTg4OWFlM2EzLzU0MTBhZjNiLTE2NjctNGRkNC05MjYwLTE4MzU4ODlh
ZTNhMy5jcmwwHwYDVR0jBBgwFoAUuH92s/HalR9pb+ww8Pv6JRZIwWYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81NDEwYWYzYi0xNjY3LTRkZDQtOTI2MC0xODM1
ODg5YWUzYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovejMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAci04S+qs8SNVO0yYZ27xgcxMuiLWtsm+Vo3tGOq5Yf+Dfq/7jApjU7
avTi0CYDnErkI/BeshqyxyHxWHtP4GBe041zSh1IQuTLl0U9NlKiS1zkSmSWP7eB
U+TwhEvsWDik3kWLzXpqTCgKvweeLb+CQAu3aXLN+LP5GkJ3iwEdpgY9ykTHnzJU
cNSRpXCOndC6e9T8osWo90knKkUftbVKS8HVBOslNO/jjJC//GT0hmA6A9Gxi96N
KlcHj4o3tOx6tQaWGXhNi24/jnvSelc+HIU7xti/XBxl9S3eFZ1fpdynApG8gmEL
w1V/nhbak+Sryxbf2UZNfSshJiQiwBw=
-----END CERTIFICATE-----
Generated at Mon Sep 28 04:30:13 2026 by rpki-client