Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/035f13a3-6363-30e8-b8f0-29075f337c20.roa
File:                     035f13a3-6363-30e8-b8f0-29075f337c20.roa (raw, json)
Hash identifier:          9V6ndDqKvEBT5dVeldSI+T3G77lOpzN7FDxjJsWbYug=
Subject key identifier:   CD:C0:51:07:3B:88:F5:38:CE:8F:1D:94:F9:26:80:4A:81:CD:12:F1
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584D0D426A2FEC940DB0873A8280
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/035f13a3-6363-30e8-b8f0-29075f337c20.roa
Signing time:             Wed 04 Mar 2026 02:00:32 +0000
ROA not before:           Wed 04 Mar 2026 02:00:32 +0000
ROA not after:            Tue 02 Jun 2026 01:00:32 +0000
asID:                     396955
IP address blocks:        163.253.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0d:42:6a:2f:ec:94:0d:b0:87:3a:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Mar  4 02:00:32 2026 GMT
            Not After : Jun  2 01:00:32 2026 GMT
        Subject: CN=85acf09e-c85b-4c69-8160-d7d358c71e1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:05:50:24:ba:74:a7:c0:00:e8:f9:72:78:e3:
                    9e:34:bf:4e:92:8a:d3:7f:e2:23:95:b1:5f:73:b3:
                    e9:3d:49:72:f3:4a:8b:7d:1b:da:72:0f:80:8c:8c:
                    50:23:d9:25:b6:8e:91:67:9c:97:72:e5:89:02:0a:
                    24:6f:d8:6c:8e:ad:c2:d1:36:0e:8d:ab:9b:30:ff:
                    44:26:09:03:ad:08:74:5a:47:32:19:68:4a:6b:d5:
                    ab:8d:c5:c1:83:48:df:d6:0c:4d:ec:7c:ce:10:61:
                    4b:59:0b:f3:3d:0b:cb:8c:ba:65:84:b7:1e:1f:47:
                    f6:4f:6a:e3:b3:a7:15:a5:6f:82:ee:63:c7:2f:75:
                    33:40:2c:0c:c9:03:c9:54:f9:32:e9:9d:f0:7f:5a:
                    a7:2d:cf:04:de:f7:3e:2c:f2:43:37:fc:0d:73:2f:
                    1b:97:d4:c7:68:93:e4:ce:6f:81:91:d7:74:3f:47:
                    a1:88:60:6d:e7:96:9f:03:6a:cc:a3:a4:32:17:15:
                    34:5a:48:59:0f:91:c4:71:c3:09:76:d5:28:5c:be:
                    8e:cb:58:b8:df:bb:48:29:64:d6:a6:f2:6f:3d:cb:
                    10:6e:20:b7:01:f2:06:7c:27:a1:53:89:75:b4:e1:
                    30:74:17:2f:58:b8:d0:b9:c6:61:22:5f:86:4a:e3:
                    20:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C0:51:07:3B:88:F5:38:CE:8F:1D:94:F9:26:80:4A:81:CD:12:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/035f13a3-6363-30e8-b8f0-29075f337c20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:8f:c2:15:45:95:53:b1:c9:37:ac:c9:cd:c9:c8:3e:41:8e:
         19:a4:c3:7c:a3:d3:98:e1:1d:c4:55:c9:14:9c:d4:19:9f:06:
         b8:50:08:1b:41:54:4b:38:5e:a0:16:c3:e1:e6:54:5d:55:10:
         6f:f3:76:96:2e:d7:df:e1:c2:db:d7:64:67:67:90:de:e0:5f:
         81:3b:d9:be:90:31:3b:6b:46:7b:e8:4c:33:3b:8e:dc:30:ae:
         8d:4b:7e:2f:78:4b:60:70:ee:b5:e8:c9:01:db:d1:5e:c3:8a:
         95:37:03:f7:ca:1c:f4:21:44:ed:67:9c:a5:6b:29:d2:79:64:
         ee:b9:72:11:ba:5a:4f:3c:3b:26:78:58:62:85:9d:1c:0a:70:
         58:9c:18:37:8e:a2:05:e9:12:fc:9d:d6:03:a3:73:0c:9e:55:
         ba:c6:93:a0:51:bf:c5:89:eb:ac:77:6a:22:a2:64:e6:46:f3:
         69:37:99:1f:d0:fd:dc:f3:8a:b5:ee:cd:f2:cb:f7:12:3a:ec:
         42:15:cc:c6:c4:e5:45:cb:25:4d:26:1c:e7:84:02:69:67:85:
         95:2f:07:10:58:bb:c1:8c:f3:2c:ac:72:c5:3d:f2:6e:a7:89:
         ff:8e:50:83:db:b8:04:70:4a:9e:66:25:43:1d:ea:22:82:88:
         a3:16:02:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 22:19:51 2026 by rpki-client