Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/1803cb87-e3d1-3448-b7ca-4e30b02799a4.roa
File:                     1803cb87-e3d1-3448-b7ca-4e30b02799a4.roa (raw, json)
Hash identifier:          b2+y5mt48vOI1j7RUy+bgZO4BmeX1kt9j7FGyDGuz7Q=
Subject key identifier:   CB:31:FA:1D:BE:49:8F:96:75:BF:A6:EC:71:E0:07:1E:92:31:03:CF
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584E4AEF7237914F2F218364CB00
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/1803cb87-e3d1-3448-b7ca-4e30b02799a4.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     11164
IP address blocks:        163.253.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:72:37:91:4f:2f:21:83:64:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=7234c99b-d622-43ec-996e-be21bcbd4ecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e8:07:cf:37:aa:ec:02:ec:0f:72:c3:7a:71:
                    69:a6:02:d7:f7:bf:b5:4a:2c:e8:fe:fe:36:14:13:
                    f5:12:88:87:28:f6:ac:47:0d:4b:91:51:a9:2c:aa:
                    46:ae:12:68:ec:7e:c2:5d:7e:bb:dc:6d:df:9f:4e:
                    92:13:c5:42:9a:78:17:ee:62:a9:c2:cd:16:31:04:
                    ce:65:1b:c6:65:d0:3c:d0:c9:a7:93:e8:85:59:8a:
                    e3:ea:fd:f0:5d:78:6c:88:b6:65:11:42:dd:c8:97:
                    51:d1:3d:80:97:44:33:ec:80:c8:49:24:cc:ce:14:
                    fd:57:1e:ed:54:05:9f:c0:c6:44:47:72:ae:e6:3c:
                    d7:57:13:af:de:dc:e5:33:5d:ed:7e:a8:ba:d5:11:
                    2c:a4:ed:6f:5a:d0:81:d9:6c:1d:47:f9:84:e8:6a:
                    d8:a2:68:f5:f0:ea:03:08:24:ab:85:ad:28:1d:16:
                    d5:15:ca:94:e7:72:7f:f1:35:e5:33:a7:02:6d:e1:
                    29:7b:85:09:1b:57:07:c4:bb:d9:0f:4a:c5:4b:b7:
                    27:85:84:5f:e0:74:ec:7e:e9:68:63:69:02:0c:59:
                    8c:78:c9:9a:af:99:65:99:89:be:04:22:51:51:4a:
                    46:89:69:d8:0b:91:62:9a:dc:d5:3b:90:59:47:bc:
                    2d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:31:FA:1D:BE:49:8F:96:75:BF:A6:EC:71:E0:07:1E:92:31:03:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/1803cb87-e3d1-3448-b7ca-4e30b02799a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:9c:ae:61:5d:40:c7:47:f3:cc:19:8d:37:69:0e:e7:3b:50:
         7b:f9:ac:f7:06:a4:6b:25:e8:c0:e1:20:f3:9d:0c:ce:5f:70:
         be:e6:78:21:3d:7a:9d:47:79:74:a8:cf:a6:a9:75:07:4f:0f:
         44:0d:b9:2e:dc:09:05:49:c8:16:9d:9c:eb:0c:0a:8e:cf:08:
         41:b8:1d:34:57:94:3f:6b:c3:9b:af:03:78:14:cd:e4:1b:f5:
         d3:4e:13:9b:c7:b4:83:41:59:23:a0:9c:6a:78:56:c3:92:46:
         d5:81:f3:a4:1c:cb:6a:5b:a2:ed:30:32:a9:e1:0a:ef:57:75:
         21:3f:78:6c:35:4a:01:db:57:d9:f9:da:c5:06:52:60:b4:0a:
         6a:4c:83:55:ba:fd:7f:90:5c:46:b5:29:9e:d9:64:e3:f7:d1:
         56:23:18:d8:3d:3c:2a:99:65:45:79:ba:2d:0a:dd:e5:97:36:
         ff:a0:e8:10:39:62:1e:cd:34:c2:b8:29:12:11:c9:6e:a5:f2:
         40:a4:3f:6a:ed:f2:f9:07:2c:d2:e6:c7:f8:65:67:14:a7:87:
         08:dc:02:53:c1:92:6d:94:2e:7a:e1:26:16:cf:61:38:f6:6f:
         71:bf:df:a5:e0:37:e2:6f:f6:c8:3b:3d:33:3b:2c:4f:ec:08:
         39:91:d6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 23:14:48 2026 by rpki-client