Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/3405a899-675d-3694-b986-0720ff81db0e.roa
File:                     3405a899-675d-3694-b986-0720ff81db0e.roa (raw, json)
Hash identifier:          62Bt1WAKBz2nJgk8jHuIXMBxkmPmQxieRi5EeC0kxA0=
Subject key identifier:   82:AB:ED:9B:30:A9:DB:9E:AF:FB:D9:0A:2A:2C:6C:07:0E:AF:AD:D4
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584F655D725CFE88F9DD8C257B80
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/3405a899-675d-3694-b986-0720ff81db0e.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     11537
IP address blocks:        163.253.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:72:5c:fe:88:f9:dd:8c:25:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=933a2be2-43f8-4207-95b7-45d7eff229d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:15:92:25:4f:73:ef:34:94:52:cf:3e:ba:70:
                    30:87:a5:cb:c8:27:4d:57:22:77:4a:cb:87:a9:47:
                    a7:1a:ce:2c:44:40:40:02:7a:86:81:75:9e:db:9e:
                    15:a4:d6:c4:d7:8e:cc:1e:b9:f1:c1:54:d4:01:4e:
                    75:16:95:fd:cd:5d:9d:60:17:5a:7b:3d:c0:bd:98:
                    5c:13:82:5e:be:fd:47:e5:c0:6b:89:fa:ed:40:4c:
                    17:51:fa:96:eb:d0:d6:74:58:c2:2b:5c:2f:2a:77:
                    32:33:dc:22:f5:cc:da:08:dc:42:de:11:fd:e4:7e:
                    62:9e:28:98:0e:68:eb:2a:42:1b:b0:6f:97:bf:c1:
                    e4:11:05:09:6a:a8:3e:fa:bc:78:07:c4:57:0b:59:
                    c6:72:41:4a:4d:f4:70:ba:e1:d4:5b:35:4d:b7:52:
                    70:83:eb:63:f8:79:a7:ab:cc:08:35:2f:a0:ca:b7:
                    db:e3:01:a8:be:3a:3e:39:98:e3:0b:9e:a9:24:92:
                    e2:17:0a:a0:47:45:66:d2:72:fd:29:2d:43:18:21:
                    36:2e:ea:df:e1:9b:28:8a:ab:68:19:aa:fd:aa:22:
                    61:8f:16:22:c5:fd:59:c8:eb:35:25:93:a4:49:d1:
                    95:f4:27:7b:8a:e3:af:42:c8:7d:8a:52:43:fc:21:
                    46:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:AB:ED:9B:30:A9:DB:9E:AF:FB:D9:0A:2A:2C:6C:07:0E:AF:AD:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/3405a899-675d-3694-b986-0720ff81db0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:68:1d:38:34:7b:42:e7:7d:a8:f8:fd:53:46:cc:47:9a:f8:
         65:c6:ab:39:bb:61:34:0c:82:19:7e:30:0e:99:1c:ab:0d:94:
         ad:c9:05:c2:1f:7a:53:f1:32:7a:29:6f:8a:fa:7d:e4:2e:90:
         32:16:f9:cb:80:93:c2:c9:16:52:9e:de:9f:ed:82:05:ba:1b:
         9d:1b:3e:f8:51:78:ae:b0:b7:31:33:66:14:5e:1f:c5:45:31:
         ee:e2:54:42:d0:91:b0:69:8c:2c:e6:bf:fe:82:57:4e:34:75:
         05:67:98:0f:f3:a8:26:83:f8:a0:89:f6:c5:e0:ca:82:7d:bd:
         60:12:9e:06:5f:92:34:9e:75:b3:a4:40:f7:91:f4:60:53:45:
         57:95:fb:7c:af:d2:40:7c:f7:3c:87:e4:40:45:04:fa:ef:eb:
         58:db:2a:b0:20:10:81:ad:81:44:47:2f:a8:b5:76:de:2d:83:
         76:b0:ac:f9:dc:53:0f:5e:10:44:5f:98:9e:e6:0c:b5:2d:03:
         76:c7:93:01:ad:b2:22:e3:ac:4a:39:19:6e:11:f3:0d:5f:75:
         7d:db:cc:f9:70:6c:35:75:24:16:d9:d0:da:55:82:32:8b:c7:
         bd:51:e6:9f:4c:d6:13:6d:c0:08:b5:d3:e4:78:96:d7:34:09:
         e9:2e:8f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:14:01 2026 by rpki-client