Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/38ef47c1-7c03-30a8-9870-7f034040f6d4.roa
File:                     38ef47c1-7c03-30a8-9870-7f034040f6d4.roa (raw, json)
Hash identifier:          iUe9VBP9oJPqCMv9QU2mUVYZCM9bOhIHViC4m4nXs/o=
Subject key identifier:   6F:FD:3A:58:5A:CC:98:08:B8:D6:43:C8:5A:98:E3:AD:51:9A:19:24
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584D1F4A42793593643AA8C54A00
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/38ef47c1-7c03-30a8-9870-7f034040f6d4.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     14618
IP address blocks:        163.253.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:42:79:35:93:64:3a:a8:c5:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=5f504d21-9588-4853-8896-5f6987ba77fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f2:79:85:a5:a3:9e:0f:38:35:ce:09:ef:00:
                    42:5d:03:68:cf:01:b9:70:89:41:90:47:ce:2b:87:
                    d1:a4:39:09:73:15:cd:1c:65:4f:cd:ca:5a:eb:c3:
                    b6:06:a0:eb:88:71:35:2d:29:a7:44:1f:fd:03:4f:
                    9d:d4:2a:d6:00:80:d0:f7:48:d9:51:cb:d1:ee:4c:
                    bf:41:0d:0c:2a:46:59:99:7d:91:50:0c:19:0e:30:
                    6b:7f:a8:46:cb:a9:94:07:dc:fb:8e:7a:25:60:88:
                    4c:6a:8c:31:f5:46:04:ee:d5:e3:75:0e:b7:93:65:
                    ac:25:c5:1a:f2:20:fe:53:f5:91:f6:a9:b4:a1:4d:
                    84:ca:c0:50:ab:f2:ee:08:b1:51:05:84:86:46:8e:
                    6e:61:0f:2f:11:47:56:38:3d:3a:9b:01:7e:3a:6d:
                    e9:51:74:40:6e:32:0d:20:fb:42:41:03:2a:97:71:
                    27:08:b7:45:6d:8d:29:f1:c3:db:fa:39:f0:33:b4:
                    8e:ef:d6:55:b3:95:4a:f3:79:f7:08:0a:5b:c0:52:
                    de:75:c9:9e:9a:c1:14:0a:65:4c:2c:ab:d8:70:91:
                    20:66:70:32:80:58:58:90:52:9d:c1:55:11:b3:c8:
                    2a:41:60:b6:21:36:be:6b:93:0b:f1:56:63:17:0d:
                    79:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:FD:3A:58:5A:CC:98:08:B8:D6:43:C8:5A:98:E3:AD:51:9A:19:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/38ef47c1-7c03-30a8-9870-7f034040f6d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:ac:41:9c:62:47:0c:30:3b:52:35:f1:66:8e:90:68:43:8b:
         f0:ac:3f:cd:d5:ca:4c:35:b5:b7:ef:82:15:01:bd:0d:1e:54:
         1a:42:48:81:13:5d:ed:b5:cd:1d:57:28:ea:62:df:b9:25:b5:
         4c:ab:18:5a:40:cb:b0:af:2e:30:a5:e7:31:4b:b4:ed:89:85:
         7b:40:08:69:8c:6e:ca:3a:89:ca:1f:05:bb:d3:16:6c:84:97:
         f1:78:c6:ef:f1:f8:d7:7f:f7:7d:d2:7e:ce:ac:69:7c:28:56:
         0b:d1:a6:a1:ae:cd:09:e5:a0:7b:2a:8e:44:ba:75:50:07:85:
         e1:99:15:2f:63:c1:52:92:0a:78:3a:6c:fd:ac:29:d3:21:6a:
         2d:9a:f2:e4:4c:85:87:75:a9:7b:96:1a:0e:24:c8:1a:43:55:
         5d:d7:1e:92:11:41:03:bb:f7:9c:0b:cc:38:6c:b9:3d:ef:b7:
         c9:54:1e:cd:b8:4a:c5:9b:f0:98:2d:97:56:41:19:e3:57:89:
         42:18:f5:16:76:5e:3f:f1:da:8a:4f:36:e9:17:40:d4:47:14:
         6c:23:d8:9d:47:54:06:90:80:33:6a:fb:84:14:0b:aa:da:1f:
         93:ae:e8:68:0c:c1:de:df:38:78:20:8d:49:9a:9d:14:66:d4:
         e7:36:5d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 22:19:51 2026 by rpki-client