Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/5e8cc495-592f-3b80-b292-c3bc8500b23e.roa
File:                     5e8cc495-592f-3b80-b292-c3bc8500b23e.roa (raw, json)
Hash identifier:          HLS68Mi81/XWhzDj0OE9xx/DB7kAyVd2TYR2Z400gxg=
Subject key identifier:   A3:24:5B:AB:5D:3A:6C:37:8B:62:B4:5A:1C:47:57:9C:1B:FE:97:3E
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584EE56DA550B397BDB77E33A800
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/5e8cc495-592f-3b80-b292-c3bc8500b23e.roa
Signing time:             Thu 20 Aug 2026 05:09:33 +0000
ROA not before:           Thu 20 Aug 2026 05:09:33 +0000
ROA not after:            Wed 18 Nov 2026 06:09:33 +0000
asID:                     11537
IP address blocks:        163.253.84.0/24 maxlen: 32
                          2001:468:2f0e::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e5:6d:a5:50:b3:97:bd:b7:7e:33:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Aug 20 05:09:33 2026 GMT
            Not After : Nov 18 06:09:33 2026 GMT
        Subject: CN=926d3fc6-b37c-4c29-8b08-bccd11e0b5dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:bc:ae:01:82:c5:1c:2c:40:dc:81:9e:dd:e8:
                    64:6c:ce:29:d8:35:a0:ba:68:8b:27:58:61:65:f3:
                    47:e1:6c:84:18:5b:02:7b:28:58:d2:52:ea:1a:71:
                    01:3c:94:ec:53:9f:43:4e:40:b9:ce:da:d7:5b:70:
                    2f:76:3b:92:0b:86:ee:2d:2c:7d:17:37:f1:8b:fb:
                    7d:b8:d5:29:cd:0a:4d:cf:63:f8:de:a3:de:7b:9e:
                    e6:92:b6:1a:12:c0:11:2d:18:51:f6:dc:0e:17:66:
                    39:98:1a:db:9e:eb:c6:9b:d8:be:2d:0d:fc:e9:97:
                    e6:f3:f4:25:d8:bb:17:91:c8:50:d4:61:ea:44:7d:
                    40:2f:15:54:af:be:35:09:04:34:7c:7e:93:92:93:
                    f4:76:6a:1b:eb:57:da:1b:f4:ba:a9:7f:15:63:c8:
                    07:e3:52:29:d0:d3:4a:46:a1:38:de:49:17:a2:aa:
                    db:56:70:db:8c:68:3f:39:24:2a:52:14:57:6b:bb:
                    d3:34:3b:b7:97:38:7c:31:a6:bf:df:b7:61:d9:5a:
                    48:ff:98:54:80:2d:0a:25:09:2d:34:fc:ad:04:48:
                    ef:b1:99:69:9c:ba:b4:de:cb:03:5c:e2:a2:3f:b9:
                    e9:f6:1f:b3:2a:34:bc:89:60:b7:b8:e0:43:7d:55:
                    19:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:24:5B:AB:5D:3A:6C:37:8B:62:B4:5A:1C:47:57:9C:1B:FE:97:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/5e8cc495-592f-3b80-b292-c3bc8500b23e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.84.0/24
                IPv6:
                  2001:468:2f0e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:c3:ad:12:e2:ad:d7:40:63:37:4f:20:8a:c9:dc:64:a6:95:
         62:c1:e6:d0:fd:9c:4c:fc:c5:5f:7a:fe:65:ab:d0:a6:5a:a0:
         e1:d7:1b:13:06:e8:9a:cf:4d:27:16:70:02:3c:c4:ea:83:ce:
         5e:d7:59:7c:80:93:3f:4a:88:02:50:fc:ae:93:af:17:81:53:
         74:26:0b:24:d8:13:c0:19:d8:a2:41:40:d5:85:ba:f6:06:9d:
         1e:3f:c0:cd:d4:7b:9a:a5:6c:6b:15:7e:60:f9:8d:96:b7:9b:
         96:38:1a:41:84:9d:af:b3:fe:b7:01:4d:8d:45:5d:92:32:68:
         8d:a6:1b:5a:9f:8f:50:07:5f:1d:9b:53:e2:e9:59:c6:97:d0:
         97:14:bf:dd:b0:27:15:8c:61:d6:2c:2a:e1:1a:26:4f:63:07:
         1e:ca:6c:49:b6:ea:8d:ad:3f:db:db:34:db:8a:2f:40:54:80:
         fe:a8:75:ff:15:7f:1a:0e:b2:1c:07:0c:5e:d2:68:da:6c:63:
         c0:2f:df:c7:6a:70:f4:8a:c8:e7:dd:87:b0:42:2f:42:4d:93:
         ef:01:45:2f:e6:71:6f:9f:46:7e:b0:c9:8c:53:e5:8b:c8:e0:
         28:e2:8a:c3:2c:84:01:7e:0d:37:c8:98:8e:b7:5d:9c:d8:e8:
         3e:fa:fa:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 01:10:53 2026 by rpki-client