Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/6e5b2757-0eab-3a4c-823b-734cce3b30a7.roa
File:                     6e5b2757-0eab-3a4c-823b-734cce3b30a7.roa (raw, json)
Hash identifier:          4rI8KGXjRfTxxZRaZYMFI4NChjKNYwTHpn+P0lipg3o=
Subject key identifier:   7E:1B:96:20:21:12:72:8E:BA:16:B8:B5:75:80:DA:22:A9:F0:27:16
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584EE0377DBA469A4E20A3F2A668
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/6e5b2757-0eab-3a4c-823b-734cce3b30a7.roa
Signing time:             Tue 18 Aug 2026 08:21:23 +0000
ROA not before:           Tue 18 Aug 2026 08:21:23 +0000
ROA not after:            Mon 16 Nov 2026 09:21:23 +0000
asID:                     396955
IP address blocks:        163.253.76.0/24 maxlen: 24
                          163.253.77.0/24 maxlen: 24
                          163.253.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:37:7d:ba:46:9a:4e:20:a3:f2:a6:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Aug 18 08:21:23 2026 GMT
            Not After : Nov 16 09:21:23 2026 GMT
        Subject: CN=4ccfec2c-0e08-4be9-95fa-6b1cfe5b5dd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d8:72:02:71:51:36:5f:53:0d:47:64:c8:cd:
                    ee:fe:34:2c:58:18:a7:24:0a:ad:dd:62:09:b2:a1:
                    58:15:6a:18:1c:7c:37:5e:c5:2f:66:3f:83:27:fa:
                    7d:10:84:91:4f:33:82:ea:a7:78:72:84:9f:87:f8:
                    c0:8d:ea:62:ac:f6:3a:48:a9:b6:57:95:37:fd:40:
                    40:8a:34:5b:55:7f:72:7a:16:76:d0:09:d9:b5:8d:
                    53:24:06:32:08:c5:b4:27:2a:45:a5:03:77:c3:3a:
                    93:da:c5:83:d8:a7:32:a2:dd:3d:05:8a:97:1b:b1:
                    12:26:fc:09:dc:bf:fa:b0:5b:32:34:5e:ef:a1:b3:
                    21:b1:ab:11:de:11:d9:4b:7c:e4:c6:2a:be:78:62:
                    76:41:4d:5c:1c:fe:1f:a7:af:0c:7d:ae:07:5a:ed:
                    40:63:5d:36:74:4f:7d:db:b6:73:8b:83:1d:ba:ed:
                    41:fe:ed:4b:6c:e7:47:4f:f7:f0:93:29:b9:10:ce:
                    9d:9b:dd:94:92:6c:2c:2d:c1:80:7e:3a:28:5d:56:
                    ff:5d:29:43:a6:3f:02:5c:54:86:3e:76:8a:b9:4f:
                    da:68:b7:12:58:01:eb:08:a9:64:fb:29:c7:fb:73:
                    f9:c4:78:b4:ff:be:61:d7:35:37:79:74:34:b3:83:
                    60:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:1B:96:20:21:12:72:8E:BA:16:B8:B5:75:80:DA:22:A9:F0:27:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/6e5b2757-0eab-3a4c-823b-734cce3b30a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.76.0/23
                  163.253.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:99:7f:13:10:7f:90:8b:be:79:d6:ae:f2:8f:8f:2b:ed:9c:
         82:fb:a1:77:f1:d1:15:47:94:f2:b6:55:ec:de:91:a3:ca:c7:
         ba:7b:bb:6d:94:72:35:d3:9b:85:00:ee:f2:ef:3a:11:73:5b:
         50:d0:3d:e5:71:5e:08:92:75:fb:ae:b7:c0:54:de:c5:28:3f:
         86:c4:2d:62:32:a4:05:fa:18:1d:57:0b:59:63:74:dc:a0:04:
         e3:07:83:18:f3:42:c5:6b:74:a7:1c:6b:33:5c:52:0d:49:34:
         32:51:ce:41:fb:26:81:df:5c:1a:52:82:11:95:a5:13:c2:61:
         05:21:d2:1c:31:0b:90:c2:8f:3e:2a:4e:c1:18:aa:b7:db:74:
         98:d9:93:e5:6a:37:c3:aa:af:3b:0f:60:e4:c0:84:ae:5d:da:
         fa:d7:f2:aa:d8:c9:a2:53:0b:1a:ed:15:f6:ba:93:90:ad:36:
         15:98:df:64:0a:e3:3a:75:f6:21:30:75:dd:35:5e:ac:b7:8f:
         5e:f1:c6:e5:fb:a9:0c:5b:68:0f:63:b7:c1:1e:ff:93:02:1f:
         40:01:04:76:f1:bc:04:d1:af:9d:e4:7e:1b:29:85:b8:a1:2f:
         4c:96:89:11:3b:28:32:19:68:91:a4:ea:b4:02:7e:6f:7b:b8:
         1b:ea:9f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 01:10:54 2026 by rpki-client