Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/8559c3f1-db5e-3610-ac42-bc1f4e9a33ec.roa
File:                     8559c3f1-db5e-3610-ac42-bc1f4e9a33ec.roa (raw, json)
Hash identifier:          Jx/Hjhq9buy6ADxbaXF4FV50ZRfJaSRxdTZ9Zny6xLM=
Subject key identifier:   6F:CE:F4:ED:7C:CD:40:22:A5:5E:76:B1:08:F2:D2:53:FF:98:5A:A8
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584EC371BC2D3C13785545034E50
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/8559c3f1-db5e-3610-ac42-bc1f4e9a33ec.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     11537
IP address blocks:        163.253.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:71:bc:2d:3c:13:78:55:45:03:4e:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=cf961238-d049-49d7-a257-50ba79e7a5f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b3:e0:de:96:1a:51:3a:74:8d:19:e3:9c:e8:
                    33:d3:c7:66:d7:07:67:b9:58:3c:de:83:27:01:31:
                    ba:d8:bd:89:30:03:3c:23:ad:ec:fc:50:1f:c2:e8:
                    7b:a2:e9:88:a3:03:a2:af:0c:41:b8:8d:c1:24:64:
                    54:81:67:fa:1e:b2:49:cf:3f:85:ea:9b:9e:a4:61:
                    27:c5:39:bf:ea:6f:be:df:8c:4b:49:18:c0:f4:f8:
                    34:be:81:f4:d4:e7:c8:e8:62:ea:a0:38:a1:87:49:
                    c0:61:98:e2:c6:02:33:23:e9:3c:06:45:81:49:2f:
                    f6:5a:6a:32:ae:57:ec:9e:63:72:fa:59:51:0f:1f:
                    bd:29:ee:e5:ca:40:20:83:f0:b8:42:5d:78:30:11:
                    3f:72:a4:75:02:c4:da:29:cf:34:3e:02:a6:2f:86:
                    03:f1:5a:31:ad:03:6f:84:14:be:e3:c0:b6:dd:94:
                    a3:d1:08:b3:6d:68:f8:c2:11:56:7f:fd:c4:a4:31:
                    a5:d3:88:26:f8:7e:e1:ec:3e:1d:9a:ea:c8:85:d9:
                    f7:34:d3:d8:c2:29:6b:72:07:38:ab:c2:a0:ce:3e:
                    76:ae:8b:b4:36:3e:b9:4a:a8:e6:7a:96:05:ce:d6:
                    19:57:e2:32:9b:7a:83:47:d6:6f:dd:eb:f1:e2:87:
                    c8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:CE:F4:ED:7C:CD:40:22:A5:5E:76:B1:08:F2:D2:53:FF:98:5A:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/8559c3f1-db5e-3610-ac42-bc1f4e9a33ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:d5:f6:ef:b6:ee:9c:e4:44:39:a3:58:6e:ed:2a:77:60:44:
         67:f7:d9:e5:fd:0f:50:e8:0f:3e:28:cb:a6:15:17:b7:81:e8:
         2c:71:6f:3f:d0:48:7b:ec:28:fe:e8:0c:90:92:6a:b6:0a:1c:
         82:af:06:de:81:4d:33:48:6a:8d:44:ee:6a:d3:d5:bd:c0:da:
         b8:15:40:bd:3b:e2:40:84:58:62:bc:11:27:14:69:3b:9b:a8:
         4f:25:eb:8b:4c:ee:35:0e:c0:2b:40:bb:72:c5:5d:26:de:4b:
         6e:c8:bd:42:43:d4:21:35:a7:f3:7e:28:b0:51:1c:f6:13:f9:
         77:d1:b6:22:6e:36:2b:29:01:18:a3:ca:93:2a:1f:76:94:06:
         c2:d9:02:93:8b:c6:0b:22:b4:f9:87:07:87:3d:3f:82:21:3d:
         7f:23:a7:4b:e0:c3:7c:16:c6:f0:29:1e:bf:d6:af:ae:02:3a:
         c2:d7:9b:ed:55:01:6f:54:03:10:94:1b:09:11:50:29:b0:cb:
         31:cb:20:d0:8b:bf:2b:ee:45:20:c9:25:b4:3a:f6:f8:b4:7c:
         26:bf:79:0f:66:54:95:05:5d:4a:39:e7:f6:55:36:65:f8:bf:
         0f:7a:3f:e0:e9:54:26:af:fd:51:f3:67:11:c7:92:7e:0f:9e:
         b0:23:5e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 14:21:41 2026 by rpki-client