Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/c8b9e899-abdc-38d6-8282-5afd905c96e1.roa
File:                     c8b9e899-abdc-38d6-8282-5afd905c96e1.roa (raw, json)
Hash identifier:          6U0kKhIEPMqOL2ow1259Sojcebkl+4A11jadWXZCgkU=
Subject key identifier:   17:50:F5:BD:B4:71:1C:42:5C:FE:43:6D:E8:F1:BE:B6:8C:73:6A:B5
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584EE56E1C7AEB981AFB47248300
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/c8b9e899-abdc-38d6-8282-5afd905c96e1.roa
Signing time:             Thu 20 Aug 2026 05:10:29 +0000
ROA not before:           Thu 20 Aug 2026 05:10:29 +0000
ROA not after:            Wed 18 Nov 2026 06:10:29 +0000
asID:                     11164
IP address blocks:        163.253.85.0/24 maxlen: 32
                          2001:468:2f0f::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e5:6e:1c:7a:eb:98:1a:fb:47:24:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Aug 20 05:10:29 2026 GMT
            Not After : Nov 18 06:10:29 2026 GMT
        Subject: CN=4d54766b-14b8-466a-b081-ea04d1f1cd3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1d:5c:7b:75:c2:db:c1:16:5c:52:84:68:bd:
                    96:fd:ea:82:e8:71:a6:a4:8b:3f:17:76:c9:0f:8f:
                    ae:36:53:56:de:2a:98:44:9c:07:1b:5a:75:f1:78:
                    1c:20:a3:d7:03:0b:3c:2c:38:e7:52:29:ba:ab:7f:
                    0e:d8:6b:91:07:76:12:89:e6:86:c9:c5:93:9b:ad:
                    9f:0d:05:4b:b8:42:55:57:87:02:ab:21:98:e8:78:
                    4d:22:54:21:19:ff:16:91:c1:47:f0:38:e0:a3:50:
                    0e:25:c7:2b:8d:06:a1:d7:bc:73:eb:83:1c:25:d7:
                    9d:2c:ba:27:29:ce:30:d0:79:90:d4:56:42:8a:c5:
                    17:d9:98:02:75:7a:f7:5b:26:86:05:01:69:45:e0:
                    d4:fa:2b:55:51:a8:cc:29:a5:48:8b:98:9e:65:17:
                    8b:7c:0c:85:65:7e:a4:4a:3e:47:e3:09:33:83:12:
                    da:34:9c:26:d9:83:9f:ec:1e:b3:d7:2e:32:16:9a:
                    f6:7e:c0:74:05:80:36:b8:3f:c2:7e:ae:69:4f:07:
                    20:29:ea:b2:ff:7d:38:96:e9:7c:3e:39:19:6b:a5:
                    b5:1a:6c:c0:2d:12:95:c6:13:0e:2b:93:bc:1b:29:
                    7e:a1:d3:e1:4d:bf:cb:43:25:ee:a5:38:ad:ff:73:
                    cc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:50:F5:BD:B4:71:1C:42:5C:FE:43:6D:E8:F1:BE:B6:8C:73:6A:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/c8b9e899-abdc-38d6-8282-5afd905c96e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.85.0/24
                IPv6:
                  2001:468:2f0f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:c6:ff:02:17:a1:37:ed:26:29:a9:a3:61:ea:1e:20:64:27:
         3c:7f:07:da:bb:4a:56:c3:b8:fd:84:c0:18:ef:b4:28:83:64:
         b3:f5:60:33:54:87:bd:44:46:57:01:1a:66:1c:5a:4d:01:81:
         64:00:7d:cb:2c:88:62:e6:95:0c:49:b9:78:70:47:07:ee:03:
         c5:ae:94:a6:5c:b3:44:11:2c:56:ca:6b:5e:8d:9c:1b:92:43:
         b5:91:8a:6e:2d:c5:61:de:60:b1:a9:3c:d0:04:98:9e:d7:a6:
         91:a8:ac:33:5f:06:8b:35:30:56:91:d5:80:07:28:09:88:d5:
         e2:e8:96:c2:df:79:4f:52:e1:26:d7:9b:96:04:a5:03:50:34:
         0a:90:f0:75:08:38:c1:52:81:ba:7e:e5:be:29:7b:f1:5e:bc:
         84:ae:07:21:cb:3a:8f:1e:33:c1:74:c8:f9:c3:26:16:bd:41:
         80:39:e1:76:5b:af:52:cd:a3:af:69:1c:fb:db:96:0a:84:f6:
         fe:81:f5:d8:9a:ca:3d:4a:d0:7d:6c:36:57:a5:7d:9d:21:30:
         46:c9:a4:07:b9:2b:e7:68:a5:31:a1:ab:4d:cb:0f:a1:f9:b3:
         1e:5c:4b:65:0b:07:4d:0d:8c:36:44:29:e0:23:54:89:fb:d1:
         c2:8e:ad:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:42:35 2026 by rpki-client