Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ffacc189-d65e-32bb-af51-afeaba78e251.roa
File:                     ffacc189-d65e-32bb-af51-afeaba78e251.roa (raw, json)
Hash identifier:          oVQhivIWMKsEVW9u8hZ1mXOqZdiIGS2lBHVULQk3K7E=
Subject key identifier:   2E:45:23:CA:6A:EF:25:1C:CB:CA:55:8A:09:04:3C:6C:41:88:2C:E8
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584EC371C14E3EE941B1CBD65F80
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ffacc189-d65e-32bb-af51-afeaba78e251.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     396961
IP address blocks:        163.253.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:71:c1:4e:3e:e9:41:b1:cb:d6:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=ae9f75cd-4c99-455c-88d3-0e2729ad901e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e6:0d:03:5e:8f:b0:b1:60:16:bf:ce:62:e0:
                    98:77:d1:20:88:aa:f5:cc:dc:e3:cb:fa:7b:6c:4b:
                    b1:37:ad:a2:61:e2:e4:43:e9:13:23:48:6b:d5:8b:
                    d9:eb:b5:f5:d9:a7:fe:70:01:cb:f8:71:95:e1:8f:
                    f2:c3:ca:97:d6:8f:79:11:f2:65:87:a7:b9:06:75:
                    82:e5:29:f4:d2:50:90:ca:a1:bb:61:dd:ec:53:af:
                    dd:b2:9d:38:3b:e3:b9:97:df:eb:a2:38:c6:46:83:
                    0a:de:08:28:6a:51:3f:77:8a:96:45:23:2b:37:61:
                    e4:0f:d3:70:e5:e7:cb:1b:ad:37:0b:71:ee:85:8e:
                    f2:5d:83:3a:c7:61:bb:15:a9:29:2b:8d:4c:0e:64:
                    aa:12:c2:ec:fb:0f:d2:15:16:dc:6c:1c:82:b1:6c:
                    38:be:8f:71:33:5e:ba:c4:fe:83:e3:88:4c:1d:07:
                    bc:5e:40:f9:68:ca:c5:01:f4:d9:5b:07:bc:a1:72:
                    aa:cf:cc:1e:36:59:b9:84:79:15:fd:37:56:a0:7d:
                    31:eb:04:4c:68:2c:01:5f:26:be:f0:a4:db:32:10:
                    fb:93:73:b9:81:ec:15:c4:11:bd:14:fa:48:6e:5a:
                    f4:47:db:3a:45:6b:ae:88:ce:aa:f4:8a:51:7a:d1:
                    2b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:45:23:CA:6A:EF:25:1C:CB:CA:55:8A:09:04:3C:6C:41:88:2C:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ffacc189-d65e-32bb-af51-afeaba78e251.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:12:58:e2:84:97:93:37:7f:aa:e5:ac:51:12:de:e3:f7:10:
         28:f0:74:d2:3e:dd:b8:6f:2c:db:30:d9:46:c1:f0:9e:f0:0b:
         23:a1:df:d7:0b:ad:da:b1:c7:a4:05:cf:dc:86:fd:a1:aa:a0:
         5f:88:f8:1d:e6:13:07:ac:4e:33:60:9d:b3:c7:07:ec:ab:76:
         9e:f1:09:43:19:fe:e3:3b:ab:13:57:0a:0e:dd:ee:8a:02:56:
         44:0c:60:1f:a0:03:40:78:6f:89:c9:ec:b9:fb:1d:ce:df:aa:
         61:e2:11:51:01:9b:4d:63:d8:e3:03:03:7e:c8:bf:76:eb:0f:
         37:bb:6c:25:ad:dc:08:39:4e:70:01:82:1a:f1:f7:26:ef:19:
         56:aa:00:9f:6d:41:fc:42:ad:78:39:fa:04:12:f7:b2:22:16:
         48:7c:ea:a1:2e:be:08:2b:72:2d:0d:0b:1a:3e:18:d1:cb:ad:
         4c:e4:a6:39:25:85:db:9b:42:7e:ea:00:1d:04:d6:78:8f:89:
         75:c9:b9:02:3f:c4:2c:bc:6b:ad:79:0f:85:ec:58:c0:06:a4:
         c9:fc:09:6b:05:33:12:20:ec:2c:b9:33:67:06:2a:c2:30:aa:
         99:78:c3:9c:93:a7:df:11:23:3c:c5:02:40:a4:0a:ec:5d:18:
         22:ca:79:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 14:22:16 2026 by rpki-client