Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/3e96ed86-0488-3112-9d4e-c01f3e4d8a65.roa
File:                     3e96ed86-0488-3112-9d4e-c01f3e4d8a65.roa (raw, json)
Hash identifier:          Yd+b5GZbPP9wy6jj3Wac/77RYsLkOz4wDUR7V15MzSo=
Subject key identifier:   83:8E:2F:F4:D3:03:1E:C6:4F:31:14:46:70:54:1A:D7:BE:FC:43:3E
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584F7782DBCD245D43D5F0ACC4A8
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/3e96ed86-0488-3112-9d4e-c01f3e4d8a65.roa
Signing time:             Sun 11 Oct 2026 13:00:12 +0000
ROA not before:           Sun 11 Oct 2026 13:00:12 +0000
ROA not after:            Sat 09 Jan 2027 14:00:12 +0000
asID:                     396955
IP address blocks:        163.253.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:77:82:db:cd:24:5d:43:d5:f0:ac:c4:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Oct 11 13:00:12 2026 GMT
            Not After : Jan  9 14:00:12 2027 GMT
        Subject: CN=5c1d7390-b20f-4c04-9a56-96fd8f1da853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b7:66:4a:37:18:73:0f:b6:ef:7d:ac:df:1c:
                    3a:14:bb:b4:11:2c:43:18:ce:7c:74:b8:cf:43:da:
                    b1:4d:8e:ac:41:55:e9:34:4a:84:0d:cb:7c:5c:3e:
                    ca:dd:aa:4b:24:39:61:27:21:69:b4:f7:ca:f4:71:
                    02:36:97:3b:f0:19:27:11:93:53:bd:b6:5c:28:30:
                    80:55:f2:29:74:7d:5a:38:26:18:a9:4c:46:90:7e:
                    a2:e6:1f:b8:5d:5c:e4:00:00:22:43:d6:15:44:d7:
                    a9:bb:c3:f2:42:64:4a:d9:2c:7d:1d:11:f1:5a:70:
                    d4:55:17:4d:cb:ee:e2:85:b5:f4:e0:fa:91:44:43:
                    64:b3:84:13:76:a9:da:84:fc:bd:09:7f:fb:9b:c3:
                    c8:87:39:75:ff:1c:d3:25:d8:1e:a5:fa:af:fb:0f:
                    31:df:64:9f:b2:fa:3f:e1:b0:1a:2c:53:7b:cf:a3:
                    73:97:4c:80:67:86:86:6c:ec:12:20:38:ac:e9:f1:
                    87:37:7a:41:fd:33:f3:67:03:6b:df:d9:f7:2f:9d:
                    03:42:e5:14:9c:87:bd:1d:35:65:a6:4e:ce:7c:6b:
                    37:fc:8c:2f:e5:35:a7:00:b8:62:a8:6c:89:b2:40:
                    ad:b3:49:30:b8:ed:15:eb:69:af:67:c6:43:d5:6d:
                    c2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:8E:2F:F4:D3:03:1E:C6:4F:31:14:46:70:54:1A:D7:BE:FC:43:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/3e96ed86-0488-3112-9d4e-c01f3e4d8a65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:3c:f4:56:42:a3:ef:27:a8:03:b7:9b:b3:12:c1:70:de:ff:
         4f:73:c3:89:ad:ea:e7:e4:c3:92:10:a9:90:e1:c7:d5:2a:a7:
         09:f3:22:3a:90:9b:e6:62:9d:04:45:a9:4b:03:94:9a:03:f8:
         8d:8f:21:71:7b:5f:40:67:19:33:72:60:7c:a5:3c:86:92:ec:
         24:50:73:0d:48:91:c8:43:f3:36:f5:3f:6a:46:7e:95:d3:e8:
         cb:87:88:9f:5a:b8:9d:a1:da:3b:48:fb:02:1b:ff:ca:67:02:
         fb:d9:c4:7c:74:c1:15:5a:bf:67:38:8f:bb:6c:15:f7:45:72:
         72:d1:43:5b:b2:b5:fb:f5:57:e5:32:db:6b:25:07:18:89:fa:
         76:a7:d6:40:d4:7a:b8:02:6a:67:b8:74:ca:a2:c4:00:39:af:
         c2:d6:0f:32:ce:6b:64:3b:f7:95:f2:46:c3:3d:01:c7:cf:27:
         ac:11:35:2a:02:ce:70:0d:d1:71:ab:51:05:51:a7:2b:f4:44:
         17:5f:4e:cf:cd:69:f0:58:94:3a:6e:41:82:b7:bf:0d:7f:63:
         35:7e:66:7d:13:ac:67:d8:b1:32:b1:89:f1:4a:1a:78:85:74:
         51:e9:28:35:93:c4:d0:df:57:3e:ba:e8:0b:a7:3b:20:d6:bd:
         59:c4:5f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:52:39 2026 by rpki-client