Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/609d59a2-4e9a-336f-8966-50b9d1d6dbf5.roa
File:                     609d59a2-4e9a-336f-8966-50b9d1d6dbf5.roa (raw, json)
Hash identifier:          B2eB0FY0Vuol1UmiNM5lP2N05aVKWZwgKYyzAvsSXRg=
Subject key identifier:   1B:CA:8A:2E:12:B8:D2:D8:E2:3C:B5:0A:AE:11:05:91:50:D3:58:70
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584AC87648F692E2072CB7457000
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/609d59a2-4e9a-336f-8966-50b9d1d6dbf5.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     11164
IP address blocks:        163.253.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:48:f6:92:e2:07:2c:b7:45:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=160c4d0e-fa64-4d97-8a03-ce1f66210bf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:dd:23:05:08:34:f5:44:db:d1:e7:6a:7e:9e:
                    48:ef:35:ee:60:1b:2f:9f:9b:a6:c1:70:69:6f:62:
                    9c:f5:f9:03:b3:52:a1:72:bf:25:06:b2:70:76:48:
                    e4:9e:2a:8f:6e:57:2f:7c:44:fb:13:0e:e5:ff:d9:
                    b4:9b:21:97:a9:96:f0:92:03:1a:96:1f:a3:a2:be:
                    c3:92:66:9c:53:87:8f:d2:b5:ef:25:fd:f8:e7:43:
                    ed:6b:5e:45:49:79:d0:91:fe:b6:e2:dd:82:8e:cf:
                    9b:9e:0f:98:8d:c9:66:3b:59:2c:32:62:a5:d4:e3:
                    b5:17:23:13:33:0c:67:0e:0e:ea:b1:12:27:d5:20:
                    d8:bb:64:27:dc:89:99:a9:b6:b4:0e:10:8b:a1:19:
                    20:d2:03:3e:9e:fb:2e:cf:80:a7:bf:29:c7:a3:e8:
                    95:36:6e:40:d4:83:d8:c9:9f:49:53:50:59:e2:24:
                    52:4e:6e:4b:29:f8:72:4d:4a:e0:c6:78:7c:2c:be:
                    fa:f2:2c:ae:65:cb:3b:ac:43:e6:9e:08:ac:5a:57:
                    e2:be:6a:59:15:0c:98:78:2a:8a:06:83:a6:7a:33:
                    7f:8a:e7:17:a9:3e:f5:18:21:b4:10:6c:87:8c:8d:
                    b2:16:74:b6:91:b0:22:0e:e9:21:a2:60:58:cb:5c:
                    af:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:CA:8A:2E:12:B8:D2:D8:E2:3C:B5:0A:AE:11:05:91:50:D3:58:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/609d59a2-4e9a-336f-8966-50b9d1d6dbf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:b2:2e:40:d1:7a:1d:00:b7:49:d7:89:1e:4e:7c:d8:58:59:
         c2:42:94:df:04:d0:a8:70:10:f4:01:94:a7:10:1d:79:2f:7f:
         ae:25:84:3b:8a:e5:8f:f4:2c:59:e7:53:e7:53:8c:89:9f:ac:
         95:a2:22:02:25:16:4b:85:69:e1:95:67:ad:b3:51:fe:00:a0:
         0d:7e:dd:35:bc:a0:2c:63:71:f8:47:85:82:53:eb:45:44:29:
         75:63:b7:d5:1c:db:4a:ab:ad:c4:a8:01:23:c1:93:46:90:b9:
         b1:16:1f:c1:99:23:40:83:1c:0a:bf:fb:77:9f:70:8c:23:70:
         77:7c:02:cc:b0:d7:53:a4:06:3f:52:d5:b5:38:a8:09:5d:a1:
         c3:4e:a2:61:fc:fb:4f:7c:b2:94:2e:27:21:15:6c:cb:aa:75:
         e9:32:c1:37:a7:d4:ac:8d:fc:fb:3b:d4:1e:65:d1:0a:00:b9:
         e6:3c:04:3b:27:b2:78:ea:b6:4a:66:c2:69:30:9b:5d:cc:35:
         9c:72:d1:fe:25:63:a8:68:04:dc:d8:05:b1:ba:73:cb:50:86:
         14:af:24:02:dc:08:e2:cd:5e:50:40:c6:cd:47:97:a1:51:c0:
         54:03:69:c2:12:99:17:22:82:d7:38:9e:05:bb:b4:2b:47:f6:
         a1:f4:d6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:40:13 2025 by rpki-client