Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/8559c3f1-db5e-3610-ac42-bc1f4e9a33ec.roa
File:                     8559c3f1-db5e-3610-ac42-bc1f4e9a33ec.roa (raw, json)
Hash identifier:          KExg/7T0zo9CtCSZ6F0EhtRhfSBT2c4VceCTiTaGIDQ=
Subject key identifier:   04:D5:91:B3:BF:C7:C0:78:D0:FC:75:91:FA:43:AD:D5:26:53:C5:59
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584B821CC11625DFAD06AE410F20
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/8559c3f1-db5e-3610-ac42-bc1f4e9a33ec.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     11537
IP address blocks:        163.253.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:c1:16:25:df:ad:06:ae:41:0f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=8e398ee1-1615-477e-9fe4-8836b9e422a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ef:e1:f1:b5:61:bb:09:2b:2a:e9:71:87:b3:
                    5a:49:2a:75:cc:05:7c:03:9f:25:0d:0b:d0:8c:81:
                    61:f2:dd:13:b8:18:f3:46:39:e8:e1:c0:b6:29:dc:
                    19:70:34:18:19:da:34:ba:36:30:2d:af:90:28:ff:
                    db:55:51:8e:50:25:1c:d4:1d:10:87:3c:67:a8:05:
                    c2:80:4f:05:e0:95:81:46:78:a3:35:35:11:4b:d1:
                    26:79:21:40:80:72:5e:c5:bf:81:39:55:39:0d:a1:
                    60:67:55:b7:37:cc:b5:93:bc:2e:b7:1b:93:7b:c2:
                    bc:4a:29:85:cb:79:3a:b5:2d:be:b8:a2:6a:d1:74:
                    ff:c6:9c:ac:6d:ab:5c:23:92:7f:28:9e:40:ad:76:
                    8e:7b:bc:51:a3:1f:6e:db:dd:91:48:43:2d:f6:a8:
                    5e:17:a7:c2:67:c6:5c:16:e4:3d:5d:04:44:0f:a5:
                    ac:de:72:64:73:d6:d1:41:18:01:82:2f:cc:5e:44:
                    3e:57:c9:79:d9:20:b6:16:5d:9b:3d:de:e5:aa:b4:
                    4d:a4:2e:2f:5e:68:73:13:08:5a:5c:d8:6b:69:87:
                    94:ce:b1:4a:2a:a9:91:cc:3b:8d:36:55:e0:66:fe:
                    55:47:9f:18:e2:d5:a3:fd:31:87:3e:62:09:74:57:
                    ad:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D5:91:B3:BF:C7:C0:78:D0:FC:75:91:FA:43:AD:D5:26:53:C5:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/8559c3f1-db5e-3610-ac42-bc1f4e9a33ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:f1:f7:7a:cd:0f:92:cf:5a:b9:e9:1e:54:86:64:66:b7:b4:
         58:cd:98:ab:d8:d9:b6:f4:cd:52:7a:b2:78:de:f7:37:b0:b2:
         f7:8f:95:c6:f4:fc:6d:e5:5b:b1:f2:d9:4a:56:5a:22:8e:1a:
         bc:06:87:39:33:75:74:d8:72:8d:b7:f2:94:b9:38:ba:f8:34:
         b5:a7:ce:3d:a6:51:78:70:4b:62:f1:58:72:4f:e4:70:d3:21:
         d1:84:4c:ec:b2:93:8b:95:0d:22:0f:5e:99:3a:a9:e2:fa:25:
         54:ce:8c:14:f2:1e:c8:a0:e6:3f:05:a1:15:32:f6:46:41:df:
         d3:f1:9a:be:a9:70:3f:d2:6a:24:ce:25:72:23:b0:ff:4d:e1:
         5c:a6:41:c0:c6:9f:2e:96:3a:d0:42:f8:5b:98:42:88:40:bb:
         29:eb:67:42:73:bc:50:78:6f:70:3c:5a:cb:2d:c4:c2:80:7d:
         97:ef:72:7a:89:ae:51:99:c8:83:ad:fc:35:ad:f6:6b:91:8d:
         35:b0:6c:b8:a6:db:6c:44:a9:26:70:e5:20:15:f4:78:7d:24:
         0b:3f:8c:9a:be:dd:f4:79:8a:4c:37:1e:ce:1b:3b:d2:15:98:
         02:1f:cb:2e:78:1a:df:06:58:fe:8b:d4:0b:01:ef:69:e7:4a:
         fb:0f:7d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:30:16 2025 by rpki-client