Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/87a7bbd1-d566-310b-9d9f-e9557a29f15c.roa
File:                     87a7bbd1-d566-310b-9d9f-e9557a29f15c.roa (raw, json)
Hash identifier:          BznQmwHuGhUermmSjiC1+7zg3ySprsgKPDiiKCnxuZE=
Subject key identifier:   10:27:9D:D5:D5:89:BB:13:9D:62:E0:ED:2B:4F:2A:C2:A7:1C:72:7C
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584B8BE20FF7B59B0815A4B764C0
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/87a7bbd1-d566-310b-9d9f-e9557a29f15c.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     16509
IP address blocks:        163.253.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:0f:f7:b5:9b:08:15:a4:b7:64:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=2eee7cad-256c-4614-8bbe-2b852b0afb1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a3:0d:6d:e2:52:bb:d6:c0:59:39:2d:b5:56:
                    84:0c:ff:8d:0b:01:7d:87:90:2f:d4:b5:e4:b0:1c:
                    9c:59:2d:86:68:17:d1:64:4b:1f:dd:36:29:ea:b7:
                    dc:f6:85:29:3c:84:60:89:c8:df:61:f2:3f:67:da:
                    d1:20:31:91:57:8f:17:2b:05:9c:21:aa:e0:d6:b4:
                    8c:4e:5e:df:88:7c:4f:fa:a3:ed:18:48:6a:2d:d0:
                    99:aa:f2:0a:6c:ec:55:32:2a:f8:28:5a:1f:9a:3e:
                    f4:4d:aa:e2:9a:b6:15:38:a2:a3:03:7e:38:5f:6b:
                    7d:39:72:e8:22:5e:38:42:22:45:c2:5c:fe:1f:f0:
                    8d:e2:51:b9:86:44:6e:91:40:86:ab:5d:c8:9f:12:
                    99:81:af:1a:f2:6c:b7:27:f2:be:76:77:d2:87:c2:
                    48:fc:cf:5c:97:7c:0a:6e:d4:9d:88:57:0b:11:fd:
                    41:98:cc:fb:65:ca:be:10:ed:20:5c:49:75:fb:ec:
                    3a:77:ac:d9:9b:66:77:4a:4b:ad:16:c7:76:9d:2e:
                    44:0d:8a:9c:79:23:27:98:22:f9:b1:ac:52:db:6d:
                    7b:50:37:3f:e9:6c:63:bd:e9:d3:3c:ef:6a:b7:f0:
                    1e:a8:86:6a:80:f6:4a:62:46:ca:99:ad:28:75:2e:
                    48:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:27:9D:D5:D5:89:BB:13:9D:62:E0:ED:2B:4F:2A:C2:A7:1C:72:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/87a7bbd1-d566-310b-9d9f-e9557a29f15c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:c1:f7:e2:e7:fe:76:03:7b:a2:59:db:8a:9a:4b:dd:51:43:
         2b:d2:47:b5:d7:f7:72:b1:69:b8:e9:9f:26:57:df:a0:a9:54:
         00:4c:7a:2b:0c:39:87:ab:45:89:ea:47:3f:ac:74:e0:9d:aa:
         cc:44:f0:f0:b5:91:da:a3:e7:65:9b:d6:57:2d:10:64:85:19:
         6a:a6:a4:e6:db:46:9c:3e:1c:81:e7:23:89:63:ee:f6:e1:6f:
         b7:aa:93:1d:26:a3:0b:5f:eb:37:cf:98:bd:e6:ed:61:97:97:
         6c:34:e8:5e:72:61:d2:eb:81:5c:ea:36:d6:04:6f:b6:79:54:
         dc:36:65:c0:7d:cb:73:a9:be:e7:02:4d:2c:d5:c8:71:d9:da:
         24:4d:a2:b3:c5:5b:93:75:df:92:4c:5f:b2:33:76:22:93:e3:
         34:25:87:bf:6d:39:6c:2d:4c:d6:32:68:82:7e:53:c3:44:44:
         45:c0:db:26:97:2d:8d:23:3d:4a:31:4a:dd:3b:b4:90:ea:88:
         80:d5:55:f7:62:af:79:9d:d5:73:6d:f1:2c:8f:46:b4:fe:25:
         50:86:d1:9d:2f:94:98:98:b7:cd:0d:69:b7:7d:d8:6e:e8:fd:
         74:e6:4b:48:a9:12:23:16:3c:27:58:67:ce:56:2e:07:14:87:
         d1:db:49:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:55:43 2025 by rpki-client