Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/947c816e-83e3-3e0c-bc4d-fee99495eb34.roa
File:                     947c816e-83e3-3e0c-bc4d-fee99495eb34.roa (raw, json)
Hash identifier:          uPKq4yJb87m4eO3teeXX40eN6k691XBBs/j+WkxfsYk=
Subject key identifier:   EB:AD:63:D0:49:87:D5:85:8E:4F:D3:90:85:55:4D:F1:64:B1:D0:F0
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584B4D11DE1CF9365E718B253A80
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/947c816e-83e3-3e0c-bc4d-fee99495eb34.roa
Signing time:             Wed 24 Sep 2025 13:00:41 +0000
ROA not before:           Wed 24 Sep 2025 13:00:41 +0000
ROA not after:            Tue 23 Dec 2025 14:00:41 +0000
asID:                     396955
IP address blocks:        163.253.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:11:de:1c:f9:36:5e:71:8b:25:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Sep 24 13:00:41 2025 GMT
            Not After : Dec 23 14:00:41 2025 GMT
        Subject: CN=0292de4d-535f-4c87-ae27-72a0e073eb9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a6:8d:24:09:ff:01:1b:ff:a7:cc:f6:68:6e:
                    f0:95:0a:0b:78:be:99:f5:21:0c:97:fe:04:d4:81:
                    0f:e5:42:83:e1:c5:d1:d6:15:a9:46:ef:96:56:af:
                    6b:67:90:f9:2e:91:44:d2:ab:ee:ed:04:dd:28:2e:
                    ad:d4:ae:6b:19:84:4a:27:70:6c:1e:06:fe:ab:dc:
                    ec:56:c3:4a:36:52:ac:47:de:aa:d4:1a:3f:de:78:
                    c2:09:0e:48:9c:d9:6e:f4:ff:f7:88:b9:f5:88:e0:
                    d0:d7:68:76:d0:27:4d:7b:ad:da:99:e1:aa:83:e6:
                    c9:3f:19:95:ed:45:de:67:7f:22:c9:11:20:1d:f4:
                    ab:b7:28:a3:cc:38:ea:6d:46:ba:bf:23:eb:59:bf:
                    4a:ea:72:61:00:30:2c:ac:33:cc:b8:eb:84:0f:99:
                    a3:02:d9:e9:21:d0:ba:2b:f7:26:d3:29:c4:05:32:
                    9d:4e:58:83:14:7f:a4:5a:0d:09:ae:70:14:c4:0f:
                    0d:dd:45:ff:e1:56:fd:f3:d0:1d:d3:b9:0b:94:88:
                    77:c5:8d:94:29:71:ab:f1:24:bf:2f:56:03:e0:64:
                    16:6b:fc:aa:d7:43:76:21:cb:44:6e:9d:0b:d9:7d:
                    e8:45:63:89:32:6b:99:07:fb:55:dc:9e:d2:4a:db:
                    c5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:AD:63:D0:49:87:D5:85:8E:4F:D3:90:85:55:4D:F1:64:B1:D0:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/947c816e-83e3-3e0c-bc4d-fee99495eb34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:05:64:be:e9:47:9d:aa:8b:64:50:6a:fd:e2:20:34:d8:8e:
         aa:3d:ec:27:b0:6d:96:86:60:e0:de:7c:28:bc:6a:b0:d9:36:
         d0:64:cd:6a:85:01:87:01:29:08:2a:9f:3d:fd:e8:78:28:81:
         48:be:8f:5c:e3:02:f9:f7:2d:64:13:88:7f:8e:34:05:56:2a:
         3d:d3:4d:9c:ad:ad:db:72:e6:8a:01:82:66:fb:ca:1b:50:ed:
         be:3e:0f:26:d5:9a:54:1c:4f:f0:5a:9d:42:68:94:f9:6a:df:
         7b:c1:23:60:33:a9:71:40:71:73:f0:d4:07:7a:2c:4f:2a:bc:
         56:5f:ad:fc:e2:a7:54:f6:41:56:bd:d8:e1:58:a0:09:18:d9:
         89:97:d0:f8:38:79:1a:0b:54:16:27:70:9b:83:bd:55:e4:2f:
         45:89:a9:7a:b4:ed:ea:77:38:17:dd:84:3e:5b:58:99:68:c5:
         72:24:3c:32:7d:19:dd:c8:c6:49:21:f8:39:fe:89:01:d1:30:
         28:66:48:4b:04:ef:7a:4d:ac:01:66:83:6d:03:84:75:60:a3:
         0d:95:5e:74:a7:90:7a:e6:a1:13:17:29:02:c6:07:16:a4:e7:
         0b:75:9e:90:d1:9e:bd:32:00:3b:b8:43:79:60:2b:7e:88:55:
         a5:0d:27:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEd4c+TZecYslOoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy
ZjgyMB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk
MDI5MmRlNGQtNTM1Zi00Yzg3LWFlMjctNzJhMGUwNzNlYjlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16aNJAn/ARv/p8z2aG7wlQoLeL6Z9SEMl/4E
1IEP5UKD4cXR1hWpRu+WVq9rZ5D5LpFE0qvu7QTdKC6t1K5rGYRKJ3BsHgb+q9zs
VsNKNlKsR96q1Bo/3njCCQ5InNlu9P/3iLn1iODQ12h20CdNe63ameGqg+bJPxmV
7UXeZ38iyREgHfSrtyijzDjqbUa6vyPrWb9K6nJhADAsrDPMuOuED5mjAtnpIdC6
K/cm0ynEBTKdTliDFH+kWg0JrnAUxA8N3UX/4Vb989Ad07kLlIh3xY2UKXGr8SS/
L1YD4GQWa/yq10N2IctEbp0L2X3oRWOJMmuZB/tV3J7SStvFyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOutY9BJh9WFjk/TkIVVTfFksdDwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl
MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvOTQ3YzgxNmUtODNlMy0z
ZTBjLWJjNGQtZmVlOTk0OTVlYjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5
MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2
MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4
YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo/0/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKAFZL7pR52qi2RQav3iIDTYjqo97CewbZaGYODefCi8arDZNtBkzWqF
AYcBKQgqnz396HgogUi+j1zjAvn3LWQTiH+ONAVWKj3TTZytrdty5ooBgmb7yhtQ
7b4+DybVmlQcT/BanUJolPlq33vBI2AzqXFAcXPw1Ad6LE8qvFZfrfzip1T2QVa9
2OFYoAkY2YmX0Pg4eRoLVBYncJuDvVXkL0WJqXq07ep3OBfdhD5bWJloxXIkPDJ9
Gd3Ixkkh+Dn+iQHRMChmSEsE73pNrAFmg20DhHVgow2VXnSnkHrmoRMXKQLGBxak
5wt1npDRnr0yADu4Q3lgK36IVaUNJ34=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:11:53 2025 by rpki-client