Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/afa987f8-c47e-3c74-b4bd-58487ad8dee4.roa
File:                     afa987f8-c47e-3c74-b4bd-58487ad8dee4.roa (raw, json)
Hash identifier:          6mJYkwj8BH5SFdW9h9/R3mpSd7dffWteuneL48/5Fsc=
Subject key identifier:   A3:4A:8E:6B:BD:9D:9D:34:3C:7F:4B:57:FF:D9:6A:A9:85:D6:59:D2
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584B92DCF5FD340B0ABF69A6CD52
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/afa987f8-c47e-3c74-b4bd-58487ad8dee4.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     62775
IP address blocks:        163.253.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dc:f5:fd:34:0b:0a:bf:69:a6:cd:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=baac2ad7-76e1-4bc4-9e01-979f044388d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9d:01:99:4b:4e:05:fa:0a:64:71:68:e0:89:
                    00:76:95:69:c0:26:d8:77:53:6e:eb:0a:f4:76:94:
                    1e:c3:90:37:a4:7c:fa:a8:5e:57:78:8e:8d:bc:61:
                    e7:aa:ef:66:17:b1:8a:61:7f:39:f3:6f:1f:62:9c:
                    ef:e4:91:7b:c1:c9:32:c4:fb:33:83:0b:86:8d:61:
                    23:2b:30:e8:a7:6d:3e:a5:d1:98:7c:67:6a:bb:85:
                    64:64:9f:4e:86:39:8c:a9:66:63:7b:d3:e6:83:6f:
                    8b:dc:f1:c1:c3:75:a0:93:45:68:09:d6:24:af:7a:
                    9a:80:20:eb:ca:51:71:30:2d:77:7f:d7:ac:51:84:
                    03:2c:c0:5c:ee:33:c6:13:dc:e7:ab:bc:a0:7a:8d:
                    29:10:4b:cf:8a:44:1a:d1:79:eb:13:e7:21:2f:ff:
                    58:82:5b:4a:64:e6:78:2e:a9:60:23:71:b4:e3:27:
                    d0:1d:f6:4a:c5:4f:dd:9f:d6:4c:18:9c:c6:38:29:
                    22:3e:ff:9b:1a:83:a0:5e:31:c2:fb:25:2e:5b:95:
                    af:5c:91:e6:a4:40:17:7b:0b:e5:93:22:28:e6:8d:
                    c9:a7:24:4a:60:88:27:b0:94:90:03:4a:b5:ff:2a:
                    bd:e0:11:10:36:a7:2f:47:b1:72:5b:d7:bd:15:ae:
                    3d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:4A:8E:6B:BD:9D:9D:34:3C:7F:4B:57:FF:D9:6A:A9:85:D6:59:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/afa987f8-c47e-3c74-b4bd-58487ad8dee4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:df:71:26:5c:c0:8c:aa:b1:05:4e:4e:70:2e:3d:32:56:87:
         b7:ba:26:7a:c3:79:98:20:b9:08:8f:87:3c:0a:6f:ff:0a:ff:
         d7:05:b0:17:c7:72:7d:91:5e:b2:68:2b:32:7d:25:b0:73:02:
         04:d5:71:8a:7b:83:b7:f0:92:60:dd:64:53:6f:16:17:78:95:
         51:9b:14:75:80:32:fb:7a:76:67:fa:bc:7d:24:79:e7:d6:f4:
         89:8b:d5:bc:f7:97:8d:24:89:a8:c7:3c:d9:38:90:55:22:a2:
         0f:9a:9d:d4:50:6a:90:8a:9d:c7:39:9c:80:ef:7e:e1:95:b7:
         27:3d:08:ee:7c:dd:14:1b:da:bd:83:98:23:8d:41:55:5e:f8:
         49:07:0e:b5:5e:91:e2:48:fc:9d:9b:fa:06:53:58:1e:e7:84:
         ad:f7:fe:46:97:00:a5:10:c3:62:66:fb:e5:ec:5b:75:2a:d4:
         bd:f9:39:99:98:d8:d8:33:20:40:e3:e0:fd:e1:34:a6:1d:e0:
         f5:9d:b2:93:e6:92:93:c5:c2:ee:c7:5b:d3:1a:12:73:c7:7e:
         4f:22:07:82:2a:ad:da:d4:c3:a5:2d:ba:ea:8e:99:7b:90:05:
         6a:c9:0f:fe:78:2b:78:99:4f:7e:a6:f3:f4:70:ac:51:43:30:
         1c:28:cc:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:11:32 2025 by rpki-client