Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/d04940a4-b6c6-3b76-a4e6-91c06b5324d6.roa
File:                     d04940a4-b6c6-3b76-a4e6-91c06b5324d6.roa (raw, json)
Hash identifier:          dZwUgFddm83oFTlKJHmW/uIVaYchiUErcqqiBz4jx5o=
Subject key identifier:   5B:E4:8A:D4:73:E9:5B:7E:31:A6:09:C1:A9:59:20:68:D3:01:B3:A2
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584B3986FD32CB0C5064500109C0
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/d04940a4-b6c6-3b76-a4e6-91c06b5324d6.roa
Signing time:             Wed 17 Sep 2025 13:00:41 +0000
ROA not before:           Wed 17 Sep 2025 13:00:41 +0000
ROA not after:            Tue 16 Dec 2025 14:00:41 +0000
asID:                     396961
IP address blocks:        163.253.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:39:86:fd:32:cb:0c:50:64:50:01:09:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Sep 17 13:00:41 2025 GMT
            Not After : Dec 16 14:00:41 2025 GMT
        Subject: CN=d987e498-028e-4af9-afa9-61069d7717d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d9:b6:3d:6a:41:e1:45:f0:3b:d3:6b:a3:f2:
                    65:a9:c6:eb:87:a2:67:e9:b7:3d:32:4d:53:b5:7a:
                    99:fa:cf:94:0a:1b:cc:33:c7:08:13:e2:94:a7:b7:
                    9e:21:bc:a2:f5:2f:f7:35:21:b5:59:7e:68:81:1c:
                    65:10:d8:4d:06:ac:cc:cb:04:c5:6e:e9:11:be:6f:
                    91:b2:15:7e:46:dc:f8:ff:37:ea:4c:10:b8:04:27:
                    5d:0b:e1:ff:fa:5e:7d:4a:2b:79:5c:92:52:c4:23:
                    43:3d:2d:69:8a:ae:ae:87:22:8c:0e:0c:bc:0c:1a:
                    97:d1:79:35:af:97:5b:53:33:83:eb:eb:ba:ba:25:
                    5b:41:7d:5b:84:b0:8c:62:e2:ec:06:76:f8:c8:13:
                    72:d2:ab:b7:ef:5b:6a:36:8d:23:a5:95:9a:20:f5:
                    3a:1a:31:14:bc:c0:36:de:4b:05:4c:16:6b:bb:e0:
                    ac:d0:e5:b4:9d:62:e7:fa:21:22:58:d1:0b:9c:43:
                    b2:cc:8a:2c:6a:04:cf:8f:96:65:33:fb:7f:5a:8b:
                    e4:d0:3f:a5:9d:55:9d:f1:cf:97:5f:ce:99:32:41:
                    6e:10:b9:9b:09:0e:0f:86:58:c8:d6:c7:52:bd:07:
                    2f:f3:58:ef:cb:be:84:7e:4f:d1:6c:4f:a9:01:e9:
                    ec:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E4:8A:D4:73:E9:5B:7E:31:A6:09:C1:A9:59:20:68:D3:01:B3:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/d04940a4-b6c6-3b76-a4e6-91c06b5324d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:c2:56:0f:9d:71:e9:05:2b:be:75:1d:fb:e0:6a:1a:3a:06:
         d2:31:54:65:fe:7a:a6:52:10:c0:22:73:dd:17:96:ea:e6:35:
         ed:81:97:50:e4:f3:0c:d2:f0:f0:70:fd:3f:e2:6a:5d:b5:ca:
         d9:b0:80:32:71:9f:8a:e0:45:fd:3a:a8:a4:a9:d2:d5:8f:c3:
         7b:f8:e5:05:7c:fb:53:28:65:f9:0a:53:09:ec:94:e0:a8:a4:
         c4:31:4d:b1:b2:f7:4a:f6:4f:5b:14:b8:76:18:5d:43:bb:6e:
         67:ec:5a:a2:86:ad:95:1b:01:c6:c1:f6:5f:ab:40:73:35:92:
         0f:0f:3e:9b:83:11:76:38:7a:ec:be:fa:3a:85:9b:fc:ed:35:
         ee:ab:59:a6:39:80:26:cd:ad:40:de:a5:f4:fc:dd:c5:ca:bb:
         f6:ad:1b:f7:c7:e3:3b:30:e6:f9:8f:5c:d5:19:b9:71:d2:c8:
         a2:34:7a:fa:f1:54:eb:35:3a:8e:dd:7c:f5:11:fa:b6:4d:ba:
         86:06:80:e3:6c:db:61:65:c6:89:25:73:94:94:30:51:64:88:
         67:51:28:f9:b0:d8:e7:89:b7:4d:43:0f:db:35:e1:2a:c6:92:
         2b:8c:7d:d9:e1:b6:97:2c:e0:c8:3f:15:9d:89:39:fd:68:3e:
         34:b5:94:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:18:34 2025 by rpki-client