Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/23bb4361-0bbd-3870-a99b-dd859a3e6667.roa
File:                     23bb4361-0bbd-3870-a99b-dd859a3e6667.roa (raw, json)
Hash identifier:          T6z126w4PJ7BVfW6bYgLlhCYZhjsb4Pv4gKWzp2gCDQ=
Subject key identifier:   4E:32:91:94:5D:B5:34:8A:2C:65:56:76:F6:03:19:98:28:7B:04:45
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584DE84B3AEC08EA63D848127330
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/23bb4361-0bbd-3870-a99b-dd859a3e6667.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     396955
IP address blocks:        163.253.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:3a:ec:08:ea:63:d8:48:12:73:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=d1026cea-f4d6-4318-a43a-153cd8556fd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e3:77:56:be:b0:63:b3:e4:b5:db:af:22:82:
                    24:c3:7c:90:76:52:7d:59:dd:90:a7:59:33:19:03:
                    99:f8:14:14:8c:64:ac:63:0f:88:d6:3b:37:d6:d2:
                    ff:2e:47:a4:72:77:ef:69:ba:0d:4a:3b:dc:2d:a1:
                    c1:cb:98:ff:a0:fd:21:f9:66:9c:47:de:46:36:4b:
                    7d:e7:6a:63:35:ae:01:5e:73:ca:31:c0:8d:ca:93:
                    5b:8b:1e:5c:8f:03:59:21:ad:28:83:c1:d1:2a:cf:
                    3f:4b:be:df:85:cb:17:b2:07:49:08:a1:4a:a9:b1:
                    b1:b5:f9:f5:10:0f:85:32:73:4a:5d:74:68:5d:50:
                    93:ac:e0:f0:a8:6c:50:f5:11:d0:9a:85:89:41:03:
                    e6:0c:7b:7f:6f:9c:e1:cb:10:ef:aa:e8:6a:47:81:
                    05:e4:a2:2b:c2:16:8c:02:6f:19:ac:10:17:32:9e:
                    a8:7d:c4:4d:71:48:28:39:e3:f0:3c:0c:ed:4c:5b:
                    b7:38:a2:4c:59:de:c7:35:cf:6d:f3:21:6f:0d:37:
                    8e:5f:7d:00:2d:79:57:77:f3:d2:82:09:e0:8b:03:
                    e4:4f:75:06:72:34:5d:cf:22:f3:47:9a:0d:c1:e1:
                    00:ee:98:ba:91:98:a7:a1:a3:a2:5d:95:39:2d:72:
                    33:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:32:91:94:5D:B5:34:8A:2C:65:56:76:F6:03:19:98:28:7B:04:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/23bb4361-0bbd-3870-a99b-dd859a3e6667.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:1e:aa:42:f7:6c:80:42:2a:cd:cd:19:1e:95:4c:f4:51:57:
         bf:97:38:c4:bb:be:5a:79:f2:20:f6:48:1d:97:a4:62:d7:0c:
         03:cb:c5:dc:a4:7f:9f:cb:9e:a4:85:1f:8f:94:e5:73:a1:bd:
         a3:fd:46:6f:8d:64:4e:72:2e:19:fb:11:d8:45:8d:ab:76:8e:
         29:13:23:00:4c:ca:4a:2f:ea:02:9c:cc:ce:d2:7e:d8:32:52:
         b5:c8:b0:2c:dd:b2:eb:8c:d1:35:7f:b3:df:18:96:47:bf:f9:
         e9:7e:20:4f:69:59:1d:c3:99:92:b5:1e:14:b7:35:83:78:11:
         01:d2:ea:77:c0:ef:d2:41:d9:6a:c9:65:01:b6:09:dc:3c:c7:
         5f:35:50:d4:4c:0e:06:92:ec:0a:78:7c:47:92:67:73:4b:c6:
         77:31:6c:d2:a0:0a:e4:39:b9:24:e9:a5:a7:61:b1:87:16:73:
         95:d5:75:1f:ca:0e:eb:32:a8:af:fe:b7:bc:b0:94:41:ca:aa:
         ea:e2:6c:cf:b0:45:c6:0d:c9:e4:41:2a:c0:fb:c5:52:9c:3b:
         18:82:a9:d6:f0:d6:cf:e2:8a:5c:5d:d6:1a:10:8d:1c:5d:63:
         97:88:9d:a4:ed:ed:b2:f4:c2:54:8b:06:26:e8:ab:42:00:c1:
         7e:f7:b5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:41:01 2026 by rpki-client