Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/62fccc6a-8319-357d-be52-2c00240f1082.roa
File:                     62fccc6a-8319-357d-be52-2c00240f1082.roa (raw, json)
Hash identifier:          iziDZSTLQTmfCPxNkgO4zVubwsPEWgNvxFrc3Cx9jKM=
Subject key identifier:   0B:DE:CA:35:EA:07:E5:87:87:EB:A3:3B:C1:0F:5D:FE:F5:78:38:36
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584F6F22FE1C241F5D4819149D00
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/62fccc6a-8319-357d-be52-2c00240f1082.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     14618
IP address blocks:        163.253.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:22:fe:1c:24:1f:5d:48:19:14:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=51434375-b64f-4074-8ed7-9edda9f70dc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:80:b7:5f:85:86:1d:d6:50:db:ad:15:95:b3:
                    90:92:50:74:fd:c8:04:48:3e:5d:d6:8a:34:0a:a5:
                    c3:6e:79:2f:2f:c9:22:5b:4d:d4:db:b7:fd:85:53:
                    f7:7a:11:3a:2a:0a:73:4e:62:ab:5e:97:80:92:e9:
                    4f:81:92:09:e3:c9:f3:e7:e4:f1:fe:50:48:0d:fe:
                    b1:1d:2a:78:56:6f:a6:49:71:ae:71:d7:74:63:28:
                    b7:6e:c6:9a:26:3d:23:12:b5:e4:af:10:f3:81:aa:
                    2b:b6:41:0c:a9:76:fa:fe:1f:94:a2:a1:e0:70:48:
                    88:f8:93:c6:90:c6:c4:94:ed:29:b9:85:34:c4:e8:
                    f4:cf:3a:bc:00:bd:13:39:b2:18:7a:32:7a:d7:a7:
                    52:83:54:24:14:aa:cd:dd:40:42:16:c1:72:a3:00:
                    d1:1c:44:75:d5:e3:93:03:ec:d7:44:b5:e2:f4:13:
                    da:da:42:29:7a:d5:b9:2e:92:53:a1:ad:92:d8:e4:
                    82:a4:a5:91:9f:d1:9e:e8:7a:dd:d9:9c:28:77:1e:
                    6a:38:6a:de:b7:ba:0e:e4:b3:b7:4d:91:ea:10:bb:
                    b4:ab:8f:0a:39:d4:54:65:10:e2:4f:93:0a:e6:82:
                    5b:0f:ea:c0:93:12:52:ae:8f:0f:cf:06:3b:30:de:
                    03:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:DE:CA:35:EA:07:E5:87:87:EB:A3:3B:C1:0F:5D:FE:F5:78:38:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/62fccc6a-8319-357d-be52-2c00240f1082.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:18:1d:cf:ba:74:79:a8:7b:e0:de:84:cb:ed:87:c4:06:a2:
         da:50:8c:8a:a0:ea:0c:22:ca:15:9c:e9:4d:34:74:d6:9c:44:
         9b:3f:94:cc:3d:89:2b:63:99:e2:2f:28:97:45:96:ed:62:98:
         e9:e5:d3:43:4d:c9:9c:2c:36:50:cc:46:c5:15:7f:20:f9:bd:
         28:7b:45:0e:66:d0:57:a2:ce:66:3a:fa:22:d9:bc:6c:f4:5d:
         69:fc:84:c8:96:a9:8d:32:03:dc:5f:57:64:50:4d:be:39:99:
         9a:ad:2d:9f:4e:78:e3:8d:63:48:99:fc:62:4f:a2:d6:08:79:
         ad:9e:b9:d6:de:1c:47:59:fd:1e:23:f6:7e:41:6e:b7:0f:c5:
         a4:a9:94:60:c3:ed:c2:bf:ea:78:d5:be:a3:e6:eb:69:4a:5a:
         d5:18:8f:11:e6:e6:23:cd:36:09:69:ce:35:e1:4f:fe:8b:45:
         aa:89:be:72:ea:cd:76:54:30:86:5f:51:b9:dd:cc:65:fd:ea:
         d5:b7:1c:31:a5:53:e8:bf:e1:09:b3:0a:24:85:3a:3b:08:d5:
         d6:96:a3:0d:b9:84:17:3a:04:51:4f:a6:26:3c:80:b0:69:45:
         d5:19:62:1a:81:49:35:ba:7a:98:9e:8d:6d:d6:af:fa:37:2c:
         22:fc:1f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:54:10 2026 by rpki-client