Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/749e82b2-2556-3f5e-8ccf-e727b708516b.roa
File:                     749e82b2-2556-3f5e-8ccf-e727b708516b.roa (raw, json)
Hash identifier:          UdoKWW/Oy4XsZYIGbf5+wkw1ZTjdKDETRHHDubY9AYI=
Subject key identifier:   37:82:28:36:D2:7E:90:FC:2F:78:C5:8C:E3:FA:BF:64:90:EA:9F:B0
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584DEF45D770BBCB8C2788090380
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/749e82b2-2556-3f5e-8ccf-e727b708516b.roa
Signing time:             Sun 24 May 2026 01:00:27 +0000
ROA not before:           Sun 24 May 2026 01:00:27 +0000
ROA not after:            Sat 22 Aug 2026 01:00:27 +0000
asID:                     11537
IP address blocks:        163.253.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ef:45:d7:70:bb:cb:8c:27:88:09:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: May 24 01:00:27 2026 GMT
            Not After : Aug 22 01:00:27 2026 GMT
        Subject: CN=633d0d58-3843-42db-bb03-467d07c4b6f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:cc:e9:20:a0:c2:9f:81:d1:bb:3f:72:e8:0e:
                    f4:f6:5f:b7:ca:d6:82:9e:68:a8:41:ec:61:af:72:
                    e0:e7:d5:39:5c:8f:f8:77:f6:61:f2:90:1d:ae:85:
                    8b:d1:44:cc:06:8b:c2:2f:0a:64:34:1c:79:93:24:
                    a1:11:7f:dc:8d:50:ae:4c:93:1c:66:24:0e:b3:8f:
                    e9:7a:59:04:57:20:42:66:f4:f4:7a:9a:da:6f:95:
                    32:7f:4a:b8:df:bb:fc:99:b6:93:e2:88:59:b9:f5:
                    58:f6:5c:69:fb:4d:d9:2e:fa:a0:4e:30:c4:76:80:
                    67:19:be:db:23:01:01:f1:47:4f:6b:6c:d2:af:88:
                    27:10:38:e7:c7:fc:cd:2f:c2:df:20:9d:98:6d:a8:
                    6d:db:36:22:ee:7a:97:57:52:a0:5d:f6:e8:93:a1:
                    c7:1d:1d:ac:f1:0e:b1:a7:ac:f3:63:4a:4b:7a:fa:
                    91:77:c5:68:d7:c5:40:7b:ba:15:0f:52:07:28:15:
                    29:73:f1:3c:88:33:3c:a0:63:c2:ff:8c:22:be:37:
                    f6:6f:96:6b:9c:fa:02:a8:24:84:42:50:f1:c0:c4:
                    a7:2d:ff:f3:62:11:d8:3a:65:3b:25:7d:9f:46:65:
                    54:f0:b4:42:a1:00:e7:d0:9e:e6:df:87:a9:56:de:
                    f2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:82:28:36:D2:7E:90:FC:2F:78:C5:8C:E3:FA:BF:64:90:EA:9F:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/749e82b2-2556-3f5e-8ccf-e727b708516b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:b0:20:6e:81:f5:34:96:db:8a:55:af:93:7f:2d:cc:1a:15:
         ac:91:70:c8:36:9b:38:d0:19:60:95:6c:33:38:0e:9c:b1:00:
         ef:ec:43:35:32:6d:f3:78:a6:a9:50:ff:df:7b:77:5e:cd:69:
         96:1e:67:51:5d:39:f7:2b:f5:f3:8a:a1:fc:6c:af:c9:93:b6:
         d5:34:c0:0a:9c:93:de:bd:98:9d:ed:09:52:a6:72:e7:3d:2b:
         45:83:b6:9f:50:ef:44:79:c5:ad:b4:6e:aa:74:04:85:69:96:
         46:a4:2e:d0:8b:d0:6f:47:46:53:f6:b7:bd:f9:50:9c:c4:4a:
         65:76:13:60:52:ec:74:b5:9c:95:88:ab:8c:94:5f:82:96:73:
         17:13:17:cd:7f:72:2f:03:21:e1:40:ba:b8:3e:3d:8e:0f:7c:
         b3:ee:80:ed:34:d0:b5:13:d2:39:1b:62:a7:b7:9e:01:3b:ad:
         4d:5e:a7:59:88:4f:56:03:41:f6:07:38:6c:0c:0d:bd:72:57:
         c7:19:34:d9:cf:ec:0a:11:89:79:ad:d3:35:3a:fe:0b:5c:9d:
         09:15:5a:64:69:e3:9c:c7:18:b3:69:fc:fa:b0:30:97:66:14:
         97:17:96:ac:5b:36:7d:f5:74:59:75:2d:88:9d:3e:67:b3:0c:
         fb:f7:07:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:34:07 2026 by rpki-client