Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/afa987f8-c47e-3c74-b4bd-58487ad8dee4.roa
File:                     afa987f8-c47e-3c74-b4bd-58487ad8dee4.roa (raw, json)
Hash identifier:          jO0nq9IQ5qkaj0TtLzuD5rgeaPk2r/xI5H+1L2HZRiE=
Subject key identifier:   83:03:A6:AC:2B:6B:A9:19:6A:06:D5:D6:EB:2A:E8:2B:FA:3E:6F:AC
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584D524357CB9D4A46E57FF89880
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/afa987f8-c47e-3c74-b4bd-58487ad8dee4.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     62775
IP address blocks:        163.253.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:57:cb:9d:4a:46:e5:7f:f8:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=eeb85ec8-e3da-4b00-9f1f-84fc9365508a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c5:55:71:93:05:61:f7:de:99:4b:57:4d:4a:
                    3e:a5:bf:88:a0:e6:40:9f:5e:26:bc:d4:32:21:7a:
                    91:ad:2a:a8:cb:23:1d:5d:8d:3e:a8:b5:ca:ca:23:
                    52:35:4d:8f:c5:1f:97:a0:19:19:f6:aa:27:2e:87:
                    dd:69:52:c1:b5:5b:04:fc:20:e2:5a:82:ce:ee:54:
                    dd:79:5b:3e:7e:5e:b7:4a:a1:70:c6:dd:42:0f:c2:
                    cf:fa:a9:5f:60:be:0f:18:9f:88:c1:d5:a4:a3:7e:
                    4a:da:2d:14:23:fd:c4:2b:ce:bb:2f:a0:cf:8c:53:
                    95:7f:04:be:6c:e6:c3:03:7e:2a:b6:5b:f9:61:72:
                    53:e0:73:de:d0:01:2e:be:8b:55:f0:45:f6:94:4b:
                    3c:24:dd:f0:ce:b8:7a:53:ed:ba:a0:3b:12:79:9d:
                    da:3b:7d:76:fa:7c:2b:62:db:02:f0:61:32:c4:86:
                    dd:0a:7e:77:b8:06:5f:44:77:2b:b4:69:e2:ed:d8:
                    85:34:bb:cd:45:7e:e8:d4:1b:86:35:4b:5c:15:db:
                    55:a5:8b:ba:48:0d:8d:12:61:03:1c:2f:ef:50:8a:
                    2f:ef:2f:a9:50:40:f7:ff:31:ba:a6:9c:ad:c7:e9:
                    63:25:4c:e6:88:16:a5:31:61:06:89:40:20:f5:fc:
                    50:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:03:A6:AC:2B:6B:A9:19:6A:06:D5:D6:EB:2A:E8:2B:FA:3E:6F:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/afa987f8-c47e-3c74-b4bd-58487ad8dee4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:22:bf:89:b5:f9:22:4e:c2:51:0e:b8:69:a2:1e:f3:4c:e2:
         d5:03:35:00:e2:e3:60:58:a3:79:c9:28:4b:3b:e1:06:13:26:
         15:2b:be:a1:b4:e1:d6:63:e3:f6:be:0c:a2:b1:e2:dc:36:f2:
         d3:26:c0:21:3e:18:ce:ca:6a:0c:ab:5d:1d:a5:57:38:4a:92:
         86:0e:54:7b:71:50:5d:e0:1f:fa:b8:c7:7a:67:82:2b:bb:6e:
         67:08:76:28:cc:b1:83:c2:d7:3b:70:34:fe:7d:db:52:43:a0:
         78:9d:27:71:41:39:e8:6e:07:4e:eb:31:df:ab:54:27:13:d6:
         4f:04:c6:65:37:fe:ae:17:ef:76:5b:e6:ea:80:1b:8c:62:ea:
         a9:a1:c3:f3:70:94:09:36:4e:fd:f8:f0:29:06:e2:4a:6f:8a:
         76:9e:cf:77:d1:ed:fa:c3:42:c3:d6:31:cc:b4:fc:1e:f7:51:
         62:3e:b0:cc:f2:22:15:24:35:a0:92:42:92:53:e2:f6:78:2d:
         80:c4:99:33:e9:c3:db:a8:8f:49:36:f8:de:8c:5a:2a:33:ec:
         0e:08:56:88:db:e3:f8:74:16:dc:94:6b:95:50:be:c8:67:fb:
         a6:33:b1:7e:42:84:92:56:69:e3:69:19:78:f3:9b:83:0f:89:
         53:61:96:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:30:21 2026 by rpki-client