Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b9851550-48fa-3e67-a75b-c441d378e2ab.roa
File:                     b9851550-48fa-3e67-a75b-c441d378e2ab.roa (raw, json)
Hash identifier:          SOtWKyueT1Lom2n8QMScszTrBm3I5db5PJjCIYS7dy8=
Subject key identifier:   5F:CA:3B:50:EC:4D:BB:11:05:52:86:E8:73:8C:4A:3D:47:97:1C:D3
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584F655D778E398D5D9667D78700
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b9851550-48fa-3e67-a75b-c441d378e2ab.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     22742
IP address blocks:        163.253.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:77:8e:39:8d:5d:96:67:d7:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=526eaf06-e9a4-4859-93fd-ae94fb144e41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d6:71:6f:6e:9d:9f:aa:e6:48:e4:8a:7b:60:
                    bc:33:14:e6:3f:26:10:37:d5:da:98:16:59:c5:74:
                    86:e9:74:a4:10:b5:46:a1:75:c9:2e:85:13:f4:1a:
                    92:f5:e7:f2:fd:a1:c1:3e:70:fa:67:44:44:fc:4a:
                    b8:98:67:7b:06:8c:ce:fe:0d:28:21:f5:f3:04:18:
                    d8:df:fc:a5:6d:3a:31:53:f9:aa:c7:ca:bd:4b:a6:
                    ba:c3:27:d4:08:11:33:ac:5a:69:9b:f9:6f:41:e6:
                    50:38:97:66:a1:83:5a:70:1a:f8:f8:ae:e0:f9:ad:
                    2d:eb:c3:e3:09:78:64:85:ed:ae:a2:95:52:b3:61:
                    e6:5f:76:47:dd:4b:db:35:cb:51:8d:ac:94:0c:ee:
                    de:5a:7b:15:54:ec:6b:6b:f8:4d:00:63:52:4a:65:
                    06:6e:cd:77:3b:32:9e:6a:99:21:40:aa:1b:7f:f0:
                    c9:67:d2:6a:a4:ec:19:c4:98:91:f2:50:8c:4c:8f:
                    2a:5b:2f:06:83:cc:64:5f:70:c4:c8:a7:c7:05:0a:
                    2b:06:51:15:5b:e4:f2:da:80:a7:b8:4a:a2:97:90:
                    3f:ec:b7:a0:b5:95:4e:3f:cf:55:8c:dc:ff:2f:a4:
                    19:11:9c:6f:6e:f9:15:31:2c:52:ac:89:08:8c:85:
                    d6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:CA:3B:50:EC:4D:BB:11:05:52:86:E8:73:8C:4A:3D:47:97:1C:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b9851550-48fa-3e67-a75b-c441d378e2ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:a5:c3:9e:10:71:a5:57:9c:be:48:80:62:90:15:ea:70:e1:
         6a:08:0b:c6:a9:70:a2:cd:a4:9c:24:4d:a8:1c:c8:2d:c3:ac:
         f0:d5:02:0c:7a:eb:3f:35:d5:0e:41:5a:df:cb:a0:0b:34:63:
         f6:07:85:4e:43:c0:2d:67:fa:fb:4c:9f:c8:10:f4:af:83:b2:
         1d:87:d7:aa:8c:4a:60:e6:21:69:55:ca:fb:74:8a:4c:a0:1a:
         4c:32:2e:a9:24:cc:4c:55:97:1b:1a:92:d5:60:14:07:b0:56:
         50:99:36:70:ed:7b:23:4b:22:2e:2b:95:c1:bc:2a:b6:3b:90:
         be:db:8a:de:17:c2:f5:d5:83:35:ac:a3:81:52:b9:21:fe:0b:
         57:fb:70:40:45:33:7a:1a:ad:fa:08:90:70:67:45:76:94:9a:
         8c:f0:17:d7:06:2f:fc:33:b1:05:8d:b3:00:9e:f2:51:ad:84:
         0a:da:c3:1f:3d:11:ca:3b:6c:c5:2d:64:4d:94:9b:dc:27:19:
         92:8e:49:ba:a5:e1:86:02:ef:ae:a4:21:2e:9a:bc:39:53:d6:
         3b:b7:46:10:36:15:f0:02:44:39:f8:9d:1e:e2:36:65:a1:ce:
         57:c1:67:12:91:ed:ba:4e:1a:97:41:a3:5e:12:bb:a3:2c:48:
         61:f9:0e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:18:01 2026 by rpki-client