Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b9903dfd-ddbe-3fba-9d99-deda5659260c.roa
File:                     b9903dfd-ddbe-3fba-9d99-deda5659260c.roa (raw, json)
Hash identifier:          YZ38ffKswGpJy8JcCXrADUumPSpNfsvq+x/bAKUUWxE=
Subject key identifier:   4F:41:7A:BB:B7:E7:E6:1A:E4:B1:EC:D6:27:5B:43:92:AE:B4:EA:18
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584EA7942FF61DFFB3B97F119080
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b9903dfd-ddbe-3fba-9d99-deda5659260c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     11537
IP address blocks:        163.253.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:2f:f6:1d:ff:b3:b9:7f:11:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e124a24d-fc0d-4867-b050-5f7b1e954dbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:44:24:62:f3:ea:58:6a:22:5b:cc:e6:a8:54:
                    1a:84:1d:cf:72:b6:12:22:2c:c4:fc:58:88:20:1d:
                    16:ef:78:20:64:e7:62:94:f8:31:c2:d7:17:c4:dc:
                    a8:fb:bd:02:69:2e:68:f4:86:cd:16:87:95:54:e7:
                    cb:41:6a:3c:a8:46:8f:1f:48:a2:b6:fd:ed:dc:3c:
                    26:03:df:a8:3e:ab:56:ff:5b:c7:44:1a:94:d5:e8:
                    0c:02:1d:c7:aa:8e:3a:b3:a9:62:03:31:59:be:2d:
                    3f:5d:a1:eb:31:d4:31:e1:e5:eb:81:32:56:cc:b1:
                    84:22:55:af:d4:5a:66:a6:d3:d7:5c:26:16:cd:ea:
                    96:d0:20:47:e7:68:29:a2:c3:46:53:7a:83:05:1e:
                    f6:9f:97:72:5b:01:e2:16:66:8b:70:29:77:6b:8d:
                    7a:ac:56:3a:35:36:0a:d2:46:94:a8:96:36:3d:f6:
                    a3:c4:f3:ef:91:7b:bc:01:b1:ef:02:02:0a:a5:21:
                    84:08:0d:84:c4:bf:fd:bb:4c:a8:af:24:b9:e2:49:
                    a3:65:48:6e:a3:5c:de:37:26:f8:b0:ad:06:ff:03:
                    87:ca:be:39:30:31:46:90:7b:ed:25:83:92:30:7a:
                    89:75:15:a1:de:ff:0a:fc:15:9b:57:95:29:a2:0e:
                    a4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:41:7A:BB:B7:E7:E6:1A:E4:B1:EC:D6:27:5B:43:92:AE:B4:EA:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b9903dfd-ddbe-3fba-9d99-deda5659260c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:4f:bb:1d:db:e1:fb:7e:19:d3:23:69:04:4b:09:7b:ba:11:
         77:99:2d:99:a0:47:b8:6b:a1:4e:f0:ee:77:f1:c9:64:78:ed:
         be:86:5e:14:c2:e4:fb:09:95:27:f8:64:0b:74:12:60:1d:f6:
         35:64:f4:b7:26:bd:6d:13:f3:9e:78:36:25:a4:91:50:49:8e:
         ce:9f:21:d8:b4:d1:18:49:c2:1b:d4:d7:46:cb:54:56:da:b0:
         a3:95:c3:a4:e5:a6:d8:18:45:d4:4a:bd:1a:57:95:ff:1b:ec:
         3f:43:35:36:67:51:39:14:6d:73:cb:c2:18:9e:62:b6:89:8e:
         8d:9f:95:88:6f:0f:f3:59:7c:f6:81:8b:c9:0c:fe:84:0e:ef:
         07:57:c1:ae:3c:84:79:e6:24:ba:71:f5:3a:11:a2:07:7e:89:
         54:7c:78:72:0a:54:78:e1:66:8b:0d:78:f4:d3:f6:40:2d:ca:
         66:9d:bd:e2:78:be:54:93:e6:5c:4d:34:9f:3a:85:b5:32:1d:
         6c:b7:4b:88:74:6a:5b:ec:6d:f5:e3:1b:da:f5:41:0d:dd:cc:
         d2:fe:40:50:b6:57:7e:f9:26:25:00:62:12:d7:c1:25:c2:9c:
         ed:5a:e9:fb:c4:db:c5:a3:8b:df:ae:af:48:8c:5d:63:55:d0:
         f4:88:e6:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlC/2Hf+zuX8RkIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy
ZjgyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZTEyNGEyNGQtZmMwZC00ODY3LWIwNTAtNWY3YjFlOTU0ZGJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEQkYvPqWGoiW8zmqFQahB3PcrYSIizE/FiI
IB0W73ggZOdilPgxwtcXxNyo+70CaS5o9IbNFoeVVOfLQWo8qEaPH0iitv3t3Dwm
A9+oPqtW/1vHRBqU1egMAh3Hqo46s6liAzFZvi0/XaHrMdQx4eXrgTJWzLGEIlWv
1FpmptPXXCYWzeqW0CBH52gposNGU3qDBR72n5dyWwHiFmaLcCl3a416rFY6NTYK
0kaUqJY2PfajxPPvkXu8AbHvAgIKpSGECA2ExL/9u0yoryS54kmjZUhuo1zeNyb4
sK0G/wOHyr45MDFGkHvtJYOSMHqJdRWh3v8K/BWbV5Upog6kFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE9Beru35+Ya5LHs1idbQ5KutOoYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl
MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvYjk5MDNkZmQtZGRiZS0z
ZmJhLTlkOTktZGVkYTU2NTkyNjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5
MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2
MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4
YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo/0/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIFPux3b4ft+GdMjaQRLCXu6EXeZLZmgR7hroU7w7nfxyWR47b6GXhTC
5PsJlSf4ZAt0EmAd9jVk9LcmvW0T8554NiWkkVBJjs6fIdi00RhJwhvU10bLVFba
sKOVw6TlptgYRdRKvRpXlf8b7D9DNTZnUTkUbXPLwhieYraJjo2flYhvD/NZfPaB
i8kM/oQO7wdXwa48hHnmJLpx9ToRogd+iVR8eHIKVHjhZosNePTT9kAtymadveJ4
vlST5lxNNJ86hbUyHWy3S4h0alvsbfXjG9r1QQ3dzNL+QFC2V375JiUAYhLXwSXC
nO1a6fvE28Wji9+ur0iMXWNV0PSI5p4=
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:20:31 2026 by rpki-client