Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/c2cfbcd6-1b58-37d8-8b08-3d374fe65c7d.roa
File:                     c2cfbcd6-1b58-37d8-8b08-3d374fe65c7d.roa (raw, json)
Hash identifier:          jBGAwu7qnWIUe8wjh4ctAixcQzlrNYg1f7vx/YPVWT8=
Subject key identifier:   8A:1F:79:33:18:52:E9:99:1C:7E:05:62:65:92:B6:E9:F9:3C:61:02
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584EE0385C1DBB9A62DD4E7CD710
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/c2cfbcd6-1b58-37d8-8b08-3d374fe65c7d.roa
Signing time:             Tue 18 Aug 2026 08:23:08 +0000
ROA not before:           Tue 18 Aug 2026 08:23:08 +0000
ROA not after:            Mon 16 Nov 2026 09:23:08 +0000
asID:                     11537
IP address blocks:        163.253.80.0/24 maxlen: 24
                          163.253.81.0/24 maxlen: 24
                          163.253.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:38:5c:1d:bb:9a:62:dd:4e:7c:d7:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Aug 18 08:23:08 2026 GMT
            Not After : Nov 16 09:23:08 2026 GMT
        Subject: CN=5bc676ea-30a2-4fd0-b037-655d61f8df6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:00:4a:bf:20:ac:2d:70:db:bb:52:17:69:c3:
                    ed:3b:59:0d:c8:9e:0b:f8:cd:d0:29:18:70:bb:04:
                    e1:49:ca:3f:5f:0b:1e:b9:8b:f6:5f:5f:95:24:aa:
                    27:c9:10:7b:60:08:e0:91:c5:0d:8f:28:e3:cd:71:
                    6f:62:9e:7d:0e:5b:16:3c:7c:10:01:e4:40:e1:7b:
                    06:1c:d4:f9:2b:2a:f7:7a:83:4b:38:bf:f3:de:a7:
                    33:f0:32:c7:84:f9:c8:8a:fc:ec:d1:e9:9b:a1:32:
                    57:72:ce:ff:31:c6:2b:f4:e3:b2:33:33:86:f8:65:
                    9f:5e:0c:42:9d:fb:f3:d0:0c:49:db:6f:18:38:18:
                    13:fb:8c:8d:4a:5d:7f:2d:98:d4:4f:01:b3:c6:d5:
                    4b:26:05:36:f7:ca:c2:1e:d6:5f:c7:e3:13:3c:cb:
                    6c:13:98:51:f2:38:83:06:af:c9:c0:0f:e7:8b:48:
                    3b:4e:94:67:9f:60:2e:ba:e3:81:62:d3:a7:1a:71:
                    b8:dd:55:65:d3:46:40:04:ff:b5:6d:49:25:3b:92:
                    3e:7c:0d:8d:a2:ec:a2:ef:22:46:74:b8:71:76:34:
                    dc:1b:ef:5d:b1:cb:0c:57:de:64:e2:02:ee:31:cb:
                    ed:f3:be:af:d0:68:75:dd:20:a3:92:b6:39:e8:e9:
                    7d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:1F:79:33:18:52:E9:99:1C:7E:05:62:65:92:B6:E9:F9:3C:61:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/c2cfbcd6-1b58-37d8-8b08-3d374fe65c7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.80.0/23
                  163.253.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:31:38:a6:66:8b:1e:79:a5:f1:b0:c8:54:6d:08:03:8b:b5:
         a4:c9:0a:89:8a:2d:de:1d:c5:d2:a8:84:17:d6:64:ff:71:e0:
         21:47:15:d3:c6:50:a7:48:5f:70:94:6a:f2:cf:82:e7:33:10:
         7b:78:53:96:95:bd:dc:ec:1f:02:16:ca:81:e9:b1:70:d1:e9:
         b9:c7:73:60:21:de:32:ff:c4:0c:0f:24:97:56:48:70:56:0f:
         73:bc:91:3c:38:68:b2:0b:43:28:1b:fd:14:1b:b8:db:e1:ad:
         7d:7f:cc:62:76:91:53:59:8e:90:62:c4:4a:f6:62:6e:f7:d1:
         e8:88:64:08:be:20:6e:5f:05:72:02:15:db:48:09:6e:91:81:
         aa:15:4a:84:59:74:22:5e:c7:74:70:6d:f7:b1:e8:56:65:3d:
         18:ca:70:2f:f8:ff:8d:18:63:2d:0c:25:b3:25:f0:df:15:77:
         76:67:a2:ea:68:e0:c5:b3:bd:b0:59:79:ae:fb:9f:40:74:8f:
         19:7d:79:d2:7c:d1:a1:c7:49:be:03:ee:df:a6:39:f1:db:be:
         b1:04:6b:14:66:a7:93:0c:04:b3:03:9c:7e:79:eb:04:99:0a:
         34:b6:b7:b0:b8:17:a0:75:3c:de:98:a0:92:a2:ab:77:2e:f2:
         8a:49:dd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:25:01 2026 by rpki-client