Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/e57c7ca2-1cee-3a0a-a60e-333adff6b36a.roa
File:                     e57c7ca2-1cee-3a0a-a60e-333adff6b36a.roa (raw, json)
Hash identifier:          VFWnyRu26AL+zj22NiHjj7s/u18a975cAzyLOA6KHao=
Subject key identifier:   48:56:DE:F7:3C:BE:EB:44:D1:5D:78:F3:BA:B7:4C:FE:11:68:35:21
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584AB220DAC43143B1CFFA55E440
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/e57c7ca2-1cee-3a0a-a60e-333adff6b36a.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     62775
IP address blocks:        163.253.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:da:c4:31:43:b1:cf:fa:55:e4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=ea7beebd-991d-42f5-bde4-d6cd16e40b7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:05:ef:6e:c6:62:08:22:2b:af:0e:33:da:79:
                    3e:8c:84:8b:ea:ec:95:4a:ba:de:a3:3d:da:d4:05:
                    c5:b2:25:76:e5:10:67:41:e5:0e:1a:2f:cb:ce:1f:
                    84:f3:c2:32:f6:53:7d:a6:7d:e1:53:a4:c4:19:a1:
                    f6:db:31:2d:bc:20:8d:09:66:29:e5:17:6b:80:a5:
                    e1:d6:c3:1b:6c:b8:57:24:69:6a:7c:7a:32:0a:2d:
                    f1:d0:9c:35:5b:b4:80:9c:c1:f8:c1:07:6f:0f:6b:
                    21:bb:a1:07:e8:05:a9:51:8b:34:d3:6e:28:10:de:
                    b2:05:9e:95:93:0b:4a:73:a4:38:1d:6d:70:0d:0a:
                    00:d2:ff:d9:cb:5a:94:19:f3:64:86:81:e6:2a:0c:
                    91:30:69:6b:2d:1b:be:c1:06:4c:15:d8:58:b1:11:
                    a0:40:94:33:55:61:d0:4a:b9:18:65:c4:5a:2d:54:
                    70:7f:2f:af:c1:91:63:70:be:26:4a:aa:3d:e4:3d:
                    72:84:dd:95:85:ac:07:c5:19:64:10:83:19:da:50:
                    12:31:eb:ce:fd:2e:72:85:0a:f2:55:8f:01:df:62:
                    20:fd:4e:c0:80:8b:1f:45:01:b5:86:98:dd:92:7b:
                    e6:d3:12:c5:9c:20:25:43:52:45:56:a9:a1:82:01:
                    a4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:56:DE:F7:3C:BE:EB:44:D1:5D:78:F3:BA:B7:4C:FE:11:68:35:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/e57c7ca2-1cee-3a0a-a60e-333adff6b36a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:d4:a1:53:a2:bc:1a:42:9a:47:9d:2c:1d:73:55:a2:6b:1f:
         3a:13:3d:52:1b:af:78:12:c0:a6:35:89:04:e9:77:2e:01:a2:
         67:47:40:52:88:14:c4:c3:3c:7b:4b:91:86:a6:c0:56:6c:29:
         a6:6c:54:e4:65:9a:03:25:d1:37:04:91:e1:db:39:52:86:2a:
         d7:25:45:7e:66:b2:e0:7d:b8:b9:f6:02:3f:53:66:d5:59:5e:
         ca:bc:eb:d6:f1:9b:74:22:c4:49:95:20:e2:a1:12:5c:e5:cc:
         82:06:ff:70:85:48:07:93:be:a6:69:58:88:0f:47:d3:93:d2:
         7e:80:40:10:00:01:ab:94:a0:9d:ac:fe:86:ff:2f:92:13:01:
         04:f0:fd:cf:a9:9b:53:d2:e1:85:5a:56:e6:80:0f:c0:12:b5:
         7a:88:96:b1:64:eb:e9:c9:6c:9f:e2:ee:6f:96:85:80:21:6e:
         a7:87:83:c4:9a:a9:f7:62:6d:6d:d0:bb:40:9f:7a:08:93:6a:
         a3:a5:1c:dc:d3:ac:99:3a:2c:bd:72:9b:a1:db:db:7e:b9:60:
         a0:51:fe:d0:d9:2e:57:91:25:10:f2:21:69:36:f2:b7:ea:f6:
         85:4b:c8:f0:01:d3:ec:57:12:f2:49:d3:11:84:fe:83:78:4d:
         14:fc:d9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:02:07 2025 by rpki-client