Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/f96a984d-a985-3bef-b44f-53dd51363341.roa
File:                     f96a984d-a985-3bef-b44f-53dd51363341.roa (raw, json)
Hash identifier:          a1AgtxMNk9iOyzhAm+qjKTOCyfTptCJblzBIspubnnQ=
Subject key identifier:   2F:49:FA:C1:60:11:D1:6D:56:70:65:4C:88:15:96:11:53:4B:62:02
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584DF375EACCA51A89AD44D9DBF0
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/f96a984d-a985-3bef-b44f-53dd51363341.roa
Signing time:             Mon 25 May 2026 13:00:31 +0000
ROA not before:           Mon 25 May 2026 13:00:31 +0000
ROA not after:            Sun 23 Aug 2026 13:00:31 +0000
asID:                     16509
IP address blocks:        163.253.59.0/24 maxlen: 24
                          2001:468:1f66::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f3:75:ea:cc:a5:1a:89:ad:44:d9:db:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: May 25 13:00:31 2026 GMT
            Not After : Aug 23 13:00:31 2026 GMT
        Subject: CN=141f248c-e3ab-46c4-9b67-8497665232e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:10:17:89:07:16:bd:26:10:35:ed:4f:7d:90:
                    5d:4a:c0:9e:9c:77:26:15:86:98:94:69:99:14:0b:
                    a8:0c:c2:4a:1f:6d:3e:01:7f:d4:70:2b:f8:36:6c:
                    32:95:0c:31:31:c7:95:af:2f:b5:42:3f:f2:55:57:
                    e1:47:39:18:17:d7:ca:86:aa:2c:97:ad:c6:4c:d6:
                    7a:be:1d:02:cc:a7:1f:91:4b:48:04:d3:6a:89:9f:
                    26:37:05:bb:2f:5e:b6:f6:d9:77:f3:dc:8d:24:20:
                    ce:50:07:97:36:73:01:6f:33:e3:79:91:17:fd:e5:
                    8c:49:1a:cc:0f:87:2d:f9:a0:1f:e7:d1:61:02:1f:
                    77:c1:c0:c3:52:36:d0:45:49:cd:dd:20:54:15:d3:
                    3c:53:f0:eb:50:39:5c:11:09:5f:88:c9:01:ef:b8:
                    89:ad:f6:59:23:34:dc:4a:06:08:c5:22:5a:c6:0a:
                    8f:65:bf:00:e6:d4:24:6e:50:84:30:ef:6b:13:78:
                    b8:f2:d5:98:d6:7d:e4:90:f7:e0:26:c6:98:d8:44:
                    6b:22:47:f9:12:96:76:c0:3e:38:0e:c1:4d:3e:ed:
                    bb:3a:f8:1c:01:6a:59:d7:85:0d:09:df:45:7b:5f:
                    d3:67:bb:fd:7e:21:24:71:ed:e4:f5:54:4f:46:18:
                    a2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:49:FA:C1:60:11:D1:6D:56:70:65:4C:88:15:96:11:53:4B:62:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/f96a984d-a985-3bef-b44f-53dd51363341.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.59.0/24
                IPv6:
                  2001:468:1f66::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:71:d8:f2:1f:9a:a4:b4:b3:68:5e:cc:9e:ed:9e:1e:5f:03:
         26:65:97:a7:e0:f3:a1:7b:8c:7e:5e:f7:ee:ac:0d:df:4b:92:
         ba:20:37:94:be:3f:44:4a:97:66:8b:47:04:c0:d1:89:df:82:
         2f:2b:01:75:1f:64:df:9e:3e:43:93:58:f1:c0:2a:a0:93:39:
         31:fb:d3:8b:c5:c2:54:3c:6b:b4:7e:5b:07:40:59:d0:b5:b3:
         01:c3:e1:c7:54:5c:52:37:1f:a3:07:9c:ad:d3:a1:75:42:0e:
         ff:13:77:6b:db:ac:3a:d1:55:50:2a:d4:09:e3:35:a4:be:48:
         cc:28:e0:23:ed:e8:52:37:28:ed:5e:3d:14:e0:cb:9c:3a:6b:
         10:b8:a2:38:b8:f5:fe:37:d8:f4:24:a1:2a:69:a4:a1:45:52:
         2c:72:d7:c3:30:50:0a:93:06:92:41:24:fc:3e:3d:3e:c8:d5:
         3e:1d:4b:43:6d:ef:00:41:b1:5c:ae:e9:70:a4:0c:11:0c:68:
         b0:f7:98:ed:76:91:40:46:dc:79:3d:e4:09:bc:92:9e:e9:a8:
         c2:00:96:98:28:ad:7a:ee:b7:70:a4:4c:1a:fe:4e:96:5a:28:
         89:8d:86:4b:2b:c4:ed:e8:3d:06:5d:83:67:97:61:82:29:d7:
         2c:e6:cc:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:04:59 2026 by rpki-client