Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS63420.roa
File:                     AS63420.roa (raw, json)
Hash identifier:          xcOLWqclWiExHTri5apY3GDU6vu4OvmukFVIaOdQ2dA=
Subject key identifier:   22:97:3D:44:37:6F:CC:32:B6:05:31:2E:6C:AA:EC:B3:30:05:FB:40
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       6CCE58A1A23268A30B8E380BF71DB4E0F66F9EE7
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS63420.roa
Signing time:             Mon 24 Aug 2026 19:11:53 +0000
ROA not before:           Mon 24 Aug 2026 19:06:53 +0000
ROA not after:            Mon 23 Aug 2027 19:11:53 +0000
asID:                     63420
IP address blocks:        45.54.13.0/24 maxlen: 24
                          45.54.25.0/24 maxlen: 24
                          45.54.34.0/24 maxlen: 24
                          104.225.33.0/24 maxlen: 24
                          104.225.37.0/24 maxlen: 24
                          148.163.208.0/24 maxlen: 24
                          148.163.213.0/24 maxlen: 24
                          148.163.241.0/24 maxlen: 24
                          157.53.65.0/24 maxlen: 24
                          157.53.234.0/24 maxlen: 24
                          2606:80:55e::/48 maxlen: 48
                          2607:f740:e7::/48 maxlen: 48
                          2607:f740:e021::/48 maxlen: 48
                          2607:f740:e039::/48 maxlen: 48
                          2607:f740:e614::/48 maxlen: 48
                          2607:f740:e644::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 19:49:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:ce:58:a1:a2:32:68:a3:0b:8e:38:0b:f7:1d:b4:e0:f6:6f:9e:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Aug 24 19:06:53 2026 GMT
            Not After : Aug 23 19:11:53 2027 GMT
        Subject: CN=22973D44376FCC32B605312E6CAAECB33005FB40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ba:97:9c:5f:e4:8b:93:fb:fd:68:eb:25:84:
                    13:fe:1d:ce:30:24:32:53:f2:9a:ec:94:3f:d7:ae:
                    e6:71:ab:34:23:42:c4:61:0d:79:23:52:20:64:51:
                    b4:bf:3b:21:8e:cc:c1:d0:42:e4:50:56:79:e4:4a:
                    c9:95:b8:74:a8:ef:cf:f1:c2:72:60:0f:cb:33:27:
                    87:c1:96:7e:9c:58:6a:23:d0:02:8a:4b:e4:9b:28:
                    9a:97:51:ad:35:3e:04:65:aa:1d:7e:bc:6f:e6:e6:
                    cf:24:a9:70:c6:ae:a5:0e:df:73:4b:61:b8:65:47:
                    66:e1:95:0e:85:15:36:e2:63:38:ee:45:2c:f7:12:
                    d7:2e:b3:a5:0b:6e:48:76:20:69:1a:eb:fe:2c:29:
                    6e:4b:fc:5b:6d:b1:69:ce:a7:e4:35:43:78:d2:19:
                    98:41:cd:47:0b:3b:d1:f6:a8:17:36:95:e5:38:a2:
                    66:00:c3:46:d1:c8:80:36:51:83:87:3c:b8:54:e3:
                    71:b5:08:74:85:9e:72:31:e5:00:4d:a4:eb:41:56:
                    86:c7:57:88:1c:04:f0:5b:43:43:46:ba:9b:1f:48:
                    f8:12:7b:c4:8c:e0:f6:44:63:78:da:8e:56:fd:90:
                    15:95:08:5d:5f:a4:56:b7:9f:b3:59:6a:6e:ca:ee:
                    c8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:97:3D:44:37:6F:CC:32:B6:05:31:2E:6C:AA:EC:B3:30:05:FB:40
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS63420.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.54.13.0/24
                  45.54.25.0/24
                  45.54.34.0/24
                  104.225.33.0/24
                  104.225.37.0/24
                  148.163.208.0/24
                  148.163.213.0/24
                  148.163.241.0/24
                  157.53.65.0/24
                  157.53.234.0/24
                IPv6:
                  2606:80:55e::/48
                  2607:f740:e7::/48
                  2607:f740:e021::/48
                  2607:f740:e039::/48
                  2607:f740:e614::/48
                  2607:f740:e644::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:56:c4:ac:1d:cb:a5:d5:9f:26:cf:68:4e:19:97:71:60:17:
         fc:dd:d1:70:88:79:7b:c7:a5:b2:b5:16:cb:f3:4d:15:fb:71:
         5e:39:89:56:65:ee:2f:02:81:ed:3d:10:f3:ce:ba:a5:72:df:
         76:89:1e:47:cd:2c:15:82:17:49:bf:94:a4:7a:04:1d:50:21:
         b3:52:60:36:05:b4:8e:62:8a:1a:36:f3:04:8e:36:87:97:35:
         90:9d:73:1f:fa:21:5e:8e:16:5a:f6:16:92:f6:2f:e4:da:cf:
         c4:cb:fc:82:1e:b8:09:48:aa:9f:70:28:be:f3:2e:5b:bc:a1:
         f5:06:d2:be:ab:ef:bf:9a:cb:c4:3a:a5:65:71:78:ef:29:31:
         ef:35:b0:b1:af:f4:6a:dc:1d:f8:83:b8:1a:c4:0f:a5:b1:b7:
         d9:39:dd:73:be:6d:2a:7d:57:d9:fe:f8:cd:fc:38:d9:84:1e:
         65:a4:84:8b:b9:b3:bb:95:5f:6f:4e:ee:68:e1:30:e4:a2:30:
         10:a7:bf:85:b7:c9:ab:c0:c3:c1:df:d6:21:1e:5e:f1:a8:36:
         a0:e2:f3:c9:ab:85:d7:ea:dc:05:31:e2:88:7d:a6:e4:2c:25:
         74:b1:ee:bc:3e:58:5d:fa:33:91:90:e3:b8:1a:87:1a:28:e5:
         01:b5:7b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:26:40 2026 by rpki-client