Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS63420.roa
File:                     AS63420.roa (raw, json)
Hash identifier:          4zMBp7ByAtJ+pqzVe1zXk4LpNOyN15RHH4PcqoOh5N4=
Subject key identifier:   88:1B:D5:B4:DC:9D:17:61:D2:DE:E3:8F:78:5C:76:59:3E:A6:D4:6A
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       0ED854CB8D8CB79AA1496B30512ACECA183383CD
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS63420.roa
Signing time:             Fri 24 Jul 2026 21:14:37 +0000
ROA not before:           Fri 24 Jul 2026 21:09:37 +0000
ROA not after:            Fri 23 Jul 2027 21:14:37 +0000
asID:                     63420
IP address blocks:        45.54.13.0/24 maxlen: 24
                          45.54.25.0/24 maxlen: 24
                          45.54.34.0/24 maxlen: 24
                          104.225.33.0/24 maxlen: 24
                          148.163.208.0/24 maxlen: 24
                          148.163.213.0/24 maxlen: 24
                          148.163.241.0/24 maxlen: 24
                          157.53.65.0/24 maxlen: 24
                          157.53.234.0/24 maxlen: 24
                          2606:80:55e::/48 maxlen: 48
                          2607:f740:e7::/48 maxlen: 48
                          2607:f740:e021::/48 maxlen: 48
                          2607:f740:e039::/48 maxlen: 48
                          2607:f740:e614::/48 maxlen: 48
                          2607:f740:e644::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:33:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:d8:54:cb:8d:8c:b7:9a:a1:49:6b:30:51:2a:ce:ca:18:33:83:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Jul 24 21:09:37 2026 GMT
            Not After : Jul 23 21:14:37 2027 GMT
        Subject: CN=881BD5B4DC9D1761D2DEE38F785C76593EA6D46A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e5:cc:ef:6b:b6:a3:f5:a5:32:ab:e7:18:69:
                    75:23:45:60:ee:c0:8b:05:b5:17:af:4d:b7:9e:c9:
                    2f:0b:d3:18:f2:57:30:63:5b:62:23:ba:2d:71:16:
                    66:4e:43:c4:57:4e:69:f4:8e:8c:ef:3c:49:bf:89:
                    2e:0d:43:c7:f1:62:da:65:9a:fa:3b:be:55:cc:6f:
                    b8:df:d2:14:a0:12:14:78:8e:70:f8:74:5f:54:8c:
                    1f:fa:fe:21:fb:38:65:5f:d3:b1:b7:b5:1a:8c:73:
                    94:28:50:fb:d7:5a:e6:34:1a:96:24:2d:96:d4:f8:
                    53:8d:e4:11:67:2a:e0:93:50:09:31:64:ce:da:25:
                    79:aa:0a:0a:a5:ff:7f:5d:43:d9:78:a7:29:aa:50:
                    9d:c7:b0:9e:1a:63:ae:1c:d6:b2:07:84:8f:34:7e:
                    3a:81:09:4e:e3:d8:cd:58:5e:c9:45:c1:7b:56:67:
                    3b:28:f6:9e:55:45:8b:8f:f3:be:34:5d:59:ed:d3:
                    c1:4a:ec:43:21:17:e2:49:65:c5:05:86:d7:e0:68:
                    12:80:9d:55:77:76:9a:14:dd:dd:27:a8:12:5f:4e:
                    e5:7f:b2:39:76:30:73:66:69:a0:3b:d9:86:b7:87:
                    07:4b:87:84:55:d3:2d:be:cb:d4:f0:f0:0d:dc:30:
                    e9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:1B:D5:B4:DC:9D:17:61:D2:DE:E3:8F:78:5C:76:59:3E:A6:D4:6A
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS63420.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.54.13.0/24
                  45.54.25.0/24
                  45.54.34.0/24
                  104.225.33.0/24
                  148.163.208.0/24
                  148.163.213.0/24
                  148.163.241.0/24
                  157.53.65.0/24
                  157.53.234.0/24
                IPv6:
                  2606:80:55e::/48
                  2607:f740:e7::/48
                  2607:f740:e021::/48
                  2607:f740:e039::/48
                  2607:f740:e614::/48
                  2607:f740:e644::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:c4:8d:62:88:c5:50:89:8e:8b:06:ba:22:b5:f3:43:8e:05:
         7f:fe:00:9b:d8:e8:9a:4c:d6:57:ff:7d:3a:3c:86:90:e6:d0:
         04:7d:2b:94:be:85:e8:5d:93:53:e6:7d:96:9f:75:49:7b:c0:
         55:1b:0c:33:45:28:6b:79:8f:15:9d:04:dd:29:d5:d0:d3:85:
         97:15:22:0f:a9:81:3b:b4:21:b6:7f:48:15:7e:fd:08:90:d3:
         5f:a5:39:e1:02:8a:ac:fb:69:1b:6d:ee:d2:a1:9f:d5:43:32:
         8a:fc:c5:7a:bd:a3:d4:ff:e3:90:46:51:89:3e:7a:8f:cc:a7:
         f8:1e:52:e5:50:57:10:fe:df:44:62:ea:50:7a:c8:08:b9:b1:
         6f:9f:e7:d8:fd:9e:ab:65:df:37:71:5b:cc:57:82:46:c5:dd:
         92:ea:a8:1d:d0:15:76:59:31:4b:af:55:66:f6:7e:28:1c:f4:
         e6:67:e7:08:3f:bb:66:62:e5:3e:b8:ee:c5:c8:70:be:c4:07:
         05:0a:1d:96:ad:d4:11:7d:9f:59:40:57:08:c1:3c:0d:5d:e5:
         ed:d7:74:40:6e:ab:96:52:f9:f2:46:24:2f:1d:4e:f0:cb:af:
         e1:17:08:19:44:1e:1b:dc:fe:af:02:3e:9b:0a:0f:81:83:b5:
         17:5f:83:c5
-----BEGIN CERTIFICATE-----
MIIF7TCCBNWgAwIBAgIUDthUy42Mt5qhSWswUSrOyhgzg80wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWZmNGUyNWM0NThlNDRlMjUyOTIyZGNmNTEyYTU2OGRm
ZTA5ODI0MmQwMGNiNjVhM2QwHhcNMjYwNzI0MjEwOTM3WhcNMjcwNzIzMjExNDM3
WjAzMTEwLwYDVQQDEyg4ODFCRDVCNERDOUQxNzYxRDJERUUzOEY3ODVDNzY1OTNF
QTZENDZBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOXM72u2o/Wl
MqvnGGl1I0Vg7sCLBbUXr023nskvC9MY8lcwY1tiI7otcRZmTkPEV05p9I6M7zxJ
v4kuDUPH8WLaZZr6O75VzG+439IUoBIUeI5w+HRfVIwf+v4h+zhlX9Oxt7UajHOU
KFD711rmNBqWJC2W1PhTjeQRZyrgk1AJMWTO2iV5qgoKpf9/XUPZeKcpqlCdx7Ce
GmOuHNayB4SPNH46gQlO49jNWF7JRcF7Vmc7KPaeVUWLj/O+NF1Z7dPBSuxDIRfi
SWXFBYbX4GgSgJ1Vd3aaFN3dJ6gSX07lf7I5djBzZmmgO9mGt4cHS4eEVdMtvsvU
8PAN3DDpQwIDAQABo4IC7TCCAukwHQYDVR0OBBYEFIgb1bTcnRdh0t7jj3hcdlk+
ptRqMB8GA1UdIwQYMBaAFACZ3qsHPv10wlDAo4KyUBK1CCruMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2LzAv
MDA5OURFQUIwNzNFRkQ3NEMyNTBDMEEzODJCMjUwMTJCNTA4MkFFRS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzMwZDQyMmRjLTk4ZDEtNDMwNC05ZjhhLTA5NzEyN2UxNWQ1ZS8xZmY0
ZTI1YzQ1OGU0NGUyNTI5MjJkY2Y1MTJhNTY4ZGZlMDk4MjQyZDAwY2I2NWEzZC5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODNmNjg2NjEw
ODRiODYvMC9BUzYzNDIwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGN
BggrBgEFBQcBBwEB/wR+MHwwPAQCAAEwNgMEAC02DQMEAC02GQMEAC02IgMEAGjh
IQMEAJSj0AMEAJSj1QMEAJSj8QMEAJ01QQMEAJ016jA8BAIAAjA2AwcAJgYAgAVe
AwcAJgf3QADnAwcAJgf3QOAhAwcAJgf3QOA5AwcAJgf3QOYUAwcAJgf3QOZEMA0G
CSqGSIb3DQEBCwUAA4IBAQBJxI1iiMVQiY6LBroitfNDjgV//gCb2OiaTNZX/306
PIaQ5tAEfSuUvoXoXZNT5n2Wn3VJe8BVGwwzRShreY8VnQTdKdXQ04WXFSIPqYE7
tCG2f0gVfv0IkNNfpTnhAoqs+2kbbe7SoZ/VQzKK/MV6vaPU/+OQRlGJPnqPzKf4
HlLlUFcQ/t9EYupQesgIubFvn+fY/Z6rZd83cVvMV4JGxd2S6qgd0BV2WTFLr1Vm
9n4oHPTmZ+cIP7tmYuU+uO7FyHC+xAcFCh2WrdQRfZ9ZQFcIwTwNXeXt13RAbquW
UvnyRiQvHU7wy6/hFwgZRB4b3P6vAj6bCg+Bg7UXX4PF
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:19:21 2026 by rpki-client