Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS63025.roa
File:                     AS63025.roa (raw, json)
Hash identifier:          X5Lj11FeybMj4d0zKg1I8qCuEwh91XnpENjiTsyJg0U=
Subject key identifier:   FB:38:EF:BD:0A:C1:37:7C:99:88:02:39:CE:C1:43:F2:FC:A9:B5:FD
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       7FBD01505993454FAF6CE4B044DECAB12D510E93
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS63025.roa
Signing time:             Thu 21 May 2026 19:45:10 +0000
ROA not before:           Thu 21 May 2026 19:40:10 +0000
ROA not after:            Thu 20 May 2027 19:45:10 +0000
asID:                     63025
IP address blocks:        66.212.31.0/24 maxlen: 24
                          67.215.240.0/24 maxlen: 24
                          198.23.185.0/24 maxlen: 24
                          209.200.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:52:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:bd:01:50:59:93:45:4f:af:6c:e4:b0:44:de:ca:b1:2d:51:0e:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: May 21 19:40:10 2026 GMT
            Not After : May 20 19:45:10 2027 GMT
        Subject: CN=FB38EFBD0AC1377C99880239CEC143F2FCA9B5FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3a:63:40:2a:cb:78:81:66:9f:b0:21:30:7d:
                    4e:c6:a4:44:1f:39:21:78:f8:d9:38:d8:68:f7:12:
                    9e:bd:20:73:35:af:60:5a:86:0d:08:b1:81:ca:cc:
                    f9:f4:cf:59:91:eb:6d:f0:88:ac:a1:1e:48:b6:ad:
                    e2:28:7a:fa:16:df:c6:3e:05:18:8e:da:ef:78:a4:
                    1a:3f:d7:51:f3:1c:53:1b:a7:02:5c:94:a0:42:36:
                    e1:99:ca:96:b9:81:68:ae:71:cb:88:ea:f4:39:e1:
                    db:0f:9f:c1:20:b6:09:cb:ec:ca:4d:1b:d3:b1:8b:
                    29:96:a9:99:26:35:53:69:82:1c:00:99:5e:b1:cf:
                    89:a3:ee:0f:ea:af:96:d6:06:46:3c:78:1e:09:02:
                    20:78:52:b8:d6:6d:6f:a3:c5:86:21:b4:e2:50:03:
                    8d:8d:6d:c9:f6:80:d8:eb:95:7f:7f:ad:58:b7:3b:
                    24:6c:a1:ff:1c:a3:4d:c7:23:3e:c4:52:ed:c5:76:
                    ec:62:e6:cd:41:f7:94:10:67:f0:be:d7:71:7b:4d:
                    dc:f7:45:cc:2d:79:c3:1c:e0:b1:77:40:90:f6:a9:
                    09:c5:59:30:09:34:26:60:ef:8c:74:a2:55:41:eb:
                    e8:a2:f4:ec:03:7d:fc:14:30:72:c3:5f:ca:ef:04:
                    06:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:38:EF:BD:0A:C1:37:7C:99:88:02:39:CE:C1:43:F2:FC:A9:B5:FD
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS63025.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.212.31.0/24
                  67.215.240.0/24
                  198.23.185.0/24
                  209.200.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:c5:8c:fd:e8:64:78:69:f7:8f:ba:ba:40:e2:e7:e4:40:8c:
         d3:ad:71:1e:61:9b:9d:a3:bf:b1:d9:6c:42:c3:e7:57:26:a9:
         3c:98:ca:da:73:4a:fe:c0:74:46:88:90:6c:da:38:ae:c3:6f:
         67:79:31:b0:74:98:a8:5f:a4:a0:e9:cc:33:18:54:c4:55:b9:
         ce:8a:e2:39:02:7c:c7:c5:7c:45:e1:40:4b:c8:e0:89:dc:13:
         64:6a:ec:3e:1b:dc:1f:08:aa:e3:c8:1b:c8:7f:d9:0b:5d:54:
         c5:5a:5b:83:2c:3a:54:c3:86:81:6b:b0:c1:3e:b7:40:ea:e9:
         92:b5:d1:54:2f:61:24:0a:f4:ab:88:6f:21:94:68:b7:9f:d5:
         cb:fc:e5:fd:ff:be:72:b3:71:7a:ec:d5:97:16:8b:bf:c5:3c:
         2b:d1:ef:cc:a8:ea:fc:59:ed:34:5a:c8:b6:3c:bc:80:9b:8f:
         ed:6a:3d:89:9b:27:d8:f1:74:f1:7b:49:b2:53:1d:96:4c:4a:
         71:97:f7:47:67:82:06:75:50:bf:d5:14:ee:77:7c:27:9a:d8:
         0e:79:11:de:91:4a:80:63:16:40:3f:f9:01:c1:e1:03:06:f1:
         a6:53:01:68:cf:51:18:a4:1c:33:c8:d8:f9:4d:71:61:d0:04:
         50:e5:7a:0b
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIUf70BUFmTRU+vbOSwRN7KsS1RDpMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjYwNTIxMTk0MDEwWhcNMjcwNTIwMTk0NTEw
WjAzMTEwLwYDVQQDEyhGQjM4RUZCRDBBQzEzNzdDOTk4ODAyMzlDRUMxNDNGMkZD
QTlCNUZEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjpjQCrLeIFm
n7AhMH1OxqREHzkhePjZONho9xKevSBzNa9gWoYNCLGBysz59M9Zkett8IisoR5I
tq3iKHr6Ft/GPgUYjtrveKQaP9dR8xxTG6cCXJSgQjbhmcqWuYFornHLiOr0OeHb
D5/BILYJy+zKTRvTsYsplqmZJjVTaYIcAJlesc+Jo+4P6q+W1gZGPHgeCQIgeFK4
1m1vo8WGIbTiUAONjW3J9oDY65V/f61YtzskbKH/HKNNxyM+xFLtxXbsYubNQfeU
EGfwvtdxe03c90XMLXnDHOCxd0CQ9qkJxVkwCTQmYO+MdKJVQevoovTsA338FDBy
w1/K7wQGTQIDAQABo4ICkDCCAowwHQYDVR0OBBYEFPs4770KwTd8mYgCOc7BQ/L8
qbX9MB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzYzMDI1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEG
CCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAQtQfAwQAQ9fwAwQAxhe5AwQA0cjt
MA0GCSqGSIb3DQEBCwUAA4IBAQDExYz96GR4afePurpA4ufkQIzTrXEeYZudo7+x
2WxCw+dXJqk8mMrac0r+wHRGiJBs2jiuw29neTGwdJioX6Sg6cwzGFTEVbnOiuI5
AnzHxXxF4UBLyOCJ3BNkauw+G9wfCKrjyBvIf9kLXVTFWluDLDpUw4aBa7DBPrdA
6umStdFUL2EkCvSriG8hlGi3n9XL/OX9/75ys3F67NWXFou/xTwr0e/MqOr8We00
Wsi2PLyAm4/taj2JmyfY8XTxe0myUx2WTEpxl/dHZ4IGdVC/1RTud3wnmtgOeRHe
kUqAYxZAP/kBweEDBvGmUwFoz1EYpBwzyNj5TXFh0ARQ5XoL
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:12:20 2026 by rpki-client