Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/544ab577-ff4b-3f41-9cc2-4eda1aa77f4d.roa
File:                     544ab577-ff4b-3f41-9cc2-4eda1aa77f4d.roa (raw, json)
Hash identifier:          AKw1cgD5repNutHWEJEhZu+ZOtD7qH8P6WC1qb1sncc=
Subject key identifier:   56:0E:D5:A0:E8:CB:64:76:54:99:BA:DC:91:4B:B7:28:43:11:53:F9
Certificate issuer:       /CN=063abcef-47ff-4267-9198-eb628aba7842
Certificate serial:       010D0C9F4328584D06614565E684FE11896DFBC0
Authority key identifier: 2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/544ab577-ff4b-3f41-9cc2-4eda1aa77f4d.roa
Signing time:             Sun 01 Mar 2026 14:52:25 +0000
ROA not before:           Sun 01 Mar 2026 14:52:25 +0000
ROA not after:            Sat 30 May 2026 13:52:25 +0000
asID:                     397976
IP address blocks:        163.245.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:06:61:45:65:e6:84:fe:11:89:6d:fb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=063abcef-47ff-4267-9198-eb628aba7842
        Validity
            Not Before: Mar  1 14:52:25 2026 GMT
            Not After : May 30 13:52:25 2026 GMT
        Subject: CN=3069e9d8-f367-4fb7-97d0-d145ac690fea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d2:7e:09:11:98:d4:d7:b4:38:0f:31:36:ff:
                    68:85:d3:e9:1e:06:41:26:4c:13:62:9e:52:e6:aa:
                    6c:09:4a:a9:36:b4:56:ab:e1:b1:6b:39:c7:95:0f:
                    c8:de:f3:36:03:df:fc:23:71:04:6c:56:32:78:14:
                    a8:87:bc:ee:90:5f:31:f0:dd:8a:35:9b:5e:8e:9e:
                    6d:e1:6b:2f:71:69:d9:6f:dc:07:12:4f:0c:97:83:
                    76:98:06:eb:13:7c:ed:1c:98:dd:05:e5:90:ea:71:
                    ff:de:a1:89:31:3e:41:ea:4a:3e:8d:dc:dd:69:29:
                    bd:d4:f2:e1:54:37:ba:2a:ac:b8:9e:bd:d3:9c:4a:
                    45:c1:f8:1e:e3:81:9e:8e:7b:b3:83:5f:28:d8:24:
                    11:09:83:85:13:a8:5e:1c:78:f8:47:f8:00:5e:70:
                    69:bf:7b:be:b7:c4:0e:3c:d2:f1:ca:4e:f9:3e:d0:
                    fa:3f:2e:2d:8e:9d:9c:8e:95:94:2e:f2:54:ea:9c:
                    ba:a8:e5:49:f5:bf:87:d4:07:39:f5:ed:57:51:75:
                    de:07:dd:ee:79:d4:11:e5:0d:35:b4:c1:15:71:1d:
                    7d:1b:a3:fa:89:e8:05:26:00:c9:74:2e:6f:d5:15:
                    da:08:ef:fb:e3:72:ee:0a:a3:da:b9:e8:42:c6:73:
                    50:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:0E:D5:A0:E8:CB:64:76:54:99:BA:DC:91:4B:B7:28:43:11:53:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/544ab577-ff4b-3f41-9cc2-4eda1aa77f4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl

            X509v3 Authority Key Identifier:
                keyid:2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.245.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:13:7f:4c:bf:c0:0c:15:2f:43:c3:7b:90:fa:b1:fb:0a:cb:
         11:ae:c1:10:e4:ed:a1:83:d5:4b:d8:cc:39:0f:76:ae:a9:46:
         c6:61:a4:00:3b:84:68:99:82:72:b4:d9:79:d6:2c:10:68:3a:
         53:87:72:4c:49:8a:72:0f:23:80:46:9a:ae:ed:33:a4:f1:52:
         2f:53:af:bf:a9:2e:b0:65:39:cd:1e:c2:fd:b7:27:47:24:45:
         21:6d:b4:1f:10:74:af:30:ad:92:1d:66:93:4b:5f:99:5a:90:
         5d:04:dc:7a:bc:2e:3b:c4:b5:ce:43:6c:73:5f:e6:db:59:62:
         37:36:d4:7c:c5:34:3a:7c:3c:0f:42:a1:be:a1:58:d6:aa:20:
         ad:b1:9e:f2:80:c6:8e:d7:cd:7a:54:4c:95:7e:79:10:24:27:
         24:7e:1f:a2:9c:40:f7:90:c2:dd:e6:97:13:56:6b:8c:48:b6:
         70:5a:6b:5d:15:7c:5e:54:e1:26:8a:14:2c:9c:dc:fb:04:9e:
         94:f8:34:8c:68:c8:0c:da:7c:77:21:fb:5f:5d:8e:9e:46:8e:
         54:64:d8:e9:9f:38:4d:dd:ba:a3:12:81:de:6c:74:0c:75:a9:
         df:55:a7:2f:5b:93:0e:a6:1f:36:7d:05:80:b0:01:01:46:16:
         88:18:ee:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:52:08 2026 by rpki-client