Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/507b5f6d-50c7-3bcf-a96c-c87cea38e59d.roa
File:                     507b5f6d-50c7-3bcf-a96c-c87cea38e59d.roa (raw, json)
Hash identifier:          G2w7LcPl1HXW/EhkcQUTgwE8F5Z6EQmn4kYutygUjak=
Subject key identifier:   E8:81:CD:6E:CF:C6:40:7C:42:BE:DD:87:10:B8:22:8A:26:F9:F6:E5
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D6DDD3EC57C5B32095F592610
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/507b5f6d-50c7-3bcf-a96c-c87cea38e59d.roa
Signing time:             Tue 07 Apr 2026 16:30:28 +0000
ROA not before:           Tue 07 Apr 2026 16:30:28 +0000
ROA not after:            Mon 06 Jul 2026 16:30:28 +0000
asID:                     0
IP address blocks:        63.162.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:dd:3e:c5:7c:5b:32:09:5f:59:26:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Apr  7 16:30:28 2026 GMT
            Not After : Jul  6 16:30:28 2026 GMT
        Subject: CN=5fc9efc6-53de-4f47-8a65-33e486c97f72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a2:92:8c:6a:40:b8:29:b1:01:21:d3:95:13:
                    1e:02:8b:7a:67:8c:fc:ad:b8:62:ea:63:d8:d0:66:
                    c4:88:e0:cc:5f:2e:9a:8b:9c:4a:49:bd:ad:1b:e8:
                    c2:6f:3f:fe:23:2a:fe:40:f4:5a:41:6a:17:e2:cf:
                    f8:68:55:40:24:c0:33:be:f4:d0:7b:c0:fb:bf:9b:
                    a1:c8:be:21:0c:f5:c2:ca:a7:5d:05:da:04:0d:23:
                    dd:6f:35:1b:54:2a:54:68:12:6f:4e:7d:cb:d8:40:
                    47:d1:ee:74:7a:61:0b:9d:12:2d:20:8b:4a:93:e8:
                    6d:43:11:97:49:aa:0f:79:cd:03:70:8e:a8:a4:ee:
                    39:9e:dc:40:5b:e0:72:81:06:cd:a3:6d:8b:5a:81:
                    78:79:c6:a5:8e:1d:32:ef:3a:0a:e5:a7:b1:bb:a2:
                    40:95:ee:ab:66:04:9d:ab:9c:03:00:40:48:4e:35:
                    38:e9:f4:1c:f6:db:8c:2b:cf:08:9b:97:d7:b7:21:
                    d3:08:62:4c:7c:cf:5a:d5:1e:a1:37:5c:04:13:09:
                    69:3a:c8:cf:11:f3:68:2d:79:ed:0e:6a:8b:b0:af:
                    9d:ca:dc:45:b4:33:28:79:32:da:af:94:cb:4d:e6:
                    c6:25:27:69:4f:48:bd:68:ce:fd:0c:03:0a:0e:9f:
                    30:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:81:CD:6E:CF:C6:40:7C:42:BE:DD:87:10:B8:22:8A:26:F9:F6:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/507b5f6d-50c7-3bcf-a96c-c87cea38e59d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.162.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:60:e7:3f:41:ee:88:b0:5c:f8:32:e6:8d:83:33:6b:72:b4:
         89:fa:63:41:d8:c5:23:43:96:b6:9f:44:70:fa:e9:31:e2:f4:
         05:bf:72:d7:9d:a1:64:54:ff:53:56:91:42:66:57:f1:de:c1:
         6c:48:70:89:0b:fc:ef:92:b5:11:1f:d8:35:a6:5f:5f:bc:e5:
         8c:da:e7:2c:cf:36:1e:90:65:aa:d5:83:45:28:0e:a9:b1:a4:
         90:04:5f:42:df:60:fa:df:e4:e9:01:f2:a6:1a:fc:32:cf:51:
         bc:9b:80:67:80:d3:02:26:ea:1f:4e:df:e3:8a:bb:d9:c2:ca:
         f3:81:8a:de:ab:18:5b:a1:b4:0d:cf:c1:53:45:cb:90:28:6f:
         22:18:44:f2:e8:97:94:8d:fe:a0:c1:e1:7b:1b:1a:38:76:5d:
         cd:56:c5:e8:a2:ec:9b:90:53:70:5e:b7:2b:90:f5:39:ed:5b:
         12:d3:96:34:e0:7f:ec:2d:52:1d:c0:b8:72:77:cf:2b:77:89:
         d3:7a:17:f9:17:b2:50:6c:1b:ee:5e:e1:a0:21:c4:4d:35:4e:
         ad:38:bc:c1:8a:89:79:13:e5:ee:55:ca:39:67:49:13:f2:f8:
         2c:9e:cc:54:6c:26:9d:f8:d7:85:00:5f:24:1d:db:f6:a5:46:
         9e:33:90:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 22:35:44 2026 by rpki-client