Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/631455e7-4f9a-3411-b724-56b44cd3c3be.roa
File:                     631455e7-4f9a-3411-b724-56b44cd3c3be.roa (raw, json)
Hash identifier:          hB0D6vHVu3N2ep9cuREEQjEIpl2raA4d0UBB8gwqEns=
Subject key identifier:   8A:3B:3F:0E:FF:C3:64:D7:00:3A:91:24:A6:D5:56:D5:8D:14:FF:BD
Certificate issuer:       /CN=80e43277-4490-4cc9-99ec-5726af08c8ab
Certificate serial:       010D0C9F4328584F5A32DD211A95D83B41C0B800
Authority key identifier: F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/631455e7-4f9a-3411-b724-56b44cd3c3be.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     23520
IP address blocks:        63.245.72.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:32:dd:21:1a:95:d8:3b:41:c0:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e43277-4490-4cc9-99ec-5726af08c8ab
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=7eabbfa0-cf66-49a3-98c4-579ef4e459be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2a:93:be:a1:61:16:fd:48:9b:5e:ad:ff:a7:
                    57:02:f3:f1:47:b9:be:cf:e0:ef:f7:8c:54:02:94:
                    9a:0e:5d:84:6f:e6:08:20:13:ba:03:b8:cb:1a:bd:
                    a4:f0:f5:8b:20:8a:45:c0:a9:df:c8:7a:fc:34:62:
                    74:e9:61:d8:4f:4a:af:63:99:23:a5:d8:57:e4:66:
                    dc:2a:04:40:5b:6f:f0:18:67:8d:1e:e8:e3:49:1c:
                    dd:34:2b:fe:a4:6c:8b:75:60:17:88:ea:ce:26:0e:
                    b1:e9:3e:a2:5c:52:ae:46:d7:0f:e5:1e:4c:76:2e:
                    94:c7:20:93:10:3a:0f:ac:ca:ea:3f:4d:86:74:24:
                    ee:83:25:f8:06:f9:11:05:3a:56:0d:90:7f:80:96:
                    c6:87:2b:de:8c:5a:f3:b2:c1:15:18:2e:7c:71:e4:
                    52:2c:df:41:6d:33:82:35:f0:26:48:7a:bd:72:a3:
                    27:12:80:4d:ca:00:7b:ff:c7:40:2a:dc:4a:42:cc:
                    77:9d:fe:91:51:fc:e6:8c:63:05:28:f8:74:47:64:
                    64:8e:53:bc:ef:72:6e:2b:5b:00:e2:da:8b:31:3f:
                    d5:c7:7a:0a:37:81:e2:05:a3:be:6f:ee:78:d7:95:
                    f2:29:b8:66:5f:2c:fa:1e:97:fa:db:a8:9f:67:bd:
                    8e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:3B:3F:0E:FF:C3:64:D7:00:3A:91:24:A6:D5:56:D5:8D:14:FF:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/631455e7-4f9a-3411-b724-56b44cd3c3be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl

            X509v3 Authority Key Identifier:
                keyid:F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.245.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:49:30:6e:3c:63:42:22:cb:be:51:38:6c:7f:0c:d6:58:fc:
         c0:81:4b:c2:23:11:b8:a7:54:df:76:a6:4b:57:1b:bb:ae:c1:
         25:ec:34:f4:d4:d5:bc:97:be:1d:ad:45:36:21:e9:a5:dc:4e:
         5a:be:7d:54:cd:16:f8:f2:26:53:0e:17:55:0c:bb:0a:f4:b4:
         f7:39:b9:e4:69:07:71:17:3c:90:04:28:3d:d2:e7:e0:9b:31:
         8d:80:21:a2:de:00:59:ed:ed:80:9b:a5:98:5b:cc:4b:e2:60:
         58:0d:3a:69:c7:d6:8a:c4:0f:ae:bd:21:80:e0:35:fd:ab:52:
         c8:00:b4:e7:a1:fd:c6:0c:c1:e3:5b:9a:95:1e:e7:b0:24:74:
         ae:09:b6:35:8e:cd:ef:1b:20:33:9d:33:b1:44:3b:2a:ee:46:
         09:cc:e3:fd:59:6d:b8:e0:37:25:47:b4:98:a4:99:02:fb:b3:
         c4:fb:61:fe:78:73:09:65:b7:d7:6f:36:3b:18:13:5b:81:3c:
         a0:1e:0b:85:91:8d:3a:70:35:47:fa:cb:00:04:4d:b9:db:f9:
         25:62:0f:6c:26:30:32:2e:e8:f1:db:3b:aa:ae:ea:17:22:1b:
         90:57:24:87:35:73:00:14:1f:6f:76:35:be:a9:ef:c1:6c:76:
         bc:1f:8c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:58:42 2026 by rpki-client