Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/a7a0a537-a979-37b0-8aec-a06c4fe75751.roa
File:                     a7a0a537-a979-37b0-8aec-a06c4fe75751.roa (raw, json)
Hash identifier:          qsscY8pt4amgR1dPwnQfIkuo/Yv8gHuzzg8uZwFAhtc=
Subject key identifier:   A7:17:DE:7D:06:8B:BE:9A:99:DF:22:EC:C9:D0:B7:93:A8:6A:C6:2E
Certificate issuer:       /CN=80e43277-4490-4cc9-99ec-5726af08c8ab
Certificate serial:       010D0C9F4328584D7F9A847635673A4153DC3D20
Authority key identifier: F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/a7a0a537-a979-37b0-8aec-a06c4fe75751.roa
Signing time:             Tue 14 Apr 2026 01:00:24 +0000
ROA not before:           Tue 14 Apr 2026 01:00:24 +0000
ROA not after:            Mon 13 Jul 2026 01:00:24 +0000
asID:                     23520
IP address blocks:        63.245.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7f:9a:84:76:35:67:3a:41:53:dc:3d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e43277-4490-4cc9-99ec-5726af08c8ab
        Validity
            Not Before: Apr 14 01:00:24 2026 GMT
            Not After : Jul 13 01:00:24 2026 GMT
        Subject: CN=03e7ab05-7314-4ad7-b51c-d34b40e5ae1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c4:69:4c:50:fb:a0:37:27:8a:9c:8c:27:9e:
                    56:a4:da:97:59:80:8f:cf:10:a5:16:bf:65:4f:82:
                    b9:b8:ff:af:08:d7:56:ca:bb:48:a0:14:d6:05:0c:
                    87:ed:b6:f7:04:cc:ce:a1:fa:50:7e:91:b8:7c:7d:
                    64:4c:a0:57:af:d1:ff:75:7f:36:50:04:7d:c7:c2:
                    90:4e:10:f7:15:88:76:a1:5a:a7:2e:d2:ba:cf:ba:
                    5c:50:c9:28:13:0c:e2:91:69:8f:26:0c:bc:d0:d9:
                    73:f7:84:01:ed:eb:6d:f6:5f:ed:7f:bd:87:2e:b2:
                    f3:85:aa:82:7c:0e:05:0b:c9:76:0b:45:69:ce:60:
                    ca:09:a4:f1:a0:ff:bc:21:f6:20:7a:ee:93:03:df:
                    9a:65:9e:0f:76:f0:e1:34:5f:2a:ac:fe:45:4a:a4:
                    6b:18:c1:58:72:43:9c:b9:33:21:8e:ab:56:22:9d:
                    2e:2c:3c:86:a8:d4:79:71:21:93:53:71:7e:6f:de:
                    00:c9:ac:a1:45:c7:c4:bc:0b:ce:26:44:ae:69:fa:
                    84:b2:ea:0a:c6:ac:d5:39:d1:b7:31:df:4c:3d:ff:
                    cc:65:f6:a3:4a:73:1b:d6:f3:bd:4c:96:52:37:27:
                    bc:5f:6e:ca:c9:ee:32:ab:a8:f5:d3:91:1a:b7:e9:
                    e9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:17:DE:7D:06:8B:BE:9A:99:DF:22:EC:C9:D0:B7:93:A8:6A:C6:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/a7a0a537-a979-37b0-8aec-a06c4fe75751.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl

            X509v3 Authority Key Identifier:
                keyid:F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.245.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:ec:ad:fa:98:ed:0e:0d:35:9e:c4:12:48:f7:c4:5e:49:18:
         7b:8f:5e:d4:76:88:10:4a:12:ce:da:a9:49:e0:f5:d5:53:bf:
         c3:77:62:ac:14:d8:9c:dc:71:a2:32:fb:e1:ec:b0:0d:5e:93:
         81:ea:44:e9:7c:df:19:39:02:eb:19:ac:9b:fb:75:f7:ee:44:
         c9:17:68:57:d9:b1:04:6c:ea:81:39:3b:4a:0c:48:09:c0:96:
         8b:e9:36:1a:37:8c:5e:de:a4:ec:4b:22:5f:20:9d:b7:42:27:
         53:19:58:65:4b:21:cb:29:33:15:35:36:84:08:e9:97:77:41:
         11:e6:5e:01:94:84:87:78:91:bb:5d:a0:cd:1b:c0:bc:16:75:
         52:9b:65:ab:80:ba:9c:34:7e:5d:7f:b6:7e:03:88:37:10:da:
         7e:14:76:fb:46:ad:3e:8e:35:93:eb:7c:8c:4b:61:32:6f:9c:
         7a:e0:ff:bd:1d:a1:73:21:d3:3d:88:78:60:dc:b1:eb:82:7c:
         10:70:7c:ae:dc:15:6a:14:ed:38:1e:df:37:e9:4e:c9:c7:95:
         6b:d9:44:9c:d2:52:3f:84:05:5c:98:b8:8c:bb:f5:d9:0e:c0:
         4e:09:41:e8:d0:41:7e:4d:ac:09:dd:26:97:07:2a:d4:67:5d:
         4a:1a:ee:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/moR2NWc6QVPcPSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODBlNDMyNzctNDQ5MC00Y2M5LTk5ZWMtNTcyNmFmMDhj
OGFiMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk
MDNlN2FiMDUtNzMxNC00YWQ3LWI1MWMtZDM0YjQwZTVhZTFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5cRpTFD7oDcnipyMJ55WpNqXWYCPzxClFr9l
T4K5uP+vCNdWyrtIoBTWBQyH7bb3BMzOofpQfpG4fH1kTKBXr9H/dX82UAR9x8KQ
ThD3FYh2oVqnLtK6z7pcUMkoEwzikWmPJgy80Nlz94QB7ett9l/tf72HLrLzhaqC
fA4FC8l2C0VpzmDKCaTxoP+8IfYgeu6TA9+aZZ4PdvDhNF8qrP5FSqRrGMFYckOc
uTMhjqtWIp0uLDyGqNR5cSGTU3F+b94AyayhRcfEvAvOJkSuafqEsuoKxqzVOdG3
Md9MPf/MZfajSnMb1vO9TJZSNye8X27Kye4yq6j105Eat+npZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKcX3n0Gi76amd8i7MnQt5OoasYuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MGU0
MzI3Ny00NDkwLTRjYzktOTllYy01NzI2YWYwOGM4YWIvYTdhMGE1MzctYTk3OS0z
N2IwLThhZWMtYTA2YzRmZTc1NzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODBlNDMyNzctNDQ5MC00Y2M5LTk5
ZWMtNTcyNmFmMDhjOGFiLzgwZTQzMjc3LTQ0OTAtNGNjOS05OWVjLTU3MjZhZjA4
YzhhYi5jcmwwHwYDVR0jBBgwFoAU9W5QKXAQrkNBl+H/jCjkkjkd3fAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84MGU0MzI3Ny00NDkwLTRjYzktOTllYy01NzI2
YWYwOGM4YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP/VIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFTsrfqY7Q4NNZ7EEkj3xF5JGHuPXtR2iBBKEs7aqUng9dVTv8N3YqwU
2JzccaIy++HssA1ek4HqROl83xk5AusZrJv7dffuRMkXaFfZsQRs6oE5O0oMSAnA
lovpNho3jF7epOxLIl8gnbdCJ1MZWGVLIcspMxU1NoQI6Zd3QRHmXgGUhId4kbtd
oM0bwLwWdVKbZauAupw0fl1/tn4DiDcQ2n4UdvtGrT6ONZPrfIxLYTJvnHrg/70d
oXMh0z2IeGDcseuCfBBwfK7cFWoU7Tge3zfpTsnHlWvZRJzSUj+EBVyYuIy79dkO
wE4JQejQQX5NrAndJpcHKtRnXUoa7oo=
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:23:09 2026 by rpki-client