Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/83e6a022-36ec-38c3-8f95-349b73ff935a.roa
File:                     83e6a022-36ec-38c3-8f95-349b73ff935a.roa (raw, json)
Hash identifier:          nb3p+jv6ljRfvUBgIgRT6pUe9u4nX4BXdjRrvDT5nZg=
Subject key identifier:   CC:2A:A0:48:BD:FB:5C:72:37:E3:1A:D4:44:39:8B:94:4F:DD:F2:07
Certificate issuer:       /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6
Certificate serial:       010D0C9F4328584D6C0FAC22C697420F31D90C00
Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/83e6a022-36ec-38c3-8f95-349b73ff935a.roa
Signing time:             Tue 07 Apr 2026 01:00:23 +0000
ROA not before:           Tue 07 Apr 2026 01:00:23 +0000
ROA not after:            Mon 06 Jul 2026 01:00:23 +0000
asID:                     14618
IP address blocks:        155.63.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6c:0f:ac:22:c6:97:42:0f:31:d9:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6
        Validity
            Not Before: Apr  7 01:00:23 2026 GMT
            Not After : Jul  6 01:00:23 2026 GMT
        Subject: CN=42788fbc-502b-41b9-baa0-1a39142284dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:95:53:a5:f5:6c:fd:5a:7b:25:6f:3c:30:60:
                    af:cd:b4:9e:67:be:b9:04:b3:b4:c4:c0:29:f5:8b:
                    87:de:91:b8:8f:8b:e4:9b:c7:48:5d:f1:37:28:9a:
                    4d:05:b1:b0:7b:18:e7:cb:76:92:7e:d4:8c:35:70:
                    b7:9c:f0:3b:4c:d3:64:1b:89:e7:ac:9b:e6:d2:fa:
                    c5:80:0f:52:b6:b0:66:03:ae:85:09:09:19:68:0a:
                    4c:1f:09:7e:5d:1c:93:0d:5b:38:09:c0:79:ed:8a:
                    a6:50:eb:10:47:a0:4d:62:61:4a:ff:8f:3b:65:19:
                    28:eb:c5:18:5d:27:fe:14:8d:6b:3a:30:6f:5b:b3:
                    80:1b:f6:f0:be:92:3e:a8:44:cb:64:01:fa:2a:6a:
                    3b:14:f3:9f:da:f4:cf:39:6b:ea:2a:e6:42:9c:3f:
                    89:54:90:34:63:cd:78:d9:31:01:1d:a6:4a:be:96:
                    0e:2b:89:74:2e:f9:31:0d:19:d4:99:b1:62:9b:13:
                    e5:69:df:70:08:03:a6:11:80:3a:9b:dc:7f:eb:51:
                    e2:3f:e7:26:20:e1:a2:81:a0:b0:83:37:6f:3c:09:
                    6a:e8:4b:cf:44:87:28:97:12:7b:a0:81:45:b3:0d:
                    40:c8:de:3d:7e:26:1a:88:5e:47:22:31:e4:b4:a4:
                    22:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:2A:A0:48:BD:FB:5C:72:37:E3:1A:D4:44:39:8B:94:4F:DD:F2:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/83e6a022-36ec-38c3-8f95-349b73ff935a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl

            X509v3 Authority Key Identifier:
                keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.63.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:50:58:79:cd:90:12:a9:2e:7e:c0:ca:cb:60:8c:93:3d:f6:
         97:6a:a3:81:34:4d:81:3a:01:bb:1a:88:a5:6e:89:6c:7a:fc:
         f5:72:67:a7:e2:39:44:bd:3a:f4:81:82:bd:e7:33:9b:3c:b7:
         b8:aa:c7:da:89:21:42:f5:51:3b:86:06:55:63:3a:75:e3:7e:
         b3:0e:85:55:ed:58:0f:35:37:31:6f:13:58:10:c7:80:a6:b6:
         46:ca:e8:9f:47:77:b1:bb:ce:7b:35:00:3f:37:14:a1:dc:02:
         ab:2c:ac:53:33:a4:a6:30:84:7b:dd:ed:0d:6f:07:cc:74:d1:
         f1:e7:01:92:fe:04:31:77:c4:17:90:07:7e:6c:6c:65:04:d3:
         0e:dc:41:cd:b3:77:2d:80:2d:9d:65:34:8a:22:c9:f3:e0:49:
         5c:63:a8:96:d6:c9:10:88:88:c6:35:28:71:69:d6:4a:27:c7:
         23:a7:33:08:9a:0b:3d:64:af:d8:89:66:9f:0e:42:7d:a0:45:
         e9:13:5b:67:06:39:a4:07:32:35:ec:50:00:76:97:3b:2f:85:
         de:8b:d7:34:2e:cf:f8:3f:53:8d:5a:cd:f5:88:93:32:01:bc:
         75:40:f1:7e:2e:03:39:e4:cb:94:5d:31:96:50:6d:8b:c4:4b:
         4d:50:e0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:09:41 2026 by rpki-client