Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/699adbfe-eb3c-3981-a243-cff5b1b17b33.roa
File:                     699adbfe-eb3c-3981-a243-cff5b1b17b33.roa (raw, json)
Hash identifier:          zfkmiMJ6UiU6saY/RCKZJYMYZ+lyZk2iyXxbP1SSu/o=
Subject key identifier:   6A:10:C2:CD:91:09:70:7A:3A:48:F3:86:5B:69:DF:29:97:66:20:7C
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F4328584CBAE739BB4C0B954592577440
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/699adbfe-eb3c-3981-a243-cff5b1b17b33.roa
Signing time:             Mon 02 Feb 2026 14:00:40 +0000
ROA not before:           Mon 02 Feb 2026 14:00:40 +0000
ROA not after:            Sun 03 May 2026 13:00:40 +0000
asID:                     23498
IP address blocks:        63.141.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ba:e7:39:bb:4c:0b:95:45:92:57:74:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Feb  2 14:00:40 2026 GMT
            Not After : May  3 13:00:40 2026 GMT
        Subject: CN=709d8e0e-1415-4fe0-b1c7-2b7a5e7267af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7f:2f:56:73:01:80:73:e0:af:03:2d:19:16:
                    e0:cd:c7:e6:fc:c4:31:bb:ca:bf:b4:24:d5:30:db:
                    c0:a5:ea:e0:4d:52:b1:f2:1a:34:bd:13:35:b9:b2:
                    c4:fe:f6:78:fd:16:49:6b:73:6c:01:5c:e0:af:05:
                    c4:0e:4f:80:44:d0:9e:8e:5b:99:89:89:59:ea:77:
                    ee:55:9b:11:d9:41:5b:99:84:2b:76:5e:c9:06:4a:
                    02:a4:85:30:b2:37:e1:ed:a8:0f:98:e4:dd:fd:90:
                    5e:fc:f0:01:70:a8:ee:45:70:5e:a1:70:09:90:ea:
                    77:4f:3e:c2:5e:32:37:14:bc:5e:dd:34:ea:68:32:
                    38:df:e6:53:b3:aa:e4:a4:84:96:fe:01:f9:93:3f:
                    93:47:2d:28:b8:71:b4:9f:de:11:de:ec:3d:da:d9:
                    ae:b9:ae:c5:99:e4:95:b0:56:49:df:80:bf:35:3a:
                    f9:e5:98:19:fa:6d:53:8a:a8:68:8c:82:06:1a:79:
                    31:4f:4c:09:fe:eb:69:aa:0e:1f:0d:85:8f:3e:5b:
                    9a:22:01:8f:48:f7:c5:32:ff:1a:bf:83:ee:15:4e:
                    40:4e:83:e2:99:77:5e:db:2d:b4:bf:90:73:cc:9f:
                    3f:ce:b3:52:28:a4:50:b4:ee:81:60:7d:3e:fd:e3:
                    b8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:10:C2:CD:91:09:70:7A:3A:48:F3:86:5B:69:DF:29:97:66:20:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/699adbfe-eb3c-3981-a243-cff5b1b17b33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.141.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:eb:80:c4:14:04:35:eb:1c:b3:71:bc:06:ea:d1:bf:0a:59:
         1b:60:67:19:53:c3:f8:af:9e:13:6b:68:30:93:74:7c:86:ab:
         79:2f:a8:23:46:5a:bb:ca:01:df:93:43:b3:40:2d:bb:7a:31:
         f4:06:fd:ce:52:71:5d:30:cb:db:71:e4:a2:69:17:64:f5:b3:
         2e:13:fb:03:7e:99:3e:e9:eb:8a:15:88:70:53:2e:cc:26:20:
         29:8a:61:a2:60:ab:32:75:3e:d6:aa:4b:6e:a4:07:cd:77:cc:
         a1:23:16:e2:0d:ad:16:61:c8:bc:8f:72:1d:26:f2:aa:ad:5c:
         89:7a:53:66:3e:fc:b6:b3:bd:46:eb:32:ad:f5:92:20:51:b6:
         78:7a:5e:e6:cb:d3:2b:28:8b:1f:24:d2:f7:0a:5d:b2:32:9e:
         a2:6d:65:a2:d3:40:71:f7:a4:c3:d9:b7:e4:37:1a:1d:4e:bc:
         35:6d:02:14:35:88:d8:a7:28:30:bc:64:c2:0f:b7:26:b1:80:
         74:4b:91:cd:3a:f4:2a:d5:a2:cd:78:ae:24:3d:da:47:b6:79:
         10:d1:48:a3:79:bb:56:5c:5a:92:6a:19:f0:8a:4f:64:cc:6a:
         d5:dd:7c:55:d4:4c:61:ae:c5:9e:e3:e4:07:25:df:c1:0b:85:
         a6:9f:ca:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:50:31 2026 by rpki-client