Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/04594e51-5757-375b-a0eb-68a31b2dd5be.roa
File:                     04594e51-5757-375b-a0eb-68a31b2dd5be.roa (raw, json)
Hash identifier:          ESsQPZGSRvZmyKrW2OVbtcYsfkegdtmso1xZESDKBjs=
Subject key identifier:   87:02:70:E2:86:F2:13:34:CC:C3:51:82:30:F0:ED:71:F3:9D:86:55
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F2D87C8BD0B44794AFCA09BC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/04594e51-5757-375b-a0eb-68a31b2dd5be.roa
Signing time:             Tue 15 Sep 2026 01:00:12 +0000
ROA not before:           Tue 15 Sep 2026 01:00:12 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        63.46.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:87:c8:bd:0b:44:79:4a:fc:a0:9b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 15 01:00:12 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=5a28a6f1-5eb9-4308-895b-3f558fd031e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:76:03:4e:2e:21:b3:ab:fa:0c:0c:c8:77:66:
                    b4:6c:c5:73:ae:b8:6c:e1:5c:1b:8c:74:4f:e8:c7:
                    5f:7c:fa:c7:c1:96:9e:55:5f:96:26:7d:7d:15:19:
                    09:2e:b2:c2:43:a0:45:ec:e8:21:ad:45:13:e6:53:
                    7d:4f:2a:2a:0c:4c:3a:7c:a3:a1:bf:2e:b6:54:4c:
                    a0:53:57:93:a3:ba:0c:40:82:1a:5e:ef:db:1c:99:
                    cc:a4:a3:8a:bd:4c:fa:c1:90:0a:fa:42:0c:53:b7:
                    9c:31:3f:1a:cb:75:38:f3:bf:d9:b0:00:ca:d8:c5:
                    a4:b1:95:9f:81:e7:4b:44:21:04:23:e8:2d:4d:c2:
                    9f:22:b4:79:69:72:55:f4:5f:f8:7e:44:3b:9f:4d:
                    4e:eb:aa:32:f5:c2:ab:a1:a5:ba:68:43:aa:73:97:
                    d3:5d:98:e3:a9:45:fc:59:89:d6:c5:ab:cd:46:a3:
                    ab:95:41:89:71:d6:6e:be:8b:ee:de:e4:28:02:e2:
                    0e:a4:1a:70:b0:f9:82:f6:3f:3e:1c:94:4b:35:29:
                    e5:6c:52:c5:2d:dc:e4:aa:60:80:25:5e:8e:47:37:
                    64:fb:e8:60:68:e2:d8:cc:95:f2:4a:ee:41:39:e7:
                    98:f5:cc:e4:91:69:9f:db:06:c4:70:ae:14:9d:b9:
                    f8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:02:70:E2:86:F2:13:34:CC:C3:51:82:30:F0:ED:71:F3:9D:86:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/04594e51-5757-375b-a0eb-68a31b2dd5be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.46.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:06:2c:ed:f7:bc:7d:46:71:2f:5b:e5:c9:1f:59:9a:56:7d:
         54:00:42:cd:28:d6:cc:3b:ab:55:50:6b:f1:58:01:73:7b:17:
         ab:1e:63:bc:99:66:f1:88:a8:fe:57:cf:59:30:86:18:92:ef:
         9c:56:31:26:bd:82:8e:e5:e3:43:ad:0c:ce:41:ad:ac:87:6c:
         fe:5d:56:a7:2f:04:c6:f6:49:be:fa:99:d3:48:e0:9a:14:7b:
         f8:9c:81:3d:78:79:e0:62:2f:2a:d1:5d:23:e5:95:82:d0:3b:
         51:77:df:11:91:ed:15:31:2b:b4:4c:24:19:7f:59:7f:71:9e:
         9f:1c:6b:a2:84:93:29:51:07:85:ca:d6:4b:2c:88:95:da:fb:
         32:50:0e:db:75:86:2c:09:2c:51:ea:b1:c0:e1:03:c8:37:2e:
         e3:95:91:b8:df:67:76:77:6e:11:f8:4c:0c:b6:cf:3f:7d:f5:
         55:a0:da:96:0c:10:1c:1f:62:7e:f9:4e:96:19:9d:fc:80:1c:
         52:e0:43:32:f0:5f:e9:4c:89:7a:25:38:e7:2a:fe:dd:5f:36:
         a4:b2:76:08:48:e4:b6:81:0e:71:a3:f0:7a:ad:e3:58:fd:7f:
         e4:6d:43:82:98:89:c7:5f:c2:9d:ac:e6:54:11:0f:f1:33:c8:
         4b:f6:6b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:30:45 2026 by rpki-client