Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/18099cd5-b492-3bdf-b942-95677c57149a.roa
File:                     18099cd5-b492-3bdf-b942-95677c57149a.roa (raw, json)
Hash identifier:          dCmThsjA5uRx6HfjpqPi/RC+47nmxcC3or3HFYfTGVk=
Subject key identifier:   97:59:C4:BA:45:9A:44:1D:83:45:4E:DD:0B:19:34:A8:56:C3:7C:E3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E15E4A0093B0BCD6C72DB5620
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/18099cd5-b492-3bdf-b942-95677c57149a.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     25896
IP address blocks:        63.119.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:a0:09:3b:0b:cd:6c:72:db:56:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=2beb3f05-1a82-4bf1-b429-fa6ef6440a31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d9:ab:d7:d7:72:94:fd:49:3b:01:98:98:16:
                    0a:4d:86:f0:94:59:06:e8:b8:ec:00:bf:6d:98:d1:
                    a6:b0:64:97:77:aa:bb:41:05:77:a1:5e:d2:0a:bc:
                    78:50:1e:e0:36:ae:ae:6d:23:18:59:76:1e:1f:2a:
                    d2:fc:c4:9f:1e:e2:d3:b8:e7:a3:02:d7:52:fc:7f:
                    f0:68:b0:5b:11:2a:78:05:b9:9f:b7:cb:23:92:74:
                    fe:3b:79:53:0f:c0:db:31:e1:1a:a4:6d:22:0a:e0:
                    29:4f:5f:a5:e2:2c:82:39:70:0f:ba:bd:a6:8d:ac:
                    97:4b:73:4b:98:c9:43:3c:c4:56:77:bf:02:08:8f:
                    36:ae:06:59:e6:3f:5e:40:22:aa:aa:47:1b:b6:ec:
                    9e:fe:81:f3:a0:c6:87:0b:e8:56:6f:7a:55:7e:50:
                    3d:2a:82:ca:2f:d8:2d:7c:40:45:89:fe:37:36:fa:
                    88:8d:30:8d:9c:10:53:1a:4e:fb:26:4e:dd:e8:80:
                    e2:7d:7e:7a:99:2d:2a:26:6a:72:5e:cf:df:89:6f:
                    49:ee:df:11:d8:b6:dc:c3:5a:92:b4:7c:03:64:fe:
                    e4:a6:e2:3d:4e:60:cd:5a:8b:83:ef:2e:8e:e2:3d:
                    dd:bb:d7:0c:ac:81:38:06:ce:2f:37:5a:97:b4:56:
                    43:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:59:C4:BA:45:9A:44:1D:83:45:4E:DD:0B:19:34:A8:56:C3:7C:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/18099cd5-b492-3bdf-b942-95677c57149a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.119.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:b7:07:2c:9e:13:4d:8b:d4:2e:79:2e:b5:02:59:83:5d:6d:
         0b:37:e5:27:0b:af:03:cd:02:88:36:5b:26:67:5b:6e:da:6f:
         a7:ff:6b:d5:b9:50:23:31:89:aa:17:bc:c4:4e:6f:dd:55:a4:
         46:88:63:ed:a3:e6:dd:3f:4e:20:df:4f:76:71:ea:67:b2:cc:
         1f:95:42:2a:59:d6:e6:1c:85:0b:aa:eb:f0:eb:3c:e5:2a:d9:
         29:28:03:4a:14:d6:4e:fd:e2:17:66:bc:9e:9e:43:27:37:0e:
         bc:e9:aa:df:9d:20:ad:e7:20:3e:c1:b4:90:35:34:cd:87:f6:
         01:fc:8a:4e:6f:c6:c3:c6:de:32:cd:da:1c:bf:da:e7:4a:d6:
         8d:a9:a8:a4:00:da:99:85:46:e9:69:3b:07:20:93:61:be:09:
         4f:5f:1f:b6:7f:5d:fb:fa:86:c4:68:0f:53:0e:7b:f3:2c:48:
         ff:e8:ec:63:8c:97:66:72:6b:fd:54:c9:82:b4:55:08:7c:f8:
         88:36:02:57:ac:5c:2d:cf:b5:a8:93:dd:1a:52:0c:3f:85:43:
         34:bc:c7:77:30:f2:fd:f8:48:69:c5:b3:70:4a:04:90:aa:5a:
         9c:35:c0:6f:01:2d:af:35:bf:d1:9f:a4:97:9c:47:04:48:58:
         97:73:ff:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:44:02 2026 by rpki-client