Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a5c0f087-7abc-37c1-b2c7-875764b403fd.roa
File:                     a5c0f087-7abc-37c1-b2c7-875764b403fd.roa (raw, json)
Hash identifier:          ECxXgDkxQSOMhdsV5FHA8dR8PbG2zyCb4HBVDEOgjsE=
Subject key identifier:   9B:1B:61:F2:CA:73:89:BA:CE:F0:09:A4:EE:85:CC:28:57:78:B7:7D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA793867DC26AB742684A0880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a5c0f087-7abc-37c1-b2c7-875764b403fd.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6984
IP address blocks:        63.23.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:86:7d:c2:6a:b7:42:68:4a:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=554f74cc-1503-4045-a216-2da2a1534779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b9:0a:a9:5b:c3:37:d0:e2:23:8a:db:57:02:
                    5b:b7:f7:4b:2c:76:4a:11:5e:7e:25:64:5b:c3:fc:
                    e1:33:58:2e:6f:d7:d2:de:11:01:37:89:84:f5:54:
                    68:74:23:29:fd:45:96:25:c5:c3:5d:7b:5b:b1:de:
                    de:ce:cc:ed:71:06:74:0a:cd:f8:69:1d:b8:41:66:
                    0a:fd:dc:f6:10:ce:79:1a:82:8b:2b:4f:3a:83:f3:
                    31:a4:b7:e0:5e:b7:67:51:f4:91:f6:ee:65:3d:28:
                    0f:35:b3:2a:c8:d5:24:18:6d:c9:8f:1c:6b:96:c1:
                    99:9d:c6:d6:54:88:c6:99:6c:75:b8:9f:de:29:ed:
                    ab:8d:6a:16:4f:40:ee:7f:bd:38:5e:00:28:eb:51:
                    32:15:27:de:1b:7d:84:2e:c9:9b:8d:4f:a8:e8:6c:
                    e2:eb:f8:43:d9:bc:56:13:a0:d4:fb:92:57:e0:0f:
                    26:8b:dc:bb:a4:12:ff:b1:b7:a9:0e:17:c2:e4:bf:
                    fc:06:30:da:0f:8e:37:99:09:4b:f3:9d:33:36:73:
                    68:33:d4:d1:3f:54:74:fc:2c:82:96:53:1a:20:1e:
                    15:ed:c6:04:00:c7:0b:13:0c:b5:ad:5a:36:9d:cc:
                    84:fe:dd:9d:92:ad:94:fd:c2:3a:97:a9:4f:23:67:
                    e5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:1B:61:F2:CA:73:89:BA:CE:F0:09:A4:EE:85:CC:28:57:78:B7:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a5c0f087-7abc-37c1-b2c7-875764b403fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.23.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:33:31:ba:3d:7f:ab:ba:c5:3e:ef:83:5f:b5:22:01:4e:2e:
         3f:af:40:86:58:0b:4a:66:68:2e:04:16:c2:99:65:eb:d8:ff:
         72:ae:98:ce:ec:32:a0:e5:b6:7c:9d:26:f9:b2:35:e1:99:4e:
         fc:69:91:b3:d1:59:3b:4c:dd:9d:2e:46:36:f6:2c:d1:6b:bf:
         29:0a:cf:31:f8:2d:63:8f:71:35:58:30:ec:ac:2a:ee:35:59:
         8e:1d:87:8a:35:92:df:c5:b1:fb:4f:a8:36:04:c0:17:66:79:
         37:9b:c3:e0:77:a0:82:58:b6:55:90:1e:97:02:54:a9:d4:b2:
         a9:01:b7:bd:b8:54:d9:de:30:09:c8:a4:7c:1c:e2:80:66:61:
         08:35:3c:ba:f1:e8:83:e1:20:97:35:bc:40:4a:e6:b5:5a:cb:
         74:3a:bb:d8:97:ff:74:8d:fe:f6:20:7c:62:f6:bc:cb:44:fd:
         9d:53:c3:9c:0b:a6:49:eb:5b:71:4f:1c:25:73:55:09:c8:d3:
         df:0b:94:70:d7:cf:3b:e8:ba:ff:f8:15:3d:6c:7a:1d:5e:92:
         65:3c:d2:73:58:91:70:8a:a0:c3:5a:f8:22:9a:d6:62:66:59:
         db:3b:63:e7:0e:9a:39:b8:2d:9d:92:6f:90:ba:fa:cc:51:6b:
         27:f2:dd:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:25:37 2026 by rpki-client