Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS13647.roa
File:                     AS13647.roa (raw, json)
Hash identifier:          QzmE/cyoQSfsf5Wp/ycRU3pHYtdjcNFyJbH8CwMIWQs=
Subject key identifier:   36:96:AB:FF:39:C5:DE:39:A2:70:3C:31:2F:72:55:E0:0D:F3:A4:4F
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       4929B939991698D20DD3B9A813F322500505441E
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS13647.roa
Signing time:             Thu 12 Nov 2026 17:47:31 +0000
ROA not before:           Thu 12 Nov 2026 17:42:31 +0000
ROA not after:            Thu 11 Nov 2027 17:47:31 +0000
asID:                     13647
IP address blocks:        45.54.80.0/24 maxlen: 24
                          157.53.247.0/24 maxlen: 24
                          2607:f740:e069::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 01:31:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:29:b9:39:99:16:98:d2:0d:d3:b9:a8:13:f3:22:50:05:05:44:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Nov 12 17:42:31 2026 GMT
            Not After : Nov 11 17:47:31 2027 GMT
        Subject: CN=3696ABFF39C5DE39A2703C312F7255E00DF3A44F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:25:55:2d:7a:2a:f5:df:c0:5c:be:1e:f8:21:
                    6d:dd:69:16:79:9d:46:c7:62:01:45:6d:c3:9a:c4:
                    df:03:a4:7b:92:b0:44:af:63:ed:b9:cf:1e:a0:06:
                    c9:2a:c5:26:41:44:c7:fe:b9:e4:a5:73:c7:26:98:
                    2e:30:90:fb:c7:b4:dc:6e:e7:12:24:57:46:2b:17:
                    19:9a:4e:3c:5c:7e:e2:6d:b3:9e:b3:39:94:63:7c:
                    27:ba:65:91:2a:af:a1:34:e5:ed:16:b0:83:85:20:
                    8d:90:6f:e2:84:f4:14:82:23:0c:88:55:45:4b:1d:
                    b5:38:7c:de:6e:5e:72:84:fc:9d:04:35:c0:14:f3:
                    03:1f:86:57:9e:d3:73:e0:fc:31:a4:6a:33:49:79:
                    d4:27:35:b4:a1:9c:ce:d9:07:01:1a:9c:8e:66:8e:
                    47:fe:50:aa:9c:33:53:cb:47:41:b6:48:db:8a:1a:
                    ba:dc:aa:b1:45:e9:08:51:74:c4:f5:22:5b:96:d6:
                    00:39:39:d6:da:34:c4:ed:7a:e4:d0:d3:10:49:d8:
                    84:89:c6:9e:d5:7c:1f:e7:7b:9b:91:24:9f:c3:20:
                    7d:d4:5a:e0:2a:36:79:db:b4:38:30:7c:8f:ec:93:
                    76:eb:8a:f3:e0:fa:6f:43:c7:2e:71:f5:3c:0d:e1:
                    ae:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:96:AB:FF:39:C5:DE:39:A2:70:3C:31:2F:72:55:E0:0D:F3:A4:4F
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS13647.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.54.80.0/24
                  157.53.247.0/24
                IPv6:
                  2607:f740:e069::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:af:7f:06:1d:e8:33:88:0a:31:3e:b8:e7:73:fd:1c:cd:e2:
         56:8f:ad:0e:ef:0f:7f:ec:f2:ac:ca:68:a3:2e:58:74:33:ab:
         45:ca:e7:9c:20:f0:8e:37:33:e0:72:ff:03:9d:34:d4:d9:db:
         eb:29:61:1e:bb:4b:f4:44:d7:22:57:63:aa:fe:05:02:27:43:
         2d:f6:90:f0:22:b3:f1:a2:e4:e1:ef:0e:b8:c6:c0:81:09:63:
         1b:95:f0:a9:f7:b7:dc:7b:7c:b5:22:dc:44:6b:8e:26:3f:7a:
         ec:e5:4a:75:b9:9e:6b:50:27:c7:d5:74:d1:b8:5f:ed:3a:fa:
         dd:0b:b7:a0:ea:c5:1d:3f:dd:39:39:6e:e5:17:e7:cd:72:ec:
         76:32:5a:24:32:91:33:f0:6c:66:44:7b:cb:70:2c:fd:8c:96:
         34:ed:8f:75:86:eb:4b:c9:cb:43:1f:90:28:74:b4:20:20:b1:
         d4:44:be:d1:37:c5:9c:63:88:41:bd:ba:0a:ef:4c:16:08:0a:
         3b:72:a6:bd:ef:fd:3d:5e:41:16:aa:dc:22:61:09:4b:5f:76:
         5c:e8:76:e7:3f:09:d8:ab:8d:14:bb:4d:89:37:9f:2b:31:67:
         2e:03:4b:ee:79:67:31:15:fe:bf:23:c1:ab:40:0e:51:e2:64:
         f9:7b:b6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:07:46 2026 by rpki-client