Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS63199.roa
File:                     AS63199.roa (raw, json)
Hash identifier:          CP5xjzbbm6vj8+L4Oq7kJu/6L02NPxHXN9JyuRRA96Y=
Subject key identifier:   62:C0:E1:C9:C8:6D:19:54:55:F9:8C:C6:1E:6D:BE:AE:33:FB:81:30
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       42DD79E852A76D4A06281C7AF5CFB08BC3899E
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS63199.roa
Signing time:             Mon 23 Mar 2026 05:49:26 +0000
ROA not before:           Mon 23 Mar 2026 05:44:26 +0000
ROA not after:            Mon 22 Mar 2027 05:49:26 +0000
asID:                     63199
IP address blocks:        157.254.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:30:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:dd:79:e8:52:a7:6d:4a:06:28:1c:7a:f5:cf:b0:8b:c3:89:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Mar 23 05:44:26 2026 GMT
            Not After : Mar 22 05:49:26 2027 GMT
        Subject: CN=62C0E1C9C86D195455F98CC61E6DBEAE33FB8130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:10:07:c7:4b:04:49:3a:08:77:72:11:ad:1c:
                    f6:e2:70:12:54:9e:6f:69:f3:4e:74:3b:4a:a3:68:
                    21:98:b5:71:9a:bc:81:4f:aa:63:a0:ce:e0:2b:bd:
                    1c:bc:a7:c3:6d:82:7b:29:b5:2e:94:44:65:80:2b:
                    ff:ff:32:9c:65:8d:4a:b0:bb:d9:b0:75:05:8d:0f:
                    0f:18:ef:e7:1d:4e:31:40:50:f8:9e:e1:84:31:9c:
                    3d:8e:84:20:65:7a:5a:ba:b1:6c:8c:9f:17:3b:94:
                    6a:e2:cb:06:34:4d:12:16:21:64:4d:82:0c:b5:e6:
                    1e:a5:a5:0b:76:ab:ac:f8:0a:ad:07:98:e3:0f:87:
                    a3:18:a8:a7:4b:f0:e6:74:82:21:e8:bc:02:11:fa:
                    4d:bb:26:01:f3:a6:14:4b:87:f2:06:92:fa:32:73:
                    e1:c0:e4:35:6d:06:cb:8f:0c:c6:4f:ca:d7:31:db:
                    1c:a4:7a:d8:52:e6:ef:e4:f5:14:0b:c1:e5:e9:1c:
                    e3:4b:2e:f0:43:30:6b:12:a2:39:73:07:6e:df:d4:
                    64:30:f8:29:6d:d5:16:e2:8d:e1:ca:ad:3d:56:cc:
                    9d:4d:ce:74:0d:9a:da:f6:3f:9d:6d:06:0a:58:f1:
                    14:d5:64:70:0e:a9:11:10:aa:3c:bd:4a:74:ed:58:
                    76:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C0:E1:C9:C8:6D:19:54:55:F9:8C:C6:1E:6D:BE:AE:33:FB:81:30
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS63199.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:c6:21:33:36:c2:88:a4:2b:1c:f4:3e:4f:71:9c:a2:aa:eb:
         1a:77:1f:52:dc:10:88:2f:31:42:37:9d:b9:2d:6c:3f:8c:39:
         11:ca:25:72:2d:8b:97:c3:12:bb:d6:be:3b:f2:6a:82:f0:d1:
         d8:1e:c1:21:82:bc:1e:95:68:35:2d:d5:99:39:84:d2:ae:87:
         90:1b:17:51:5d:20:d3:ad:b2:fb:e2:87:5a:3b:c0:ab:de:98:
         03:cf:ea:85:40:87:44:65:83:81:c2:cf:89:41:55:4a:08:20:
         84:ce:94:0f:b5:d3:7b:5b:05:e5:fb:fe:be:da:86:8e:36:2b:
         f1:64:71:58:ac:4a:95:c3:e6:f8:7e:b8:44:3b:48:31:9b:8c:
         67:85:fc:0d:8e:48:4a:fb:9f:e3:eb:58:a8:69:bd:9e:b9:4e:
         6a:b5:55:e8:2d:38:99:7d:03:cd:f9:d0:2b:a2:a9:ae:1a:8f:
         dd:ac:79:3e:de:11:e3:75:28:44:4a:5a:22:9f:60:3d:b6:5d:
         51:1d:6f:07:4f:97:c4:7e:38:9c:07:9a:20:8c:d0:8c:f2:fb:
         33:b0:a5:db:20:d6:9e:83:14:32:73:f1:33:d7:25:53:3a:51:
         af:6d:40:27:15:c2:5f:05:56:ab:1e:f2:1b:7e:f5:19:89:5e:
         9b:e2:e9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:01:13 2026 by rpki-client