Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/73f5f923-a145-3582-a788-fe56fb4baa8c.roa
File:                     73f5f923-a145-3582-a788-fe56fb4baa8c.roa (raw, json)
Hash identifier:          4GZVfdOd9qrsTL/m2OSkETT06TL5H8/UwijfEkeKf98=
Subject key identifier:   43:A3:5A:7A:E7:D5:87:47:44:89:4C:70:94:8F:24:5E:1E:39:D4:86
Certificate issuer:       /CN=afa62758-b3d6-4d3d-a3e5-3ce61baf9c81
Certificate serial:       010D0C9F4328584D20AF5117F7F7B6DECEC884C0
Authority key identifier: BB:49:04:60:8C:E3:C8:A3:8E:36:0B:0C:C5:2B:33:6B:98:17:22:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/73f5f923-a145-3582-a788-fe56fb4baa8c.roa
Signing time:             Wed 11 Mar 2026 01:00:32 +0000
ROA not before:           Wed 11 Mar 2026 01:00:32 +0000
ROA not after:            Tue 09 Jun 2026 01:00:32 +0000
asID:                     3580
IP address blocks:        63.133.224.0/20 maxlen: 32
                          69.172.128.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:af:51:17:f7:f7:b6:de:ce:c8:84:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afa62758-b3d6-4d3d-a3e5-3ce61baf9c81
        Validity
            Not Before: Mar 11 01:00:32 2026 GMT
            Not After : Jun  9 01:00:32 2026 GMT
        Subject: CN=6f26924a-49dd-4005-b984-e90da9433c79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:95:23:7e:47:7d:a6:47:a5:eb:e0:40:fb:81:
                    06:09:65:05:d5:8d:3a:4f:24:0f:27:bd:d0:e7:ad:
                    07:af:fa:5b:e1:0a:b3:5f:67:f4:d7:23:79:c7:57:
                    fb:33:c8:59:15:03:10:93:8a:d6:db:82:98:04:63:
                    6c:6b:b4:38:5b:7f:6c:f6:02:61:e0:cc:ea:b5:5d:
                    b6:ef:4c:35:db:cf:67:53:95:d7:61:a1:df:25:92:
                    4c:81:9d:3a:ea:c9:92:2e:ff:7a:4c:05:c3:af:e2:
                    f1:e5:a4:fc:64:6a:e8:b3:b2:bd:2a:e4:5b:66:3e:
                    94:59:19:7d:c4:63:dd:37:d1:ed:1a:7c:1f:75:ec:
                    56:e0:de:8d:20:03:f0:6a:16:c0:0e:e2:61:22:04:
                    1d:ca:cf:3d:4a:4d:6b:56:a9:93:ac:9a:3b:73:7e:
                    b4:f9:16:00:99:57:5b:57:a2:06:c5:b1:cf:b0:56:
                    00:22:e7:50:8e:48:46:2b:6b:15:c6:92:c2:a1:de:
                    9c:03:4d:e1:80:e8:bf:f5:af:37:90:29:3f:1f:a7:
                    9a:a5:01:a1:94:bd:9e:c4:15:c5:51:4d:47:c0:2b:
                    c2:37:c6:f1:cc:3a:8a:25:ad:a0:c0:95:58:88:19:
                    87:d0:13:93:ad:7b:e6:8b:72:79:3c:74:ec:3e:c9:
                    b1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A3:5A:7A:E7:D5:87:47:44:89:4C:70:94:8F:24:5E:1E:39:D4:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/73f5f923-a145-3582-a788-fe56fb4baa8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.crl

            X509v3 Authority Key Identifier:
                keyid:BB:49:04:60:8C:E3:C8:A3:8E:36:0B:0C:C5:2B:33:6B:98:17:22:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.133.224.0/20
                  69.172.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:be:3f:9f:90:63:f6:89:7a:75:ce:ac:eb:e0:41:cf:55:5f:
         68:13:37:68:de:fb:66:77:45:21:01:7e:c6:b1:53:56:ed:56:
         09:ad:a3:4a:2e:a6:5a:f2:fe:10:55:5c:ba:a1:77:f4:06:73:
         14:5a:c4:ba:9f:ca:43:ac:83:91:9d:7a:bc:29:c6:80:ec:6a:
         4f:1a:c7:b0:e5:a3:00:cd:a2:13:9b:1c:81:21:c9:fa:d0:0e:
         8e:0d:b5:d7:1f:5e:aa:11:24:31:a2:24:72:fb:f3:5b:96:67:
         50:77:47:4c:5a:47:40:03:79:81:d8:d4:dc:73:6f:90:0d:b9:
         2b:b2:87:07:19:d2:44:07:70:5c:a5:9d:49:1b:fa:78:60:de:
         45:25:f7:7a:27:01:4d:0d:59:df:c3:e6:87:b2:5b:c6:1b:52:
         d5:87:df:e1:d9:12:43:ef:40:38:16:56:fc:4d:0d:ea:b2:b6:
         2e:f9:fc:66:6a:ac:03:12:75:02:a7:34:5e:6d:c6:cf:d7:bf:
         4e:06:4d:a8:24:80:7a:49:9f:19:21:8d:c8:5a:dc:d4:85:c3:
         d2:9b:55:f9:37:2f:8f:9b:da:a7:90:36:8c:bc:ab:bf:4d:bd:
         d4:fd:a0:4c:90:c0:c3:15:06:bb:4b:1e:b4:14:0f:84:64:d1:
         53:b6:26:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:24:15 2026 by rpki-client