Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6c75d476-dd42-4501-9696-faf234c05e36/f4492200-1440-37df-90c8-244dcaf5ce9e.roa
File:                     f4492200-1440-37df-90c8-244dcaf5ce9e.roa (raw, json)
Hash identifier:          K4FZerGph/KYd793SuyZM2BDUHLJrm+qjQiacY5A2vA=
Subject key identifier:   4B:DD:9B:98:6A:61:14:E3:46:22:A4:08:40:AF:5D:1F:F2:9D:8F:62
Certificate issuer:       /CN=6c75d476-dd42-4501-9696-faf234c05e36
Certificate serial:       010D0C9F4328584F3E48028380FBEA5919108800
Authority key identifier: 3E:DF:F5:36:69:B2:91:79:F6:39:45:84:B1:43:BB:EC:E5:65:92:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6c75d476-dd42-4501-9696-faf234c05e36.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6c75d476-dd42-4501-9696-faf234c05e36/f4492200-1440-37df-90c8-244dcaf5ce9e.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     20115
IP address blocks:        63.133.192.0/21 maxlen: 24
                          63.133.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6c75d476-dd42-4501-9696-faf234c05e36/6c75d476-dd42-4501-9696-faf234c05e36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6c75d476-dd42-4501-9696-faf234c05e36/6c75d476-dd42-4501-9696-faf234c05e36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6c75d476-dd42-4501-9696-faf234c05e36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:48:02:83:80:fb:ea:59:19:10:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c75d476-dd42-4501-9696-faf234c05e36
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=91f7b5c1-328f-4f4a-8771-2a2951b75715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e0:44:68:5d:75:61:4f:cd:d0:11:00:1a:23:
                    bc:ac:2e:cf:58:1e:35:2e:5f:02:7a:ce:bb:be:79:
                    cb:89:94:9a:f0:de:df:54:01:b8:07:08:12:28:a4:
                    cd:5f:21:85:fc:73:57:56:7d:9f:f2:8c:ae:95:b6:
                    c2:33:e2:e6:3f:09:69:54:f4:c1:f7:45:17:9d:bd:
                    c7:3e:4c:bc:92:5a:ea:99:c5:85:68:c5:c5:65:71:
                    9c:36:ef:66:4f:4f:15:82:17:56:8b:ed:3c:dd:87:
                    e7:c9:40:fe:95:12:9a:d3:a3:a7:87:6b:ea:ff:72:
                    6a:17:2d:82:54:fd:79:09:bf:4e:ba:13:c9:77:d7:
                    76:9f:a0:e2:0f:35:51:c8:bd:36:a6:40:6b:5d:1a:
                    05:61:04:5d:08:65:36:95:bf:e2:c3:cf:9a:41:15:
                    5a:63:d1:ee:9b:0a:7c:e4:89:b1:7c:58:bf:95:f3:
                    b2:ae:79:a9:82:01:27:9c:57:6c:fb:fe:a6:4f:67:
                    d4:08:f6:9a:a2:0e:14:e5:71:16:35:24:74:28:ab:
                    ed:1d:13:0b:a7:95:20:2f:94:13:da:e0:dc:9f:26:
                    94:80:86:ac:6f:77:8b:62:2b:e5:a0:b6:92:65:b6:
                    3c:a3:1b:56:db:6a:f1:cd:1b:c7:ad:42:0c:cb:35:
                    9b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:DD:9B:98:6A:61:14:E3:46:22:A4:08:40:AF:5D:1F:F2:9D:8F:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6c75d476-dd42-4501-9696-faf234c05e36/f4492200-1440-37df-90c8-244dcaf5ce9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6c75d476-dd42-4501-9696-faf234c05e36/6c75d476-dd42-4501-9696-faf234c05e36.crl

            X509v3 Authority Key Identifier:
                keyid:3E:DF:F5:36:69:B2:91:79:F6:39:45:84:B1:43:BB:EC:E5:65:92:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6c75d476-dd42-4501-9696-faf234c05e36.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.133.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:8f:d0:b3:f0:24:1a:a7:16:d3:cb:27:4c:ed:00:54:b0:82:
         fd:24:60:be:d7:35:ed:b5:28:e9:7e:78:e2:2a:50:e6:f6:d5:
         05:d1:d2:6a:b5:d5:35:9c:38:c1:07:f7:d7:61:0b:26:71:91:
         3e:34:15:d1:df:84:72:0d:de:8f:17:bd:1e:e3:8f:f9:65:4c:
         a9:6e:7d:d7:4e:bc:8b:50:41:fa:07:a9:06:d1:37:cb:65:36:
         f8:8b:a6:6a:b1:67:54:f6:a2:d0:b3:1e:a5:03:ee:e8:7a:a4:
         94:b8:5e:03:0c:86:fd:16:39:a6:61:73:5b:e6:96:3e:eb:f9:
         5a:46:45:a2:5b:8d:c6:a4:03:ca:e9:1d:95:f5:7e:99:ce:fc:
         a1:80:5e:b9:f5:0c:0e:2f:54:9b:9b:73:4e:ba:99:31:28:e9:
         ce:53:01:b1:e8:d8:21:06:7f:29:8f:2f:92:46:19:b7:8b:f8:
         55:1d:93:c5:cc:d2:9c:04:44:73:0e:04:9a:ca:2d:1f:36:cf:
         28:51:5f:71:63:87:f9:39:74:25:e6:56:be:86:49:50:a7:14:
         d5:a8:1a:1b:00:e1:32:68:5f:b8:ba:72:e1:54:03:66:69:f6:
         47:2c:91:32:66:18:75:be:c4:f9:33:82:f5:72:fd:a7:95:19:
         3b:df:28:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:45:00 2026 by rpki-client