Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6c75d476-dd42-4501-9696-faf234c05e36/fd3d5be8-ade9-3b67-8835-3a6558400efe.roa
File:                     fd3d5be8-ade9-3b67-8835-3a6558400efe.roa (raw, json)
Hash identifier:          kuMoJnY8Jsbur+SJ9frcsCxue3DU3nzbgY7Bq8cb3WQ=
Subject key identifier:   6B:F1:1B:8E:9A:52:5A:5D:F1:A6:1F:98:AC:B6:4E:EA:52:66:71:A3
Certificate issuer:       /CN=6c75d476-dd42-4501-9696-faf234c05e36
Certificate serial:       010D0C9F4328584F3CE296E39F167C3970699D80
Authority key identifier: 3E:DF:F5:36:69:B2:91:79:F6:39:45:84:B1:43:BB:EC:E5:65:92:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6c75d476-dd42-4501-9696-faf234c05e36.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6c75d476-dd42-4501-9696-faf234c05e36/fd3d5be8-ade9-3b67-8835-3a6558400efe.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     398465
IP address blocks:        63.133.192.0/21 maxlen: 24
                          63.133.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6c75d476-dd42-4501-9696-faf234c05e36/6c75d476-dd42-4501-9696-faf234c05e36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6c75d476-dd42-4501-9696-faf234c05e36/6c75d476-dd42-4501-9696-faf234c05e36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6c75d476-dd42-4501-9696-faf234c05e36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:96:e3:9f:16:7c:39:70:69:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c75d476-dd42-4501-9696-faf234c05e36
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=6689c906-8f40-4f02-831a-79ceea7675fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b0:5b:b8:6d:b1:ab:31:31:65:72:6a:ab:ef:
                    f6:bb:8d:5b:d4:82:b1:dc:8f:ee:40:b4:f3:29:b4:
                    c7:19:1c:2b:92:0b:dd:f4:14:cb:c2:be:79:ed:f1:
                    cf:4f:e1:e9:d1:df:37:e6:2d:43:e6:03:36:b2:c2:
                    b7:7a:1c:cb:a7:df:12:75:16:43:13:3a:47:b1:5f:
                    8a:3b:af:1c:a3:d2:3c:3a:b3:4d:2f:61:6a:e7:8e:
                    a1:72:2b:d1:0b:6e:a3:d7:03:b3:e6:a8:ae:9a:54:
                    14:82:12:47:af:2c:b3:f6:be:06:4f:9f:4f:cc:d4:
                    0b:ef:8d:ef:e9:b7:81:fc:8c:fe:30:1b:50:52:98:
                    9e:48:d2:2a:2e:5b:cb:cd:04:88:8b:3a:30:26:21:
                    60:e6:1b:89:ec:68:6e:1b:6a:26:88:a4:46:dd:69:
                    76:bb:2f:82:30:e4:84:6a:37:38:49:b1:07:1d:60:
                    df:aa:77:4f:de:16:e5:cd:ea:8d:c6:60:3a:45:77:
                    a9:29:b0:5c:ec:52:5b:7c:23:24:b4:b1:2a:2c:70:
                    9b:0e:ea:04:71:cf:0f:66:06:54:a8:46:5b:e3:9f:
                    f6:68:98:04:f7:78:b7:1d:d9:bd:76:97:0f:1d:ac:
                    2d:6c:a9:dc:8b:af:dc:7f:96:2e:7d:cf:ec:b4:60:
                    1d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F1:1B:8E:9A:52:5A:5D:F1:A6:1F:98:AC:B6:4E:EA:52:66:71:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6c75d476-dd42-4501-9696-faf234c05e36/fd3d5be8-ade9-3b67-8835-3a6558400efe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6c75d476-dd42-4501-9696-faf234c05e36/6c75d476-dd42-4501-9696-faf234c05e36.crl

            X509v3 Authority Key Identifier:
                keyid:3E:DF:F5:36:69:B2:91:79:F6:39:45:84:B1:43:BB:EC:E5:65:92:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6c75d476-dd42-4501-9696-faf234c05e36.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.133.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:a4:81:d5:4a:e5:94:6a:a3:62:73:91:8e:cf:1d:ff:84:f1:
         e7:59:6e:b2:57:f6:35:68:a9:21:f6:b0:24:d3:e8:c4:da:c4:
         07:cb:49:1b:37:2b:b6:88:d0:13:9f:66:9b:6a:88:d1:0b:6e:
         d5:43:d7:48:4d:a7:2c:86:9e:61:e1:80:63:c0:b3:c5:e6:7f:
         61:8b:46:02:4d:bb:f9:68:34:31:a3:47:17:7f:18:b2:65:88:
         21:0e:26:10:d2:50:70:c0:f0:56:9e:c2:cd:48:d1:36:84:e8:
         58:7d:29:b1:42:87:3d:dc:8f:86:48:5f:e2:90:f5:1f:c8:4a:
         13:01:77:bd:08:ac:1a:2a:4f:0c:7e:7c:8f:91:7d:27:14:eb:
         aa:f8:45:51:25:b1:01:93:e7:62:71:22:98:c2:a0:17:88:0f:
         51:d7:38:46:80:22:b3:3d:e0:27:1e:13:f1:71:45:b3:fd:80:
         64:51:dc:3a:aa:7e:56:fe:88:da:1a:12:6f:91:b5:6b:0c:aa:
         c6:31:ca:08:53:ca:35:5b:2e:98:e0:f9:a5:4d:3b:3b:be:c4:
         c6:c3:3b:2c:0c:f6:df:21:50:ea:55:f2:a2:04:3c:fd:34:53:
         fa:d8:16:05:8c:2e:a5:b6:59:da:ff:b4:a1:71:d9:78:91:6d:
         b4:c4:cd:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:23:56 2026 by rpki-client