Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/06404272-5e27-34bc-a5a5-1ab011f00dd0.roa
File:                     06404272-5e27-34bc-a5a5-1ab011f00dd0.roa (raw, json)
Hash identifier:          ITzVzOzYyIZG76qzXGko91siZf23ZIwpM3/wkdepkZU=
Subject key identifier:   7D:EB:2F:B2:23:6F:EB:9E:BB:7B:CA:34:8C:FF:2F:C6:10:A6:03:A2
Certificate issuer:       /CN=80e43277-4490-4cc9-99ec-5726af08c8ab
Certificate serial:       010D0C9F4328584E5BAF4B24FFED2664097A4EE0
Authority key identifier: F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/06404272-5e27-34bc-a5a5-1ab011f00dd0.roa
Signing time:             Wed 01 Jul 2026 21:00:12 +0000
ROA not before:           Wed 01 Jul 2026 21:00:12 +0000
ROA not after:            Tue 29 Sep 2026 21:00:12 +0000
asID:                     27696
IP address blocks:        63.245.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5b:af:4b:24:ff:ed:26:64:09:7a:4e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e43277-4490-4cc9-99ec-5726af08c8ab
        Validity
            Not Before: Jul  1 21:00:12 2026 GMT
            Not After : Sep 29 21:00:12 2026 GMT
        Subject: CN=f9679d57-bb6d-4ef2-b18b-415ac05be43b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:87:30:6e:e9:89:42:54:58:d6:8e:5d:40:70:
                    88:93:02:b9:c9:b9:21:ee:eb:1a:5b:2d:ec:dd:bf:
                    72:b1:a5:ab:e2:19:5a:a7:4f:9c:7c:2b:1b:ed:21:
                    b7:c8:54:03:a4:d3:e1:ab:d5:33:1d:21:c6:6c:68:
                    c9:b5:47:27:f4:2f:ea:a6:0b:f8:34:0a:9b:0a:c0:
                    39:3c:40:d5:4b:28:8b:bc:c6:b0:1d:44:cf:32:c1:
                    86:31:f1:e2:73:d3:54:69:57:86:3c:04:af:6e:f0:
                    5b:6e:cc:ba:38:04:e7:1d:9e:19:b4:87:29:4a:df:
                    28:87:14:7e:5e:44:54:8d:cb:ac:3e:7b:c1:95:7d:
                    5e:0d:51:78:1b:94:0d:ea:9a:82:46:e5:f6:bd:e9:
                    90:4d:d7:0c:3a:f6:8f:58:f9:64:a3:59:ac:f5:c5:
                    56:eb:4c:b3:c4:b6:5b:6e:b3:92:16:1d:b2:fe:31:
                    9f:b1:d2:94:45:70:72:1e:57:d2:c8:8e:3c:98:39:
                    db:09:3a:29:a4:dc:f1:57:a0:bf:0a:bb:a1:49:fa:
                    2d:8d:a7:ba:39:7c:c3:6f:09:65:d0:ab:6a:39:27:
                    08:e8:a5:35:7e:de:47:cb:ad:05:c5:fb:79:c6:12:
                    e5:7c:df:e6:db:70:21:15:f0:dd:4b:8f:23:71:46:
                    10:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:EB:2F:B2:23:6F:EB:9E:BB:7B:CA:34:8C:FF:2F:C6:10:A6:03:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/06404272-5e27-34bc-a5a5-1ab011f00dd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl

            X509v3 Authority Key Identifier:
                keyid:F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.245.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:38:fe:b7:8c:1a:80:d4:b8:2b:bc:e0:e3:0c:6a:32:a5:27:
         28:db:e5:1e:65:be:e9:e0:44:36:01:c7:31:ff:61:c8:22:9a:
         46:78:2b:d1:35:43:d8:ec:7c:d2:81:ec:a9:84:51:e4:c6:1a:
         98:43:01:59:07:81:a7:53:aa:c9:80:da:e4:2a:ad:b1:16:ac:
         c6:2b:fe:80:6f:86:b0:d4:1b:de:4d:ce:53:6c:58:c6:6d:64:
         01:ab:0f:6c:ca:bc:3f:8f:a1:07:2b:21:16:31:f2:0b:ae:ca:
         7b:a3:a7:1d:f1:e5:50:5c:5a:95:53:a5:57:1a:77:a5:62:05:
         ca:f6:55:8d:62:76:cc:87:d6:c4:11:c4:e6:48:a1:d2:31:3d:
         5a:12:ce:9a:c1:47:5d:b8:2b:23:6b:a9:07:0a:0c:42:8d:f4:
         ed:27:bc:36:ae:84:4e:23:34:14:b8:06:fe:50:5b:1a:43:f7:
         c9:24:f0:ed:d7:a5:44:50:09:af:0a:a0:61:61:da:63:b0:a4:
         e2:9d:ee:6f:9c:c3:cf:99:f3:92:75:90:cb:d8:77:f2:d2:47:
         61:fa:b7:d6:c8:3c:0c:a2:ca:d6:d9:e4:52:82:f9:1c:8f:bf:
         49:c6:7c:b2:98:c1:7e:85:e5:d3:d7:dc:75:c9:ce:d9:4d:bf:
         96:73:1c:30
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5br0sk/+0mZAl6TuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODBlNDMyNzctNDQ5MC00Y2M5LTk5ZWMtNTcyNmFmMDhj
OGFiMB4XDTI2MDcwMTIxMDAxMloXDTI2MDkyOTIxMDAxMlowLzEtMCsGA1UEAxMk
Zjk2NzlkNTctYmI2ZC00ZWYyLWIxOGItNDE1YWMwNWJlNDNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkocwbumJQlRY1o5dQHCIkwK5ybkh7usaWy3s
3b9ysaWr4hlap0+cfCsb7SG3yFQDpNPhq9UzHSHGbGjJtUcn9C/qpgv4NAqbCsA5
PEDVSyiLvMawHUTPMsGGMfHic9NUaVeGPASvbvBbbsy6OATnHZ4ZtIcpSt8ohxR+
XkRUjcusPnvBlX1eDVF4G5QN6pqCRuX2vemQTdcMOvaPWPlko1ms9cVW60yzxLZb
brOSFh2y/jGfsdKURXByHlfSyI48mDnbCToppNzxV6C/CruhSfotjae6OXzDbwll
0KtqOScI6KU1ft5Hy60Fxft5xhLlfN/m23AhFfDdS48jcUYQRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH3rL7Ijb+ueu3vKNIz/L8YQpgOiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MGU0
MzI3Ny00NDkwLTRjYzktOTllYy01NzI2YWYwOGM4YWIvMDY0MDQyNzItNWUyNy0z
NGJjLWE1YTUtMWFiMDExZjAwZGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODBlNDMyNzctNDQ5MC00Y2M5LTk5
ZWMtNTcyNmFmMDhjOGFiLzgwZTQzMjc3LTQ0OTAtNGNjOS05OWVjLTU3MjZhZjA4
YzhhYi5jcmwwHwYDVR0jBBgwFoAU9W5QKXAQrkNBl+H/jCjkkjkd3fAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84MGU0MzI3Ny00NDkwLTRjYzktOTllYy01NzI2
YWYwOGM4YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP/UQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJA4/reMGoDUuCu84OMMajKlJyjb5R5lvungRDYBxzH/YcgimkZ4K9E1
Q9jsfNKB7KmEUeTGGphDAVkHgadTqsmA2uQqrbEWrMYr/oBvhrDUG95NzlNsWMZt
ZAGrD2zKvD+PoQcrIRYx8guuynujpx3x5VBcWpVTpVcad6ViBcr2VY1idsyH1sQR
xOZIodIxPVoSzprBR124KyNrqQcKDEKN9O0nvDauhE4jNBS4Bv5QWxpD98kk8O3X
pURQCa8KoGFh2mOwpOKd7m+cw8+Z85J1kMvYd/LSR2H6t9bIPAyiytbZ5FKC+RyP
v0nGfLKYwX6F5dPX3HXJztlNv5ZzHDA=
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:16:35 2026 by rpki-client