Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/f7c4b5bf-7d6f-3580-80db-3b65c9ef7997.roa
File:                     f7c4b5bf-7d6f-3580-80db-3b65c9ef7997.roa (raw, json)
Hash identifier:          d7HwbpHOxfxaiV2X5SoGya0jPYjcCz7GKranGWAlpSE=
Subject key identifier:   F4:30:68:B3:BE:E1:83:02:27:29:56:7E:C4:0C:13:10:E4:A0:1D:B7
Certificate issuer:       /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6
Certificate serial:       010D0C9F4328584D4A8F951C7809BFA6C150F700
Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/f7c4b5bf-7d6f-3580-80db-3b65c9ef7997.roa
Signing time:             Thu 26 Mar 2026 01:00:32 +0000
ROA not before:           Thu 26 Mar 2026 01:00:32 +0000
ROA not after:            Wed 24 Jun 2026 01:00:32 +0000
asID:                     14618
IP address blocks:        155.63.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4a:8f:95:1c:78:09:bf:a6:c1:50:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6
        Validity
            Not Before: Mar 26 01:00:32 2026 GMT
            Not After : Jun 24 01:00:32 2026 GMT
        Subject: CN=19257dd1-f591-4604-8789-3ef20313c4ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d5:65:be:2d:dc:8e:a0:14:f2:0f:37:d9:a0:
                    ca:8e:ef:8a:69:76:e2:c4:76:c3:2a:7b:78:aa:28:
                    d2:f9:09:00:a6:3d:5b:d8:ff:65:5d:22:8c:b6:38:
                    bf:99:23:de:3a:dc:20:d5:69:f1:5d:29:c7:5a:d8:
                    54:d5:e4:29:3e:bf:b8:d8:81:d5:01:37:1d:7f:92:
                    47:58:80:08:47:79:c5:d6:9c:20:a2:3d:ae:4b:ab:
                    c0:95:6c:66:2e:b0:44:8b:e6:15:da:6d:ea:54:3f:
                    fb:a3:52:7a:d9:da:df:31:83:50:fe:d8:24:4b:7e:
                    42:45:50:e5:cb:10:e1:5f:e4:97:38:0c:d6:e7:b9:
                    f3:16:41:d8:9a:5d:38:2a:aa:47:ee:4a:bb:1a:53:
                    32:ff:07:24:8d:e9:e3:74:b6:e9:8d:e8:4f:c3:7c:
                    48:bc:35:ad:05:f0:e8:41:eb:c7:74:c2:2c:9a:f0:
                    43:4e:81:12:b9:da:4f:c4:49:c0:c5:d6:88:00:d4:
                    2f:7f:7f:85:40:2d:12:bd:3f:ef:c6:ae:a7:38:7b:
                    31:95:15:79:62:e7:04:5b:95:46:d9:1f:15:73:f5:
                    2f:aa:be:9b:f2:4c:8f:e8:b4:3b:ae:58:6e:5c:e8:
                    9c:81:f0:1e:df:ef:e5:d6:1b:c5:40:66:91:d4:43:
                    44:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:30:68:B3:BE:E1:83:02:27:29:56:7E:C4:0C:13:10:E4:A0:1D:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/f7c4b5bf-7d6f-3580-80db-3b65c9ef7997.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl

            X509v3 Authority Key Identifier:
                keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.63.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:c4:1c:01:6c:db:52:13:5a:ac:c3:ed:24:a0:07:84:53:d2:
         61:d7:62:99:21:5c:f5:bb:c9:6b:6a:74:2c:4a:44:94:4f:1c:
         a3:51:28:33:88:1d:cc:6c:f7:48:71:7e:2e:3d:6a:6f:f2:66:
         39:23:5f:0a:71:6a:bc:12:2f:20:3c:a7:48:e1:6f:40:f7:26:
         5b:a2:9f:04:77:68:dc:36:0d:22:59:01:9c:7c:66:75:7c:f1:
         d3:f2:a5:c9:38:ff:98:26:15:a6:c3:dc:62:b6:0f:08:33:ff:
         af:76:a9:b7:78:10:c5:93:2b:4c:a6:f2:7b:d7:4d:ad:86:92:
         73:aa:10:4d:06:ac:f6:7f:89:90:86:ef:92:89:ff:c4:51:83:
         ae:4e:e0:a8:1f:e0:6f:b1:ac:6b:76:ce:18:a6:8f:eb:98:ec:
         9b:2e:9d:53:92:82:6f:9f:35:9c:cc:b5:3d:3c:cf:ec:96:ef:
         d8:1f:b2:00:4b:24:95:16:37:e3:5e:b8:02:f1:34:65:60:78:
         8e:05:b5:4d:62:b4:eb:fa:b5:89:09:4e:65:4b:ca:19:ec:56:
         bd:27:ef:bc:ec:18:32:39:48:4a:4a:dc:cb:5d:68:78:27:88:
         2d:08:9e:c3:7a:7d:fb:84:fd:b3:4d:24:ef:c8:6b:92:0f:6c:
         48:ce:d2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:29 2026 by rpki-client