Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/214835ae-18bb-3319-b20f-9ee257da4f6e.roa
File:                     214835ae-18bb-3319-b20f-9ee257da4f6e.roa (raw, json)
Hash identifier:          gyLfL2q2MtJrjjd0HZ2RiQgiu6FtJ6YV1K/2N+BJO1A=
Subject key identifier:   CA:E6:06:1F:4D:61:4F:0F:69:43:1B:6D:7B:CB:E1:C7:73:FE:94:47
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F3FAD453632C360521AF5A100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/214835ae-18bb-3319-b20f-9ee257da4f6e.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     701
IP address blocks:        63.80.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:45:36:32:c3:60:52:1a:f5:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=55fcc7f8-5152-4d70-87c3-a5e040a765df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:18:98:fd:79:f7:12:69:e4:46:a5:c9:f2:f4:
                    1e:25:02:d5:10:d2:2a:6f:e8:a0:fc:80:65:96:91:
                    26:6c:4a:fc:af:b5:7a:43:d0:44:0a:d1:7f:5d:0d:
                    42:a6:77:7d:26:da:93:18:a3:05:a2:78:c6:33:fa:
                    46:3b:2d:87:f3:bc:b5:c1:b0:b4:ee:e7:9d:d4:ad:
                    9d:b3:41:8b:ba:af:8a:83:dc:85:76:b0:c3:1e:17:
                    ea:29:bd:5d:66:65:a4:03:f5:2d:4a:39:de:02:17:
                    ba:1d:6c:87:6d:5b:a7:b2:4a:83:9f:c6:c3:a6:92:
                    68:12:02:3e:ed:88:fa:ff:79:61:2c:3f:b5:fb:6f:
                    30:a2:d0:cb:26:62:ae:fc:1b:d7:0a:c8:15:13:08:
                    95:bc:84:f3:71:af:33:57:7e:ff:1b:83:6f:1c:b3:
                    06:b8:64:ee:47:c3:b4:de:b5:06:87:a8:e2:18:9c:
                    a2:33:50:71:b4:fc:c6:11:34:46:e5:6b:0d:5b:bf:
                    71:6c:85:53:2b:07:c9:a7:e5:e5:38:cc:34:05:39:
                    2c:6b:42:0e:e9:fd:58:38:7d:8a:79:09:04:15:09:
                    04:c8:e1:ca:dd:8d:a1:9f:6e:50:60:91:3a:6a:7b:
                    24:35:04:b5:7d:db:d9:bc:f3:20:cd:cb:fa:99:67:
                    c4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E6:06:1F:4D:61:4F:0F:69:43:1B:6D:7B:CB:E1:C7:73:FE:94:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/214835ae-18bb-3319-b20f-9ee257da4f6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.80.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:93:7c:19:43:6a:71:dc:bd:4c:6b:17:17:c0:c0:ee:25:06:
         ee:63:75:ff:c9:7d:cd:5d:cd:fa:38:17:e8:ff:a7:14:3b:75:
         4d:8d:08:b2:4d:73:c0:32:6c:15:79:a4:58:07:07:40:2c:8c:
         c1:6f:57:a1:4f:25:33:a1:46:fa:90:39:44:3f:03:ed:3e:9c:
         ca:cf:cd:5e:93:c3:49:9c:85:59:b4:64:da:fe:11:64:cf:61:
         6e:fa:a3:ca:bb:e9:64:e5:db:97:3c:db:62:39:ca:23:42:39:
         f3:65:91:92:94:5c:0d:7c:6c:79:75:b1:ca:05:45:45:cd:7f:
         fc:e0:46:f3:36:11:8d:94:d4:b0:d1:db:b0:59:cc:de:08:3c:
         94:92:d4:68:51:bb:fa:71:92:33:bb:8a:30:38:0e:95:dc:7e:
         0b:18:a4:62:37:c4:4f:74:ae:56:00:a0:a2:d5:ec:45:ac:d9:
         2b:13:32:45:54:38:84:35:ee:84:40:e2:74:24:c6:8f:01:4e:
         fa:4c:65:39:a1:34:0f:b7:ac:68:c7:5a:39:62:05:8d:e0:05:
         2a:c0:34:0b:06:ef:31:3a:4a:d0:5b:60:6e:ea:a1:71:c1:9c:
         82:4d:49:be:fd:f8:23:4d:36:b9:58:2e:2c:09:ee:76:7b:16:
         9e:4c:64:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 14:20:13 2026 by rpki-client