Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4f231fc7-4403-38d8-9c28-3847a56ab5e8.roa
File:                     4f231fc7-4403-38d8-9c28-3847a56ab5e8.roa (raw, json)
Hash identifier:          fUeGFWLhICu32fnr2t/e1TaLGTJb4WoPBonJgFF3Vr0=
Subject key identifier:   66:FD:77:90:3F:81:90:C5:E9:1D:B8:DE:09:CD:50:32:91:20:B2:61
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D0A77C2C7DD73A3613B8A6040
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4f231fc7-4403-38d8-9c28-3847a56ab5e8.roa
Signing time:             Tue 03 Mar 2026 02:00:32 +0000
ROA not before:           Tue 03 Mar 2026 02:00:32 +0000
ROA not after:            Mon 01 Jun 2026 01:00:32 +0000
asID:                     6984
IP address blocks:        63.23.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0a:77:c2:c7:dd:73:a3:61:3b:8a:60:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  3 02:00:32 2026 GMT
            Not After : Jun  1 01:00:32 2026 GMT
        Subject: CN=da6a73cb-fd03-4975-9270-e3b8a72a9ea5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:89:e6:fb:0e:54:66:b3:ff:c0:11:28:41:92:
                    2e:b4:5e:1c:2b:d1:3d:6b:51:b0:52:f9:0e:ac:ec:
                    dc:65:70:18:25:69:e2:c5:d3:eb:9b:3d:0e:87:eb:
                    2d:4e:04:f1:c8:1a:a4:a5:fb:c3:e5:95:ec:33:f4:
                    63:68:05:9f:ce:2b:6a:e7:a3:11:35:35:bc:6c:09:
                    87:40:d2:bc:f1:b2:91:3a:28:ae:31:47:ce:ed:ec:
                    24:fb:ce:a6:54:45:a7:fb:16:b9:9e:be:d7:ae:b2:
                    3f:34:da:89:cc:2f:13:47:2d:54:6c:63:91:db:71:
                    ab:56:1c:bf:c5:c0:bd:e9:0f:28:d0:2d:03:75:5d:
                    ce:73:18:59:fb:37:52:a8:ee:40:d3:a9:76:33:f3:
                    42:8e:8b:3f:48:45:ae:39:17:d5:31:19:a1:6c:58:
                    30:f3:3b:ec:d4:f6:37:ef:e7:c3:d4:37:1e:55:f1:
                    85:85:a3:2c:d9:60:1f:30:eb:f6:b3:eb:17:91:e3:
                    f0:74:a4:cf:f1:ce:14:c7:bc:23:21:7a:87:90:b0:
                    5c:6b:9b:97:84:c1:d1:1f:15:9d:f7:f8:af:34:75:
                    47:58:e7:b1:45:91:ad:cf:c7:21:fa:66:a2:06:a6:
                    21:5e:28:ca:11:f5:b4:2c:4b:27:a0:0a:a1:ee:b3:
                    50:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:FD:77:90:3F:81:90:C5:E9:1D:B8:DE:09:CD:50:32:91:20:B2:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4f231fc7-4403-38d8-9c28-3847a56ab5e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.23.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:2e:a9:f2:4d:de:31:9f:b6:30:b8:38:c5:94:b8:7a:bd:e8:
         48:38:dc:e4:1f:f2:87:bc:37:81:4e:e5:12:d9:5e:ed:ff:ee:
         68:bc:65:a4:e0:12:23:75:d3:6a:92:0b:99:20:b6:47:14:d1:
         95:f0:1c:d7:94:41:be:b1:6c:b0:31:ee:5d:6e:99:ea:27:b9:
         8d:4e:6c:3a:e4:b5:c7:81:62:9f:d9:1b:23:18:5f:4a:ed:e3:
         94:22:62:5b:9a:7a:3a:36:9b:c1:56:e8:80:3a:98:59:75:e8:
         80:be:b0:d5:09:20:5e:92:c6:a2:47:da:bc:24:4f:94:af:77:
         21:86:67:b9:d7:f8:70:05:bb:6b:19:a6:d5:30:61:75:d2:7d:
         6f:1b:f5:df:8f:e5:6d:0f:9f:4c:71:88:36:51:6c:79:36:5f:
         7a:10:18:28:75:d5:e0:fc:f5:10:71:64:cf:f1:ab:d3:73:9a:
         fb:7b:ea:2d:af:20:f4:57:5f:7c:b1:87:8f:c7:99:86:c9:27:
         6f:90:93:c7:d0:6e:26:0a:0f:23:99:51:8a:8b:f2:bf:f0:0f:
         95:23:75:b7:dc:bf:cc:52:9c:86:97:76:06:b8:aa:c8:b5:85:
         38:ce:88:e8:88:fe:d4:98:ad:91:b9:ab:fa:2c:c1:cd:9c:3e:
         da:0b:64:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:25:12 2026 by rpki-client