Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c57698f-27c2-3dfe-a3bf-bd592bf9e18e.roa
File:                     5c57698f-27c2-3dfe-a3bf-bd592bf9e18e.roa (raw, json)
Hash identifier:          rQVfwPM+LpmL28dYR+hoDIkCyJmAoqEa4GJc8NUeRhM=
Subject key identifier:   CF:AB:65:60:CB:A8:12:1D:35:15:AC:D9:41:5F:3C:5F:C7:1A:F3:70
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DAAE038A19565E33A71C87240
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c57698f-27c2-3dfe-a3bf-bd592bf9e18e.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     6167
IP address blocks:        63.46.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:38:a1:95:65:e3:3a:71:c8:72:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=62077e29-7180-4fa2-8bcf-80b29f5bec38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:14:b0:e9:71:2a:b3:e6:36:5b:29:58:c2:65:
                    d2:50:d4:be:b8:a3:ef:c4:26:41:27:b8:90:cc:37:
                    da:2a:59:07:5f:36:02:41:47:f7:bb:78:d9:87:93:
                    c9:48:4f:d8:04:57:c9:03:8e:dc:db:09:80:a0:41:
                    53:0d:4d:5c:75:32:58:e7:65:37:91:07:98:8d:e5:
                    f7:25:6b:c9:bc:92:0c:78:00:1b:4d:b4:93:7c:69:
                    e0:05:ed:04:5e:bd:e9:bf:94:20:9d:2f:e1:27:81:
                    ab:f2:20:1e:21:e5:3e:f1:33:eb:29:3e:cf:42:d3:
                    1b:a7:eb:18:84:f4:c1:eb:62:88:1b:f6:e0:7e:c8:
                    07:fd:bb:39:1f:ad:69:d9:6b:a1:a8:b8:50:f7:4c:
                    f3:ce:e3:80:eb:f3:02:1a:d7:95:5b:ba:0c:48:b3:
                    e7:f5:e6:f0:15:20:95:31:0e:50:38:e3:3d:7f:fd:
                    84:2b:fa:52:d9:44:25:c4:91:83:ae:8e:ec:5c:1e:
                    df:2b:d1:76:05:c9:58:85:e8:0f:86:5f:65:5a:fb:
                    c5:d6:e0:82:8d:d0:59:8f:be:c0:86:e3:50:ef:48:
                    7a:22:5a:bd:9d:52:ff:4c:bb:d0:27:12:4c:f6:02:
                    f1:f8:c7:ec:7d:22:3c:b2:19:2d:7c:3b:fe:6f:7a:
                    8e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:AB:65:60:CB:A8:12:1D:35:15:AC:D9:41:5F:3C:5F:C7:1A:F3:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c57698f-27c2-3dfe-a3bf-bd592bf9e18e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.46.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:d2:b5:d2:e7:aa:0e:e8:ae:a4:8e:fb:47:e0:df:16:cd:d2:
         eb:66:26:db:f8:0c:7c:03:6e:13:a8:df:f2:54:f6:8c:87:5c:
         e6:3c:4b:e9:c8:41:90:32:fe:5c:9b:4e:9d:23:03:22:64:04:
         bf:a2:47:d1:cd:ec:20:1d:b9:a3:db:14:56:03:e8:57:5f:d3:
         b2:e7:69:46:bf:5e:6e:ba:0c:a6:3d:08:ca:eb:69:8b:da:b6:
         c4:09:cc:8f:7d:c3:f2:54:79:35:d4:29:31:29:29:11:49:d4:
         ca:3e:4c:47:f6:b6:44:83:b8:36:10:2e:45:3b:26:59:7e:ee:
         26:5e:2f:63:97:17:0f:84:eb:f8:e1:5c:01:b6:89:1d:dc:ab:
         1e:7a:60:6c:22:c0:3f:32:89:02:c6:75:16:cd:4e:18:b6:26:
         76:dc:07:2c:e7:98:0f:56:33:3b:16:f2:1a:99:97:ee:52:23:
         9e:88:c2:52:ac:a4:47:66:e1:55:b5:94:68:41:72:b2:89:ee:
         ba:6d:79:d4:80:c0:39:25:c9:5c:2c:5e:3b:aa:c7:f1:0d:7a:
         b2:90:84:a0:45:15:72:55:81:ce:40:a4:30:16:48:85:5f:1c:
         7c:01:ba:b1:99:a3:1c:15:e4:87:b7:de:8a:61:1c:90:b9:3c:
         5a:ea:8d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:07:38 2026 by rpki-client