Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/784cd69e-d718-341a-9a16-b80cfaf0cd9d.roa
File:                     784cd69e-d718-341a-9a16-b80cfaf0cd9d.roa (raw, json)
Hash identifier:          XgkOkF/7w/z6JpBdTs0F3UwkMVcGk/3/vGfdOjl5Mwg=
Subject key identifier:   77:E2:2D:9F:C7:5E:7B:9D:26:95:9B:3D:46:8B:EE:21:3E:21:33:BF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D361AFBC9B91AF0EC4F9C2200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/784cd69e-d718-341a-9a16-b80cfaf0cd9d.roa
Signing time:             Wed 18 Mar 2026 17:09:36 +0000
ROA not before:           Wed 18 Mar 2026 17:09:36 +0000
ROA not after:            Tue 16 Jun 2026 17:09:36 +0000
asID:                     395074
IP address blocks:        63.121.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:36:1a:fb:c9:b9:1a:f0:ec:4f:9c:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 18 17:09:36 2026 GMT
            Not After : Jun 16 17:09:36 2026 GMT
        Subject: CN=dfd6dd51-596d-44d6-a9e8-6643930746a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:bb:9d:5a:ee:29:14:62:4d:05:00:d7:54:9a:
                    a8:83:f4:13:38:d2:6f:d1:51:60:6e:e2:9a:33:0e:
                    a6:55:97:48:80:a8:4a:fb:02:17:94:d4:a2:3f:3e:
                    41:9c:54:a4:a3:76:30:a2:58:5d:26:44:53:a4:c9:
                    9c:5e:c8:fd:20:1e:92:80:bc:b7:07:37:5f:7d:ed:
                    fb:35:bf:d8:c8:bb:58:7d:79:26:fc:6f:50:8c:83:
                    de:7c:cc:fe:a2:b2:f0:f9:1d:22:22:7f:91:97:33:
                    58:ab:32:9c:fe:05:cf:3c:ad:eb:c4:02:fc:b5:42:
                    34:fa:be:26:28:c1:9a:51:41:71:d4:46:b2:0c:fe:
                    09:cb:ff:2d:1e:40:d7:ca:91:c9:76:14:3a:a1:d2:
                    b8:9a:4d:93:a3:4a:f2:04:c1:0a:6b:d1:89:ba:df:
                    d6:03:de:ba:3e:59:8a:8e:81:17:67:79:32:57:a4:
                    33:97:16:dc:b2:01:6d:9b:ac:f4:6c:4c:e8:15:84:
                    57:35:29:ad:d8:f8:02:09:92:53:38:30:82:cb:05:
                    b6:ff:bf:f2:e5:fb:7d:99:e2:17:f1:8e:47:fa:98:
                    81:7a:ed:da:7d:29:69:1e:02:4c:2e:0d:a3:3f:ab:
                    5e:06:aa:e7:3f:9d:61:ae:8e:7f:e3:b4:41:54:27:
                    3d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E2:2D:9F:C7:5E:7B:9D:26:95:9B:3D:46:8B:EE:21:3E:21:33:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/784cd69e-d718-341a-9a16-b80cfaf0cd9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.121.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:bb:36:aa:fc:5c:10:f5:0b:d7:c2:48:35:c5:99:75:ad:bf:
         3f:ac:21:51:9b:ca:19:cf:52:be:04:d8:a8:de:6e:fb:4c:43:
         44:81:8f:14:73:aa:b0:49:7f:9f:42:aa:da:cf:31:ce:1c:f0:
         19:a2:cd:c6:d6:ab:6e:00:c5:1d:28:c2:61:e7:f5:cd:3c:fe:
         cd:67:0f:88:4c:75:ba:a0:b2:30:8c:af:e8:69:fb:50:72:43:
         50:94:c6:a0:43:a8:3f:3f:26:19:79:7e:8b:71:7c:13:a5:c8:
         cd:6d:25:59:4d:67:f8:3a:7c:40:45:ce:f0:1d:6a:25:4e:14:
         d7:c3:7c:75:53:ca:90:94:96:bc:2e:29:45:8c:11:c2:c6:1e:
         6b:bc:13:8e:60:44:61:4c:ab:af:af:64:68:ea:b0:f6:9e:0a:
         82:13:8f:fe:39:fd:d5:a0:bb:2f:b9:da:74:5b:d9:6d:5a:06:
         48:97:11:2d:47:9d:be:9a:db:e0:dd:72:8c:62:ea:27:d8:bf:
         2f:bc:09:3a:f5:78:fa:aa:e1:1f:42:15:ad:25:13:5d:f2:9b:
         50:ff:8a:ee:f4:0e:7d:75:ab:25:99:22:ed:71:ba:0d:49:d7:
         20:b8:74:3d:06:73:64:69:c2:b6:e7:e8:08:70:df:9a:c8:5a:
         80:58:2a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:07:56 2026 by rpki-client