Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7a10e30a-1e66-3d95-99a6-10e997ffb61d.roa
File:                     7a10e30a-1e66-3d95-99a6-10e997ffb61d.roa (raw, json)
Hash identifier:          98D2lchY+/SZo8CT9xJFWMy3bvnU3DFmTtDnrUssbnQ=
Subject key identifier:   4F:F6:A2:22:C6:A9:87:C5:1F:83:F8:BF:EA:0A:3A:C9:21:8F:BA:09
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D0A779FB2E0C886475B6F8C80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7a10e30a-1e66-3d95-99a6-10e997ffb61d.roa
Signing time:             Tue 03 Mar 2026 02:00:32 +0000
ROA not before:           Tue 03 Mar 2026 02:00:32 +0000
ROA not after:            Mon 01 Jun 2026 01:00:32 +0000
asID:                     6984
IP address blocks:        63.27.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0a:77:9f:b2:e0:c8:86:47:5b:6f:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  3 02:00:32 2026 GMT
            Not After : Jun  1 01:00:32 2026 GMT
        Subject: CN=eb5c82e9-41cb-457d-9abc-e8d670327901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:98:eb:45:39:24:4f:ca:38:d7:12:6a:db:a3:
                    a0:f3:9d:76:e7:65:ef:74:ec:6b:45:5d:01:ec:24:
                    3c:6c:3e:93:5f:ae:2a:c3:ae:73:f0:26:7b:b8:42:
                    5d:8e:bb:dd:b7:ea:24:31:e6:c0:bb:c3:40:91:92:
                    40:1e:31:46:ae:38:33:fd:46:b7:45:0a:c3:0e:52:
                    c6:b8:62:52:25:32:c8:b3:87:51:7f:c3:d3:02:e7:
                    bf:18:74:ed:c1:6a:fd:55:d9:56:ba:77:6d:63:c1:
                    ab:c8:72:e6:f3:e9:51:bc:1e:ea:f7:d2:01:0a:8c:
                    49:28:ad:3a:7b:7b:2c:a3:92:76:8f:42:f6:42:9c:
                    84:1c:bb:90:0b:c7:b7:d3:be:95:be:58:f1:64:ec:
                    29:b7:cc:00:ed:fa:33:ba:4f:5f:87:d5:50:ee:76:
                    00:cc:88:76:c3:9f:50:cc:49:95:58:3f:a7:e3:57:
                    f0:90:70:3b:e1:7e:0a:ea:6b:c1:94:a8:a0:48:3e:
                    8e:20:22:35:56:36:b9:58:90:8a:4b:93:4d:4a:e6:
                    13:e3:ca:1b:6d:7a:14:d6:d9:83:f2:56:87:f3:49:
                    a1:91:bd:51:a7:2f:e4:ab:22:f4:43:fc:4d:a5:fa:
                    b6:ae:56:e3:a8:de:a0:ba:4e:7b:88:fe:74:04:0c:
                    cd:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F6:A2:22:C6:A9:87:C5:1F:83:F8:BF:EA:0A:3A:C9:21:8F:BA:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7a10e30a-1e66-3d95-99a6-10e997ffb61d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.27.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:85:36:b4:e7:0c:80:fa:fe:bd:a7:2b:3d:0c:23:0d:27:d0:
         7a:b4:de:76:1c:19:d4:19:dd:ff:6c:6e:b0:84:18:47:dc:7b:
         6b:d8:32:74:f2:e1:d9:56:11:2c:23:5c:8a:f7:88:d7:d5:ca:
         3b:d6:c4:bf:73:15:a9:14:cb:5a:2d:53:31:a4:e7:18:82:4e:
         eb:7f:b7:f1:3c:fc:cc:82:de:cb:b0:65:36:73:d7:cf:62:81:
         23:c5:ae:fd:34:83:70:74:d3:b4:9a:e3:ab:91:4e:19:73:e0:
         3d:e3:d2:2b:a4:fb:76:7a:68:93:7d:ac:9b:79:c2:54:33:10:
         1c:67:54:93:41:1a:85:ca:b6:24:7e:6c:96:46:4b:56:55:3b:
         1e:f8:39:45:2b:66:27:7b:64:c6:05:28:2d:4d:62:a2:b4:3f:
         bd:b6:48:bf:52:9b:d8:8d:da:83:17:c5:a6:95:40:59:09:66:
         18:31:1b:9e:2a:f1:3f:65:f3:70:6b:10:26:96:cf:46:4e:ad:
         46:a3:79:66:24:6b:e4:e4:98:bb:77:80:2c:35:f7:1b:cd:da:
         9b:58:b8:41:94:7c:61:1a:9b:81:93:52:94:78:a1:37:fd:46:
         33:6b:d2:f4:a6:79:f2:80:88:e4:dc:a7:ea:05:36:18:fc:1f:
         b2:d9:3c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:05:21 2026 by rpki-client