Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a57f0c6f-e3ed-367d-9dc8-50ea1a1734e9.roa
File:                     a57f0c6f-e3ed-367d-9dc8-50ea1a1734e9.roa (raw, json)
Hash identifier:          SUuEzVsigoOSsPZZpc+bEGyqB/p6vl/vcGrNYzUYbrY=
Subject key identifier:   1A:18:E3:87:56:17:0D:04:9B:40:CD:91:E0:9A:6A:2F:19:06:31:8A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DAAE0386D8995A4E861C18C00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a57f0c6f-e3ed-367d-9dc8-50ea1a1734e9.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     6167
IP address blocks:        63.42.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:38:6d:89:95:a4:e8:61:c1:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=0478800a-257a-4833-abee-1970a15335a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:58:3a:6f:3f:00:01:50:14:1c:90:80:44:6c:
                    f5:f9:15:a7:f7:24:14:15:40:06:7d:df:eb:97:14:
                    27:da:27:12:8c:61:ae:10:67:fb:7f:25:7e:9b:09:
                    0e:3c:87:ee:c5:56:81:20:0a:ed:9e:03:42:c9:f4:
                    2e:ca:5c:a7:f8:73:55:b5:4b:72:27:fd:12:4d:63:
                    bd:d9:74:38:b5:d5:5b:5d:24:32:cd:f5:e1:b5:59:
                    e3:1a:26:fc:c3:ad:bc:2f:93:ea:38:e8:22:9e:e5:
                    ee:06:5a:ad:78:47:51:d6:12:7e:69:44:d7:cb:7b:
                    fc:3b:24:2d:10:b9:4c:27:f2:fd:24:d7:7a:82:d5:
                    9b:20:90:44:6f:e1:6f:a8:c1:e1:eb:2e:5d:e3:db:
                    17:42:5c:11:af:31:20:c8:6d:c2:f3:a0:39:6b:f2:
                    8b:7f:ea:03:dc:c4:8d:d5:6d:6d:47:3c:b7:38:d1:
                    28:52:0c:2b:9a:61:73:08:43:4a:c5:73:f5:83:0d:
                    d2:91:a7:8d:15:77:25:7c:e6:09:6e:9b:a3:e0:7a:
                    63:34:46:aa:5c:fd:f5:af:cb:d3:f5:2c:b8:4c:98:
                    31:85:20:3d:dd:2e:69:fe:72:de:d5:74:3e:51:9b:
                    a7:b1:66:c2:cd:f2:0d:11:b6:ee:e8:fc:85:95:33:
                    d8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:18:E3:87:56:17:0D:04:9B:40:CD:91:E0:9A:6A:2F:19:06:31:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a57f0c6f-e3ed-367d-9dc8-50ea1a1734e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.42.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:17:32:2a:54:8e:76:bf:5a:e0:73:9e:e6:b5:8c:09:93:2b:
         19:e9:db:b0:75:01:ae:81:4c:5f:75:ee:60:0a:35:c7:29:af:
         65:e5:0b:9c:c7:4c:d3:1e:7c:83:17:ff:b5:46:89:c9:67:d9:
         46:28:03:14:f4:f2:cc:03:51:e9:25:6d:5a:26:0a:b8:f0:b8:
         c3:53:77:24:a9:68:ac:18:cb:4a:27:c2:3b:9e:99:a3:29:ac:
         e0:42:f6:76:52:e6:a2:39:cf:97:3e:30:36:22:34:4f:ae:e9:
         42:0c:d2:4c:20:e7:ee:a3:5e:e0:ff:69:01:2f:51:84:26:ec:
         f9:40:35:4c:05:1e:8f:b1:a8:60:51:fb:c3:70:67:22:d8:b0:
         dc:64:ad:7c:37:86:b6:cd:95:21:8f:69:04:ec:e2:1e:e9:3b:
         6a:b4:da:c0:1f:a4:b0:ee:8b:ae:44:eb:ee:a0:56:46:0a:22:
         a8:d7:ee:05:97:07:fc:66:ea:49:49:e1:01:0a:dd:a5:d9:d1:
         a6:90:41:93:f0:6a:c7:82:ef:77:c0:c6:40:7b:33:3c:6c:7c:
         43:f0:81:5d:6a:be:23:1d:6c:0d:5b:47:85:8a:1c:cf:80:0d:
         52:e1:aa:58:99:d7:f8:5d:85:0a:a1:a1:35:67:2b:75:50:03:
         29:af:a1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:02:26 2026 by rpki-client