Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a57f0c6f-e3ed-367d-9dc8-50ea1a1734e9.roa
File:                     a57f0c6f-e3ed-367d-9dc8-50ea1a1734e9.roa (raw, json)
Hash identifier:          q+/U/v2mQI2w+YSgAKusAB9FaDX3+bk0kf9aDWNefu4=
Subject key identifier:   C2:ED:5E:06:28:CD:B9:2B:61:71:44:FC:49:26:CD:E4:BF:44:73:4B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E8B24FA1EB824B07A225C0F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a57f0c6f-e3ed-367d-9dc8-50ea1a1734e9.roa
Signing time:             Sat 18 Jul 2026 21:00:11 +0000
ROA not before:           Sat 18 Jul 2026 21:00:11 +0000
ROA not after:            Fri 16 Oct 2026 21:00:11 +0000
asID:                     6167
IP address blocks:        63.42.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8b:24:fa:1e:b8:24:b0:7a:22:5c:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 18 21:00:11 2026 GMT
            Not After : Oct 16 21:00:11 2026 GMT
        Subject: CN=027f46ba-86b7-460b-affa-e6895923366f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:29:3d:58:37:93:75:6c:9a:c6:79:18:99:29:
                    a1:2d:90:ea:f5:58:17:42:9d:c3:bb:18:e1:46:db:
                    5a:47:1f:a1:7a:1a:92:35:17:8d:a4:f9:32:e4:51:
                    79:c2:3d:78:94:89:d3:f3:64:6e:de:4b:6a:c6:e0:
                    2a:6d:29:ef:c0:1c:bd:c2:ab:f3:a0:27:76:47:f2:
                    9c:91:c8:ea:11:d0:40:16:84:9c:f3:37:f4:a8:4f:
                    24:de:8b:08:e3:76:0e:b4:bb:5d:bf:75:ac:2f:d1:
                    3f:61:e6:d2:02:4d:a4:ea:f6:7d:96:6d:2e:08:32:
                    05:c4:fe:dd:07:6c:90:ba:56:36:6b:d7:fb:6c:da:
                    c7:88:f5:24:be:2c:78:51:f3:90:d0:e1:75:a6:21:
                    c1:21:79:f7:6c:24:98:64:47:2c:22:d0:a1:86:1e:
                    6e:be:3d:ac:48:94:ab:ab:dd:83:af:29:1e:a9:13:
                    4b:e5:34:ed:25:7f:1b:4a:e8:dd:0b:e3:b5:e6:6d:
                    18:34:3a:15:94:56:c3:f4:2a:56:0f:ef:e3:fe:5a:
                    88:73:cd:88:e9:4b:e3:42:19:c2:1d:e8:21:fb:62:
                    45:06:55:f9:a7:e9:b1:3a:2e:89:78:4a:b9:7b:87:
                    a2:68:24:f8:f9:a2:c0:81:43:69:af:b9:a8:cf:82:
                    65:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:ED:5E:06:28:CD:B9:2B:61:71:44:FC:49:26:CD:E4:BF:44:73:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a57f0c6f-e3ed-367d-9dc8-50ea1a1734e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.42.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:13:57:e7:8b:08:3e:ad:4d:7c:94:3d:4b:02:2f:91:15:05:
         d7:15:bf:34:d8:a5:21:00:42:7b:ff:1b:7f:f3:de:8f:62:5d:
         99:72:20:a0:43:62:af:48:d1:f7:be:d6:63:00:d7:8f:23:db:
         c9:89:f5:48:3e:ee:31:8b:44:c4:8c:39:bf:6f:60:a3:27:bb:
         14:fb:60:40:24:7c:75:30:5b:10:d6:d1:0d:e6:ec:6c:60:cc:
         d5:df:a7:26:5b:ec:f9:9d:26:ae:69:8e:a0:04:a6:08:26:7d:
         9a:07:f5:6a:49:ee:09:8e:2f:3b:24:f2:ed:9b:ec:e9:89:86:
         f0:31:10:2c:e6:82:a4:b0:2e:53:e6:8e:88:48:2a:d1:c2:c8:
         ca:59:05:07:52:00:d7:63:0b:e4:1d:9a:19:0d:77:50:13:74:
         cc:03:ae:f6:f6:03:41:28:42:5e:fd:68:11:bb:d7:f3:ab:05:
         fa:39:25:91:f5:0a:88:66:81:df:93:18:2b:8e:e6:d9:92:f4:
         98:9d:4c:7c:5b:ed:d9:17:70:f8:2d:3c:15:da:7f:5b:7e:71:
         30:c9:33:51:bc:81:a8:bd:9d:58:35:1a:44:8a:4f:94:2c:f9:
         92:6a:6a:6f:ae:4c:6a:12:0c:fc:75:b4:20:93:ec:4b:16:82:
         db:5b:39:3e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE6LJPoeuCSweiJcDwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDcxODIxMDAxMVoXDTI2MTAxNjIxMDAxMVowLzEtMCsGA1UEAxMk
MDI3ZjQ2YmEtODZiNy00NjBiLWFmZmEtZTY4OTU5MjMzNjZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCk9WDeTdWyaxnkYmSmhLZDq9VgXQp3Duxjh
RttaRx+hehqSNReNpPky5FF5wj14lInT82Ru3ktqxuAqbSnvwBy9wqvzoCd2R/Kc
kcjqEdBAFoSc8zf0qE8k3osI43YOtLtdv3WsL9E/YebSAk2k6vZ9lm0uCDIFxP7d
B2yQulY2a9f7bNrHiPUkvix4UfOQ0OF1piHBIXn3bCSYZEcsItChhh5uvj2sSJSr
q92DrykeqRNL5TTtJX8bSujdC+O15m0YNDoVlFbD9CpWD+/j/lqIc82I6UvjQhnC
Hegh+2JFBlX5p+mxOi6JeEq5e4eiaCT4+aLAgUNpr7moz4JlpwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMLtXgYozbkrYXFE/EkmzeS/RHNLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTU3ZjBjNmYtZTNlZC0z
NjdkLTlkYzgtNTBlYTFhMTczNGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAPyowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAUxNX54sIPq1NfJQ9SwIvkRUF1xW/NNilIQBCe/8bf/Pej2JdmXIgoENi
r0jR977WYwDXjyPbyYn1SD7uMYtExIw5v29goye7FPtgQCR8dTBbENbRDebsbGDM
1d+nJlvs+Z0mrmmOoASmCCZ9mgf1aknuCY4vOyTy7Zvs6YmG8DEQLOaCpLAuU+aO
iEgq0cLIylkFB1IA12ML5B2aGQ13UBN0zAOu9vYDQShCXv1oEbvX86sF+jklkfUK
iGaB35MYK47m2ZL0mJ1MfFvt2Rdw+C08Fdp/W35xMMkzUbyBqL2dWDUaRIpPlCz5
kmpqb65MahIM/HW0IJPsSxaC21s5Pg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:54:31 2026 by rpki-client