Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08cd570-7f65-4173-91cf-6ec61555844f/7c4c658a-5f7e-3fb0-a587-a880ec495a83.roa
File:                     7c4c658a-5f7e-3fb0-a587-a880ec495a83.roa (raw, json)
Hash identifier:          Hs32NX2CXTifOsuGm0CJl8tTxJcKqlr/GHDAFphVwmg=
Subject key identifier:   9B:ED:4C:12:5A:D0:36:8D:4B:5D:AA:38:F5:97:59:53:08:4F:C3:DD
Certificate issuer:       /CN=b08cd570-7f65-4173-91cf-6ec61555844f
Certificate serial:       010D0C9F4328584D8D8FEE0E6C4277BDD42F1CF0
Authority key identifier: F0:23:5E:2D:83:D4:AC:94:94:89:9F:1D:8A:7F:D7:DA:7A:92:4E:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08cd570-7f65-4173-91cf-6ec61555844f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08cd570-7f65-4173-91cf-6ec61555844f/7c4c658a-5f7e-3fb0-a587-a880ec495a83.roa
Signing time:             Sun 19 Apr 2026 01:00:23 +0000
ROA not before:           Sun 19 Apr 2026 01:00:23 +0000
ROA not after:            Sat 18 Jul 2026 01:00:23 +0000
asID:                     23342
IP address blocks:        63.135.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08cd570-7f65-4173-91cf-6ec61555844f/b08cd570-7f65-4173-91cf-6ec61555844f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08cd570-7f65-4173-91cf-6ec61555844f/b08cd570-7f65-4173-91cf-6ec61555844f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08cd570-7f65-4173-91cf-6ec61555844f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8d:8f:ee:0e:6c:42:77:bd:d4:2f:1c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b08cd570-7f65-4173-91cf-6ec61555844f
        Validity
            Not Before: Apr 19 01:00:23 2026 GMT
            Not After : Jul 18 01:00:23 2026 GMT
        Subject: CN=d9df656c-42b1-4fb4-a3c8-0abb81280787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:eb:ca:65:46:3e:c6:ec:6a:09:3c:e1:ca:0d:
                    14:82:ff:a6:0d:56:c8:cd:91:81:14:f9:4c:44:47:
                    b4:e0:2e:f4:7f:0f:21:00:55:b3:62:3c:93:91:39:
                    32:09:4f:09:36:fc:11:7e:5a:c8:bc:77:23:6d:f1:
                    e5:ae:8b:ef:99:57:b2:f9:c8:58:04:de:ef:bb:5a:
                    d8:d7:45:68:6a:6e:91:8a:38:d9:68:e5:2e:bd:22:
                    20:60:0b:de:c6:fc:65:38:1e:d0:cf:33:2b:47:fa:
                    a0:3b:87:fc:34:d0:3c:02:0a:5c:ee:77:d9:bd:43:
                    85:f4:fa:1e:fa:17:0f:84:61:77:48:38:11:c2:e2:
                    1c:41:f8:33:94:e8:e7:ad:04:e1:d0:52:52:51:c1:
                    2c:f5:3c:d0:cc:b2:6c:63:cc:d5:2a:d6:63:3f:fa:
                    77:a2:a7:56:8c:ff:42:b9:a4:ca:bf:21:10:8c:c3:
                    3d:21:5a:4c:66:1a:9b:42:3d:17:52:19:34:1e:f4:
                    cf:ff:40:44:2b:71:95:8e:14:72:0c:c1:b7:0b:3d:
                    90:91:20:fa:15:62:95:2f:4b:50:e8:23:95:41:ae:
                    18:a8:d8:19:35:33:da:f4:fe:51:dd:c5:18:9a:5a:
                    1c:b3:82:de:33:06:1a:a5:a3:97:20:d9:e7:a1:ca:
                    13:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:ED:4C:12:5A:D0:36:8D:4B:5D:AA:38:F5:97:59:53:08:4F:C3:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08cd570-7f65-4173-91cf-6ec61555844f/7c4c658a-5f7e-3fb0-a587-a880ec495a83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08cd570-7f65-4173-91cf-6ec61555844f/b08cd570-7f65-4173-91cf-6ec61555844f.crl

            X509v3 Authority Key Identifier:
                keyid:F0:23:5E:2D:83:D4:AC:94:94:89:9F:1D:8A:7F:D7:DA:7A:92:4E:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08cd570-7f65-4173-91cf-6ec61555844f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.135.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:51:ee:db:92:41:14:e4:5c:de:38:ce:76:18:c0:b2:89:5b:
         40:7d:df:eb:2a:3c:c2:5d:7c:98:9e:d1:5c:64:96:54:f2:74:
         5c:99:ed:7d:01:e5:c6:04:2c:fa:e5:ab:5c:e9:48:79:07:0a:
         b8:1a:2e:c2:fe:1e:b7:ad:8d:af:6d:ec:c5:a6:cc:e4:e2:62:
         9d:6e:75:5c:81:df:c1:9c:02:18:d0:32:34:0d:be:66:c1:79:
         89:f3:f9:5d:0d:b3:11:d9:bc:73:15:bb:9b:9f:75:93:ac:73:
         1f:f4:67:b6:5c:80:2b:ff:87:16:79:77:d3:35:b3:4b:a1:87:
         d2:d8:19:ca:d7:17:e4:5e:e8:1b:04:34:62:47:6b:48:43:11:
         7c:bd:7a:90:09:99:85:65:c7:e6:d8:9a:46:80:75:c4:14:b9:
         35:c4:b3:bd:21:84:38:8c:5d:92:ad:58:0c:a3:5f:73:1e:52:
         1f:3a:3b:02:76:1f:02:d8:08:6a:30:ce:e1:0a:6f:95:29:cb:
         07:bb:20:de:85:dc:ce:22:34:e1:07:7e:89:6b:0a:69:ca:eb:
         1e:60:df:a4:5b:51:01:ac:4a:83:40:36:9c:a8:3f:28:2b:20:
         ca:90:50:99:b6:98:de:b3:fd:bc:c3:37:2a:1a:8b:35:0a:d7:
         48:20:85:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:16:18 2026 by rpki-client