Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/96413ef8-4a4d-3241-8c93-a1a56d592410.roa
File:                     96413ef8-4a4d-3241-8c93-a1a56d592410.roa (raw, json)
Hash identifier:          IVD/bHX9/ztASHkxcE5hR91ieyXce+2OxRzJ3P710x0=
Subject key identifier:   59:79:17:6E:CE:83:D2:69:A0:38:A6:C5:13:23:02:81:C1:21:E8:FA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B4A4737C59CBD87A2CA472480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/96413ef8-4a4d-3241-8c93-a1a56d592410.roa
Signing time:             Tue 23 Sep 2025 13:00:40 +0000
ROA not before:           Tue 23 Sep 2025 13:00:40 +0000
ROA not after:            Mon 22 Dec 2025 14:00:40 +0000
asID:                     6984
IP address blocks:        63.26.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4a:47:37:c5:9c:bd:87:a2:ca:47:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 23 13:00:40 2025 GMT
            Not After : Dec 22 14:00:40 2025 GMT
        Subject: CN=3a1beef0-691c-4ec1-9824-09aeb3758934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f9:0a:97:3d:67:4c:fd:ca:ff:b8:fd:13:57:
                    75:50:92:db:13:a1:31:8f:ef:a4:fc:33:61:b1:2a:
                    8b:87:81:96:65:94:1b:bf:0e:c5:94:eb:2c:7a:23:
                    6a:66:29:8f:4e:7c:9d:fe:c0:81:c0:3f:89:43:87:
                    f2:9c:bc:a6:2d:2a:a2:99:a7:62:6e:23:a3:c7:95:
                    3b:79:46:8c:fd:e2:b1:3f:ba:1b:ba:18:b1:64:df:
                    8e:24:9e:07:7a:e7:63:ae:55:12:81:6d:80:ad:4f:
                    d2:52:56:68:67:e6:e1:3d:21:ae:6c:98:c0:12:d7:
                    57:8a:a8:b1:c6:2d:11:fe:d8:a4:12:25:98:67:f9:
                    1f:b8:1a:a4:33:a6:05:63:9b:c1:70:2e:e0:7a:0b:
                    e6:94:32:4a:e0:bf:86:ab:83:0d:7c:63:48:97:4b:
                    e3:75:37:36:a3:66:0f:36:cd:8e:61:de:ac:dd:76:
                    ed:22:b5:7c:47:d5:0e:5f:e0:5a:c3:cd:ce:53:48:
                    96:71:a7:94:a3:03:20:17:42:c4:b3:fb:74:84:30:
                    5d:96:c5:be:44:49:f0:e3:5e:4a:2f:53:f4:c8:83:
                    cc:72:fb:7f:1d:5a:58:7d:87:0d:b3:73:93:70:12:
                    df:04:bd:dc:c8:66:75:f7:53:c1:01:03:89:90:bb:
                    74:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:79:17:6E:CE:83:D2:69:A0:38:A6:C5:13:23:02:81:C1:21:E8:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/96413ef8-4a4d-3241-8c93-a1a56d592410.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.26.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:89:ec:46:88:92:7b:21:52:3a:38:96:9f:f4:a7:e5:cf:3d:
         08:10:fa:d7:10:a6:80:91:01:44:22:55:01:00:8b:a5:88:fc:
         7b:2e:f3:ea:49:c0:e5:de:0f:4a:43:84:47:34:20:db:6c:1c:
         ba:96:9d:7b:5b:24:cb:14:1e:b9:a9:2c:0f:fc:4c:33:85:6e:
         52:99:52:26:9e:a8:52:da:95:33:4f:b4:9c:3b:bd:08:27:eb:
         af:78:b2:23:8b:f3:e5:89:50:95:8c:f4:6d:dc:ac:e3:7e:1b:
         6c:ee:60:37:9c:10:39:8a:2b:5d:a4:a5:95:1b:bb:94:5d:89:
         4c:ab:15:85:92:fe:1e:ed:55:20:26:75:24:02:a1:8f:b0:74:
         9d:1e:18:15:33:6b:67:08:ab:e0:ea:f4:58:ae:2f:e0:45:8e:
         bb:2a:db:c1:e0:70:76:b2:b0:42:58:69:cc:30:cd:1a:1c:4c:
         98:70:27:58:33:b8:45:c4:6e:fe:5f:b3:b2:1b:11:43:a8:1f:
         80:da:d5:97:35:c5:9d:9c:94:f6:82:f0:a6:e0:82:c8:1a:0d:
         55:36:b8:bc:02:bf:80:1c:19:77:47:3b:47:65:6b:6c:91:b2:
         95:fc:3a:21:ee:16:4f:1a:3e:89:ed:8d:51:62:72:72:ab:cf:
         c6:9b:a9:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRzfFnL2HospHJIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk
M2ExYmVlZjAtNjkxYy00ZWMxLTk4MjQtMDlhZWIzNzU4OTM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPkKlz1nTP3K/7j9E1d1UJLbE6Exj++k/DNh
sSqLh4GWZZQbvw7FlOsseiNqZimPTnyd/sCBwD+JQ4fynLymLSqimadibiOjx5U7
eUaM/eKxP7obuhixZN+OJJ4HeudjrlUSgW2ArU/SUlZoZ+bhPSGubJjAEtdXiqix
xi0R/tikEiWYZ/kfuBqkM6YFY5vBcC7gegvmlDJK4L+Gq4MNfGNIl0vjdTc2o2YP
Ns2OYd6s3XbtIrV8R9UOX+Baw83OU0iWcaeUowMgF0LEs/t0hDBdlsW+REnw415K
L1P0yIPMcvt/HVpYfYcNs3OTcBLfBL3cyGZ191PBAQOJkLt0twIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFl5F27Og9JpoDimxRMjAoHBIej6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTY0MTNlZjgtNGE0ZC0z
MjQxLThjOTMtYTFhNTZkNTkyNDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPxoBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGWJ7EaIknshUjo4lp/0p+XPPQgQ+tcQpoCRAUQiVQEAi6WI/Hsu8+pJ
wOXeD0pDhEc0INtsHLqWnXtbJMsUHrmpLA/8TDOFblKZUiaeqFLalTNPtJw7vQgn
6694siOL8+WJUJWM9G3crON+G2zuYDecEDmKK12kpZUbu5RdiUyrFYWS/h7tVSAm
dSQCoY+wdJ0eGBUza2cIq+Dq9FiuL+BFjrsq28HgcHaysEJYacwwzRocTJhwJ1gz
uEXEbv5fs7IbEUOoH4Da1Zc1xZ2clPaC8KbggsgaDVU2uLwCv4AcGXdHO0dla2yR
spX8OiHuFk8aPontjVFicnKrz8abqak=
-----END CERTIFICATE-----
Generated at Fri Oct 10 20:01:07 2025 by rpki-client