Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS63420.roa
File:                     AS63420.roa (raw, json)
Hash identifier:          3u3zvLLQkDd4sn4THvf6eNSiAM+x61933WBN9jyimaA=
Subject key identifier:   0F:06:B7:9D:41:90:B6:B6:74:55:C1:82:E2:34:62:6C:86:4B:D7:F2
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       61FABFD314B3B5B67E2871F5C5460D87155B65CF
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS63420.roa
Signing time:             Fri 02 Oct 2026 14:58:48 +0000
ROA not before:           Fri 02 Oct 2026 14:53:48 +0000
ROA not after:            Fri 01 Oct 2027 14:58:48 +0000
asID:                     63420
IP address blocks:        45.54.13.0/24 maxlen: 24
                          45.54.25.0/24 maxlen: 24
                          45.54.34.0/24 maxlen: 24
                          104.225.33.0/24 maxlen: 24
                          104.225.37.0/24 maxlen: 24
                          148.163.198.0/24 maxlen: 24
                          148.163.208.0/24 maxlen: 24
                          148.163.213.0/24 maxlen: 24
                          148.163.241.0/24 maxlen: 24
                          157.53.65.0/24 maxlen: 24
                          157.53.234.0/24 maxlen: 24
                          2606:80:55e::/48 maxlen: 48
                          2607:f740:e7::/48 maxlen: 48
                          2607:f740:e021::/48 maxlen: 48
                          2607:f740:e039::/48 maxlen: 48
                          2607:f740:e614::/48 maxlen: 48
                          2607:f740:e644::/48 maxlen: 48
                          2607:f740:e66b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 14:57:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:fa:bf:d3:14:b3:b5:b6:7e:28:71:f5:c5:46:0d:87:15:5b:65:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Oct  2 14:53:48 2026 GMT
            Not After : Oct  1 14:58:48 2027 GMT
        Subject: CN=0F06B79D4190B6B67455C182E234626C864BD7F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:10:88:ab:0c:e7:54:63:60:d8:72:23:e2:63:
                    20:c6:d3:2e:0d:81:d8:43:e8:19:91:13:dc:eb:0e:
                    5d:c6:73:ba:e9:09:bb:d9:4b:58:a5:f4:55:ac:e2:
                    63:a6:29:fe:22:89:69:b6:9d:24:9a:d8:0d:d2:ce:
                    61:c2:a1:e2:79:9b:00:25:bf:10:e7:bf:cd:a7:54:
                    1e:ee:6c:6c:5d:90:4d:42:14:d1:cc:9b:f4:88:2e:
                    64:6c:9c:16:f6:7c:3b:c3:28:d7:41:18:3e:fe:cd:
                    50:9b:62:be:53:b1:e3:3d:47:9a:3d:30:4f:6a:3f:
                    26:7a:43:a3:f6:5f:22:02:e5:2a:db:51:4c:d2:0e:
                    50:dd:2f:31:e8:4a:a2:9c:40:18:71:9d:86:78:63:
                    e0:6e:a5:3c:43:b4:7f:3f:04:64:ca:b1:7f:4d:88:
                    c6:6d:50:ce:e2:4d:44:af:a5:2d:e8:4f:fa:7f:d6:
                    93:01:06:4f:6b:e4:a5:6f:18:06:ec:b5:82:f5:38:
                    b6:8b:30:4a:dd:7b:06:98:12:50:c3:f8:a0:07:05:
                    6c:aa:58:78:5d:57:fd:f0:2a:67:01:46:76:70:f0:
                    1e:8a:7d:e4:31:02:ed:a5:53:28:16:66:c9:a4:1d:
                    c7:74:b0:7a:42:4d:08:f1:7f:b5:32:e7:96:d1:e3:
                    36:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:06:B7:9D:41:90:B6:B6:74:55:C1:82:E2:34:62:6C:86:4B:D7:F2
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS63420.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.54.13.0/24
                  45.54.25.0/24
                  45.54.34.0/24
                  104.225.33.0/24
                  104.225.37.0/24
                  148.163.198.0/24
                  148.163.208.0/24
                  148.163.213.0/24
                  148.163.241.0/24
                  157.53.65.0/24
                  157.53.234.0/24
                IPv6:
                  2606:80:55e::/48
                  2607:f740:e7::/48
                  2607:f740:e021::/48
                  2607:f740:e039::/48
                  2607:f740:e614::/48
                  2607:f740:e644::/48
                  2607:f740:e66b::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:7f:26:fe:59:76:66:37:f4:38:a2:d6:88:a6:85:c5:05:bc:
         da:cc:fa:d2:bc:75:f5:4b:b2:8f:62:70:17:d7:c7:27:6d:21:
         7a:0a:89:c2:29:b9:41:6f:f4:df:63:36:13:96:5a:2b:00:d4:
         fa:0e:f3:0d:c9:23:81:f4:ed:77:1c:cf:98:8f:24:3a:ff:90:
         85:7b:d6:4f:3a:9e:c7:09:e1:e1:0a:d4:dc:29:74:e5:ff:17:
         a4:07:16:de:7e:8e:df:0e:04:32:0f:f3:b8:45:7c:ec:5e:23:
         98:81:03:6e:e4:53:78:ff:8a:15:02:90:00:ea:31:6b:58:d7:
         3f:72:4f:38:68:c8:60:c5:63:04:ce:f1:d7:f6:90:44:41:78:
         ab:55:95:2d:88:74:bf:70:7f:c6:7e:a4:ee:57:6a:ab:5c:0b:
         64:82:2c:18:26:31:76:f2:61:37:54:39:15:0b:26:90:e8:1c:
         10:2f:42:34:de:4e:8e:03:20:39:91:7e:0a:46:8f:6c:69:b1:
         24:d6:00:11:f7:2e:aa:44:7d:bb:7e:55:e6:a6:4e:d5:f0:06:
         55:f6:05:d0:7e:b3:b9:2a:a0:2e:dd:ae:7f:fb:53:0d:0a:21:
         aa:b1:b3:f6:e6:00:52:12:9b:47:d9:bb:c8:7f:f0:28:60:01:
         d4:2d:f4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 01:29:12 2026 by rpki-client