Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS63199.roa
File:                     AS63199.roa (raw, json)
Hash identifier:          IICCa3pEADAziplqrLZ/iObkMWNBGmTnTgRZQYnvxRw=
Subject key identifier:   FA:31:5A:81:C9:87:A1:62:49:08:37:44:2C:A3:A7:FB:0E:58:62:66
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       3235AD4A67167F5F510CB9452EB13A4FED1BB4FF
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS63199.roa
Signing time:             Tue 11 Nov 2025 10:14:20 +0000
ROA not before:           Tue 11 Nov 2025 10:09:20 +0000
ROA not after:            Tue 10 Nov 2026 10:14:20 +0000
asID:                     63199
IP address blocks:        64.50.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 13 Nov 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:35:ad:4a:67:16:7f:5f:51:0c:b9:45:2e:b1:3a:4f:ed:1b:b4:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov 11 10:09:20 2025 GMT
            Not After : Nov 10 10:14:20 2026 GMT
        Subject: CN=FA315A81C987A162490837442CA3A7FB0E586266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:94:91:50:63:90:3e:8c:3b:ba:8f:3e:6f:d4:
                    f0:fb:04:b9:36:1d:1f:75:96:9a:fb:9e:1c:47:4b:
                    79:e5:93:00:bb:9b:00:15:62:a1:37:f8:6f:91:72:
                    ab:cc:f4:b1:5b:c6:89:00:a9:db:d6:65:bf:67:8e:
                    07:f7:9f:c4:1b:da:8b:fb:83:4b:a0:eb:c6:52:8e:
                    d0:c8:03:35:c8:11:df:d4:e7:07:af:38:16:67:79:
                    0e:35:b0:af:1c:c6:53:6d:6d:86:25:22:bf:1c:ce:
                    2d:53:23:e0:ce:ba:fc:8b:82:6f:b9:d2:96:40:72:
                    1f:10:c0:a7:7d:09:ea:d1:22:f1:5d:30:63:94:9c:
                    9a:87:39:2f:b8:0b:7a:5b:af:7e:33:a5:99:3b:8d:
                    d6:97:cc:d7:06:0b:8b:67:95:fa:73:c9:9e:e6:b3:
                    d9:7e:04:60:a2:dd:00:e1:b1:17:ef:8f:5f:51:50:
                    46:69:38:a6:51:aa:92:7d:61:cd:7d:02:a1:16:30:
                    56:dd:3f:f7:05:30:59:b3:60:15:f8:8c:c5:4b:ea:
                    25:55:65:be:fa:3b:2f:c8:52:6e:ae:02:5d:b4:4d:
                    b1:33:ee:27:5e:33:24:f9:f8:79:44:10:28:3d:e8:
                    53:b1:68:8b:ab:01:dc:ab:d8:1d:5f:fa:95:38:1e:
                    6c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:31:5A:81:C9:87:A1:62:49:08:37:44:2C:A3:A7:FB:0E:58:62:66
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS63199.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:78:8e:b9:95:20:df:1f:e7:2b:e2:f5:f6:81:97:3a:16:45:
         f2:32:1c:fa:48:58:c9:4a:b9:33:02:40:7c:78:16:fe:89:ed:
         73:b1:54:50:58:49:d6:e4:59:83:fe:ad:7d:8c:cd:a3:c0:56:
         f3:45:3d:6d:20:7f:83:95:5d:40:ce:a2:28:79:4d:a5:a7:56:
         e2:86:27:1b:b4:f8:c9:38:12:6b:67:4e:2e:51:b0:ce:bc:03:
         b8:c4:30:d8:26:bf:8d:fd:4a:f2:49:e6:ba:2f:d7:56:84:ab:
         f8:1e:94:6b:8c:e2:0f:47:5a:78:b5:5a:49:0e:17:5a:34:97:
         69:7e:36:47:33:8c:cd:8b:ca:b9:be:31:75:b7:45:b4:21:d7:
         af:8c:e2:d4:37:6a:45:70:41:7d:bc:ce:8e:29:17:e8:4e:f0:
         52:02:60:69:f2:01:2c:c9:f0:79:42:28:60:f5:da:38:f9:aa:
         77:4b:b3:1a:20:d5:b9:6d:4d:5f:0b:9d:f6:e0:9b:31:80:3f:
         f3:a5:02:80:84:00:c0:83:c9:34:65:f6:b9:ab:84:60:70:c7:
         21:f8:1e:36:d9:c3:76:1a:aa:9f:37:be:dd:fd:d4:3c:31:b8:
         86:c2:94:9d:e5:a3:4d:ca:a5:ed:fc:9d:a5:3a:33:ef:2e:d7:
         34:8f:88:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 12 23:41:07 2025 by rpki-client