Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa/63c69b13-d3ee-3b55-9f48-8c17fd7ba270.roa
File:                     63c69b13-d3ee-3b55-9f48-8c17fd7ba270.roa (raw, json)
Hash identifier:          0agMZ5hzAPeSmGBGZx1EU4/CsX5ULhSRY4hp2ApkVQ4=
Subject key identifier:   C0:68:16:C3:FB:79:C9:D2:E6:11:63:9D:EC:40:E0:74:BB:76:62:D0
Certificate issuer:       /CN=be42cc7b-1fa4-4bd5-abf6-525f95b711aa
Certificate serial:       010D0C9F4328584FAB1199687C1105C414A32590
Authority key identifier: FD:AD:82:F2:F0:88:F0:D9:31:07:AB:42:02:2D:A1:70:00:38:54:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa/63c69b13-d3ee-3b55-9f48-8c17fd7ba270.roa
Signing time:             Fri 30 Oct 2026 00:14:08 +0000
ROA not before:           Fri 30 Oct 2026 00:14:08 +0000
ROA not after:            Thu 28 Jan 2027 01:14:08 +0000
asID:                     13860
IP address blocks:        148.159.150.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa/be42cc7b-1fa4-4bd5-abf6-525f95b711aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa/be42cc7b-1fa4-4bd5-abf6-525f95b711aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:ab:11:99:68:7c:11:05:c4:14:a3:25:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be42cc7b-1fa4-4bd5-abf6-525f95b711aa
        Validity
            Not Before: Oct 30 00:14:08 2026 GMT
            Not After : Jan 28 01:14:08 2027 GMT
        Subject: CN=63df93d0-1a7b-41c7-87c1-a03c9a50261e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:6f:18:e6:5f:f3:d6:cf:5b:8c:df:d5:fd:c0:
                    ef:03:b2:d1:79:6a:cb:84:c9:df:16:11:4e:da:af:
                    65:60:b2:29:1d:b9:f5:91:8e:c4:72:57:f1:3b:78:
                    8a:b1:23:ef:26:66:22:09:be:61:a4:d9:c9:53:e0:
                    51:2d:11:1f:43:37:30:f2:92:44:fc:27:1f:ed:b2:
                    54:e4:f4:8f:52:d1:2f:ee:75:58:8b:90:fb:a8:a1:
                    31:1c:20:76:9b:98:98:7a:a6:db:16:be:74:3e:44:
                    7c:ae:de:f6:2c:b9:1f:eb:39:40:4a:be:97:c9:31:
                    ca:f5:80:08:ae:36:c1:d6:05:d0:35:77:0f:a0:27:
                    96:16:4f:2f:c1:61:4a:8e:95:d5:75:8a:2d:4a:25:
                    1b:d9:d9:28:64:91:b7:27:87:a6:59:c5:67:b8:5a:
                    7f:b4:65:3b:aa:f4:86:df:34:bc:71:10:85:da:f0:
                    bf:4f:d5:7f:82:f3:35:ef:93:4b:94:6d:58:a0:2e:
                    29:e7:8f:d2:a1:c7:8a:99:14:f3:32:eb:58:86:7a:
                    97:92:eb:88:55:62:d6:7e:f2:b5:c8:c5:61:8d:ab:
                    29:28:42:7e:95:82:0d:4c:11:4d:b0:32:af:be:9a:
                    ad:64:bf:d6:6a:55:b4:0d:bb:56:2b:af:cb:31:a5:
                    95:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:68:16:C3:FB:79:C9:D2:E6:11:63:9D:EC:40:E0:74:BB:76:62:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa/63c69b13-d3ee-3b55-9f48-8c17fd7ba270.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa/be42cc7b-1fa4-4bd5-abf6-525f95b711aa.crl

            X509v3 Authority Key Identifier:
                keyid:FD:AD:82:F2:F0:88:F0:D9:31:07:AB:42:02:2D:A1:70:00:38:54:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.159.150.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:5b:67:5a:16:6d:4e:4a:41:37:ab:d5:a7:2c:8e:fb:97:87:
         22:1c:22:11:84:e1:b2:70:19:0a:af:4a:45:79:3a:21:ec:bd:
         58:ae:c9:25:70:0b:a8:ca:d2:64:98:68:07:4e:27:22:d2:01:
         e4:4f:e2:81:4c:6e:97:a9:7d:aa:44:c5:20:eb:9b:6b:4b:b1:
         89:3f:c4:15:55:02:3d:01:93:58:38:34:1d:ed:44:cf:d0:8d:
         58:71:7f:27:c3:3c:de:d3:85:55:93:9b:eb:0c:77:7b:24:3a:
         aa:7e:ca:f5:95:2d:87:cb:20:48:3f:b9:cd:69:77:ac:19:d5:
         a6:59:63:aa:56:c6:f3:47:4a:03:2a:be:22:32:19:e1:9d:06:
         19:fa:64:04:be:eb:64:2e:4c:7b:3d:6e:1d:01:f8:16:68:bd:
         fb:2b:2a:8d:cc:e8:45:95:0c:19:62:a4:ae:d1:d9:ed:7b:45:
         2e:54:e5:d7:bb:a8:66:6a:2c:f3:cd:d6:db:b5:68:cb:af:25:
         b4:c9:b4:eb:ea:ee:c4:fc:48:18:70:4a:04:af:74:a1:f1:5a:
         7e:45:f8:01:43:4e:a4:f1:22:41:d3:a0:8b:5b:7e:4d:a8:c5:
         37:d0:26:4d:8f:e5:fb:7d:73:07:69:b0:eb:56:98:b7:8a:92:
         08:bf:ce:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:31:46 2026 by rpki-client