Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/14a92ac9-1e92-3fe1-a57d-98250640bcc7.roa
File:                     14a92ac9-1e92-3fe1-a57d-98250640bcc7.roa (raw, json)
Hash identifier:          kvPjaePyNeL1/QduLQU6QwtZAYxH29rJ05TrBQOU6C4=
Subject key identifier:   BF:59:9C:6B:D4:D1:EE:8A:C0:95:23:3B:27:B6:38:B2:24:B5:7A:72
Certificate issuer:       /CN=c3636b71-fd09-4ee9-9f3e-552e5356a4fc
Certificate serial:       010D0C9F4328584D575EBA8747D1FFE7677E4100
Authority key identifier: 79:6D:09:6B:34:46:E0:30:13:14:A7:0C:7E:66:B3:C3:4B:27:BC:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/14a92ac9-1e92-3fe1-a57d-98250640bcc7.roa
Signing time:             Mon 30 Mar 2026 15:07:46 +0000
ROA not before:           Mon 30 Mar 2026 15:07:46 +0000
ROA not after:            Sun 28 Jun 2026 15:07:46 +0000
asID:                     23498
IP address blocks:        63.141.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:5e:ba:87:47:d1:ff:e7:67:7e:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3636b71-fd09-4ee9-9f3e-552e5356a4fc
        Validity
            Not Before: Mar 30 15:07:46 2026 GMT
            Not After : Jun 28 15:07:46 2026 GMT
        Subject: CN=81681b92-0d92-4187-86c6-f79d08bfe32e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:05:e3:d7:bf:91:3c:0f:eb:2a:17:70:ea:ca:
                    9e:9b:fc:58:25:cf:db:7d:e4:6f:25:70:f1:ef:e5:
                    4d:e3:5f:ca:fe:98:86:cf:69:1f:3d:1f:a3:e8:f1:
                    af:84:55:d3:e3:c5:cc:f3:99:4e:c2:3e:fc:a5:d7:
                    21:dd:cf:26:12:ea:96:d7:f0:eb:65:ca:0c:ce:a9:
                    a7:d8:d8:90:ac:84:fd:c6:61:4f:3d:76:88:41:8b:
                    ac:25:37:a4:18:99:c2:9b:b9:7c:2c:2a:ba:3a:5c:
                    36:34:fd:20:a8:7a:66:a6:4e:28:44:ff:b5:45:a9:
                    5b:ae:d5:43:e4:02:dc:f4:40:a9:5d:af:8a:82:fb:
                    bd:3e:1b:15:90:a1:cf:6e:28:9a:d0:3f:2e:e4:01:
                    59:71:20:7b:e5:c4:2f:66:b9:b2:de:82:d2:38:3d:
                    73:60:e7:e1:b2:6f:d2:ce:73:5e:b9:b7:be:b9:d4:
                    69:b0:61:f3:80:a3:55:d3:52:e3:12:9b:83:53:a4:
                    f0:58:a5:ff:29:36:bb:ee:c1:37:b3:89:93:89:75:
                    92:35:1b:5b:05:af:47:6a:22:68:2a:63:ee:23:39:
                    63:55:f9:54:ee:19:5f:6b:2c:3e:99:52:a0:75:d2:
                    76:48:fc:a7:cb:0a:a5:ec:1d:57:fd:fb:b5:72:bf:
                    08:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:59:9C:6B:D4:D1:EE:8A:C0:95:23:3B:27:B6:38:B2:24:B5:7A:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/14a92ac9-1e92-3fe1-a57d-98250640bcc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.crl

            X509v3 Authority Key Identifier:
                keyid:79:6D:09:6B:34:46:E0:30:13:14:A7:0C:7E:66:B3:C3:4B:27:BC:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.141.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:0e:43:d2:dc:b8:a7:da:02:a9:79:a9:cb:0a:f4:ed:57:bf:
         f1:fa:f2:e9:b7:4d:8b:d6:9a:ad:3c:fe:cb:55:dd:bb:9b:7b:
         06:35:4e:90:c7:11:0b:31:7b:8a:b1:52:3e:6c:c6:12:b0:b0:
         ff:a5:e8:01:f4:62:e5:ba:60:28:f3:6e:ac:45:7c:a7:c5:73:
         22:d4:70:47:6c:21:aa:4b:e2:ce:59:04:48:5a:86:ec:ed:ef:
         2f:80:d3:d7:37:61:97:53:10:69:92:50:dd:7e:92:a4:4c:c6:
         60:3b:a2:d0:91:a0:e8:fc:ca:69:7a:4b:af:87:c4:bd:da:78:
         af:51:3a:dd:96:85:9a:72:f4:2e:ca:be:a9:64:3f:16:be:1d:
         2c:51:df:74:23:0d:7e:20:1e:f1:28:aa:ee:c6:1e:3c:d7:49:
         fa:99:7d:ca:84:e8:2d:6e:c2:3b:da:e1:2d:69:d1:86:83:c5:
         60:1b:06:2d:12:5f:ed:fd:58:18:8d:97:bc:28:e4:03:44:7f:
         ae:b6:9b:39:3e:7d:25:af:55:13:d7:35:f3:7f:dc:c0:e4:1b:
         bb:a0:99:1b:84:fe:1d:24:e2:f2:f5:66:d7:9f:1e:a1:32:b2:
         2c:c2:ac:de:93:55:63:2a:46:fc:71:04:f5:3d:93:85:45:f8:
         fa:39:73:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 09:28:23 2026 by rpki-client