Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/a7a0a537-a979-37b0-8aec-a06c4fe75751.roa
File:                     a7a0a537-a979-37b0-8aec-a06c4fe75751.roa (raw, json)
Hash identifier:          Ygmc3QbrlPqKu9avulSqqSuKvF+150nEQcciGtMNmp0=
Subject key identifier:   3B:B4:52:0D:2C:FB:98:48:F1:C0:A8:51:05:F2:78:01:2B:B1:80:7F
Certificate issuer:       /CN=80e43277-4490-4cc9-99ec-5726af08c8ab
Certificate serial:       010D0C9F4328584F0242251693FCD040E6FDEC50
Authority key identifier: F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/a7a0a537-a979-37b0-8aec-a06c4fe75751.roa
Signing time:             Sun 30 Aug 2026 13:00:11 +0000
ROA not before:           Sun 30 Aug 2026 13:00:11 +0000
ROA not after:            Sat 28 Nov 2026 14:00:11 +0000
asID:                     23520
IP address blocks:        63.245.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:02:42:25:16:93:fc:d0:40:e6:fd:ec:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e43277-4490-4cc9-99ec-5726af08c8ab
        Validity
            Not Before: Aug 30 13:00:11 2026 GMT
            Not After : Nov 28 14:00:11 2026 GMT
        Subject: CN=15e0ceda-c3e8-4c32-8313-b141eabe1f71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9b:04:0b:21:c6:3c:10:01:d1:52:41:98:b1:
                    7f:4a:cf:51:17:c7:e2:a4:6e:7a:45:00:71:ff:14:
                    af:4f:94:3e:4d:33:a3:5b:b7:48:67:da:43:4c:1d:
                    cf:df:d0:7b:27:09:10:b3:fe:c2:e3:1b:e9:32:a3:
                    68:8d:31:d9:9e:47:c4:e1:3a:5d:15:99:22:dc:ee:
                    15:45:fc:88:ec:2a:ba:8a:41:45:08:51:ac:b1:0e:
                    0a:b4:4a:44:ee:4c:6f:7a:85:f9:de:8c:9b:fb:e1:
                    f3:7b:ba:dd:ce:a2:22:28:57:ab:89:fe:44:9b:7a:
                    de:07:8d:b5:37:2b:bb:e9:6b:2f:70:eb:9f:89:ec:
                    22:48:0f:e3:ea:1c:b6:5b:d7:73:fd:37:ae:f9:03:
                    ba:a2:3b:1e:31:90:c0:18:56:2c:b6:aa:16:ad:f8:
                    76:37:b5:9c:36:b2:cf:2f:47:52:3e:88:2e:63:c7:
                    81:50:0a:43:0b:43:6f:a3:c8:39:f8:23:2d:cc:f2:
                    72:d6:e4:57:5a:3a:df:e9:f9:4d:63:63:dc:44:d7:
                    83:89:b8:e4:3d:38:63:3b:c8:8d:ab:ae:66:83:64:
                    5b:81:5b:a6:5c:8a:82:7c:03:86:58:6c:63:f8:e2:
                    9a:e4:62:91:f5:6a:2b:77:75:31:40:42:5b:1c:53:
                    f3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B4:52:0D:2C:FB:98:48:F1:C0:A8:51:05:F2:78:01:2B:B1:80:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/a7a0a537-a979-37b0-8aec-a06c4fe75751.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl

            X509v3 Authority Key Identifier:
                keyid:F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.245.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:e7:f0:77:a2:7c:27:fb:af:ba:5b:74:7d:21:54:a2:b9:83:
         41:79:c6:ad:f3:1f:31:54:8b:9c:ef:3c:b2:d0:98:c0:b8:fb:
         06:ac:da:80:87:ee:ad:2c:8e:b9:e2:be:f1:46:21:33:f1:b0:
         02:e3:d2:71:e0:e3:12:06:71:cf:a5:4c:ac:0a:21:98:37:c2:
         2f:18:24:78:70:bc:05:9a:b0:56:be:ca:63:e6:06:ce:c1:e1:
         68:15:20:37:ea:59:ad:fd:2d:69:b4:67:65:8f:54:6d:bc:3a:
         38:0d:b4:a4:90:e5:c0:30:c0:01:22:df:fa:e4:28:55:c1:52:
         02:f3:e4:b0:14:91:e8:b8:e2:04:d4:f1:b3:aa:73:b1:3c:2a:
         bc:0b:82:b2:36:64:f4:2f:2c:40:85:5e:5e:75:41:6d:2b:e6:
         ab:dc:3c:7f:e5:69:d1:1b:9a:49:f1:e1:02:99:d4:c9:2b:24:
         8f:9e:6c:a5:dc:cf:ae:69:92:f7:7a:66:e8:c0:f8:82:b3:68:
         38:87:ad:d0:bc:3e:d0:a1:e1:8a:9b:74:78:94:01:53:01:b3:
         f3:29:29:ab:26:08:6f:ab:84:a5:af:9a:b2:a3:79:0d:bb:2d:
         ff:be:d9:90:05:4b:1f:25:35:a7:72:62:f5:59:55:6d:e8:81:
         a0:e5:a7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:18:42 2026 by rpki-client