Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/78e20c46-e0de-3b67-a054-84ea3ba8c128.roa
File:                     78e20c46-e0de-3b67-a054-84ea3ba8c128.roa (raw, json)
Hash identifier:          2xv01Huppl6Wva+702QYdaK43e0NArFa/5mp+IjPSmk=
Subject key identifier:   C1:A2:7A:4C:A0:6F:43:FD:3D:F1:72:37:79:D9:60:C8:1E:AA:B0:20
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F4328584B970CE6FF3BF5EF9306520200
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/78e20c46-e0de-3b67-a054-84ea3ba8c128.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     29802
IP address blocks:        63.223.89.0/24 maxlen: 24
                          63.223.90.0/24 maxlen: 24
                          63.223.106.0/24 maxlen: 24
                          63.223.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0c:e6:ff:3b:f5:ef:93:06:52:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=ad23aff4-920a-471f-a5f6-312ad6a2502e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:78:2f:d1:e1:e4:1f:af:50:59:5a:16:26:c8:
                    06:28:bc:4b:ea:96:f3:1f:98:55:ee:9b:2f:2e:73:
                    a1:14:49:79:dd:a7:d3:3f:6c:7e:50:95:d1:42:3d:
                    62:00:e8:16:ca:56:4b:fb:4d:de:a9:19:c6:09:2b:
                    c9:01:8d:1c:10:a2:69:52:45:90:6c:5b:e1:81:c6:
                    ec:c0:01:ea:6b:f6:0c:d8:4b:8c:00:f2:a8:d8:59:
                    b5:79:40:99:16:00:83:49:98:70:14:22:b5:ab:b3:
                    11:53:ef:63:06:b0:e9:c8:dc:84:57:fd:5f:3e:ca:
                    b7:08:84:58:f6:17:57:3c:05:44:2c:2c:e0:9b:03:
                    d2:39:02:92:14:7a:8e:e7:49:ed:8f:eb:9a:43:f8:
                    59:60:26:1e:db:cf:f5:fd:32:4e:22:ac:2d:29:70:
                    e1:9e:f2:a5:fe:f0:34:5c:24:4b:ba:6f:0d:7d:d3:
                    fa:88:6b:fa:6b:ef:ce:22:4e:93:19:f0:ef:ad:d1:
                    b1:56:88:fc:19:67:ab:cc:bb:20:2a:31:5a:f2:6a:
                    fb:e5:e2:c4:69:6d:5e:dc:6b:73:33:23:65:2b:07:
                    3b:71:ad:47:fb:ab:ee:73:b5:6b:42:cc:d9:f3:f7:
                    7e:dd:2e:11:a3:4c:4b:37:aa:f1:e1:10:eb:38:58:
                    40:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A2:7A:4C:A0:6F:43:FD:3D:F1:72:37:79:D9:60:C8:1E:AA:B0:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/78e20c46-e0de-3b67-a054-84ea3ba8c128.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.223.89.0-63.223.90.255
                  63.223.106.0/24
                  63.223.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:b2:59:30:ef:5c:dc:af:d9:fb:c5:ba:63:03:60:f9:75:29:
         a0:2e:f1:b8:24:6b:c6:14:77:c6:43:76:22:22:b7:6d:0e:06:
         47:77:46:3a:82:d8:f9:25:c2:9e:38:5c:3e:c3:dc:2c:cb:8f:
         f3:de:fd:8c:c9:8b:ef:d1:00:32:03:e1:0e:8f:81:08:1b:d0:
         11:fa:c9:7b:6d:52:c2:34:bd:04:bc:66:96:8c:6c:2b:75:3d:
         cc:83:53:cb:73:29:2f:4b:7d:66:af:46:3d:87:d6:2d:bc:9e:
         4f:81:79:4d:4e:4c:3c:4c:6f:bd:72:f7:b6:d5:bf:3a:58:d9:
         9d:63:34:c0:8d:52:f1:2a:db:51:fe:58:94:36:5c:51:27:67:
         c4:c3:23:6a:af:7d:ec:ed:23:e8:c5:e0:58:fe:f0:9a:37:33:
         54:fe:58:91:1b:0f:be:cd:6a:bf:6a:7e:d3:a9:92:e6:4f:5d:
         45:3e:6e:02:21:32:6c:52:b9:fa:dc:27:34:94:65:04:3a:a1:
         46:6a:36:fc:d6:a5:c0:b1:d9:c9:61:61:44:52:f3:98:df:b7:
         b1:33:ce:fb:3f:d2:8e:83:6e:f3:a2:2c:60:d4:a5:2d:b6:41:
         f7:0d:cf:e9:15:8c:84:1f:bc:af:e2:84:7e:b4:9e:26:c3:71:
         96:2f:02:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:33:43 2025 by rpki-client