Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/1db45472-9134-3bf8-aa89-4db40eab619e.roa
File:                     1db45472-9134-3bf8-aa89-4db40eab619e.roa (raw, json)
Hash identifier:          wo5mJtqVAaGsSk3uQyF+YafVHugOR0gPxN+/D0osv+k=
Subject key identifier:   57:A8:4B:12:11:3F:1B:EB:FB:44:ED:57:C8:42:90:67:9B:43:A6:7F
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F4328584F497626BCE5D6FEB639E3E640
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/1db45472-9134-3bf8-aa89-4db40eab619e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     9009
IP address blocks:        63.141.50.0/24 maxlen: 24
                          63.141.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:26:bc:e5:d6:fe:b6:39:e3:e6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=671295c4-9bd3-4491-997d-196a6df45aae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f4:eb:b2:6a:9b:13:f2:1c:8d:d3:4e:91:69:
                    b4:ea:0a:96:1b:90:f2:6a:1f:71:ae:bc:46:f4:6f:
                    90:e4:67:a6:8c:7f:86:7b:c5:64:cc:d2:84:76:7e:
                    08:62:83:de:20:66:3a:c8:fc:3d:00:f3:a6:b0:c7:
                    f8:17:24:03:c7:c0:dd:51:b1:7d:ff:22:4c:7d:c7:
                    61:53:3d:8b:e3:c6:00:a9:06:3a:46:ac:0f:c5:b4:
                    60:c9:0d:f0:9d:99:e8:ae:79:f6:0f:8c:cf:54:ae:
                    17:d9:8e:c4:5c:ec:21:41:86:60:93:68:66:9d:7d:
                    e2:32:36:b2:c5:cb:97:ed:e4:33:fa:de:d3:ba:77:
                    8c:85:d4:00:96:de:9c:94:d9:6e:e7:05:f3:49:92:
                    04:14:c5:f9:cb:c1:3f:fa:88:7a:05:33:64:07:6b:
                    ad:3d:a0:97:a9:e3:1f:fc:f3:be:35:43:b3:02:ac:
                    26:33:ac:6d:0f:b1:9a:2f:6f:8f:e9:a4:f4:75:e2:
                    05:41:2a:29:51:f7:c5:d9:53:06:a7:26:88:cc:5d:
                    e3:19:e0:1e:21:f8:65:b7:86:c9:8e:71:e5:03:93:
                    d6:d9:ba:ce:2e:aa:6d:99:a8:b9:28:bb:85:e0:f0:
                    96:7f:99:73:3a:ac:bd:4a:ec:11:5a:c8:f4:c4:9d:
                    f5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A8:4B:12:11:3F:1B:EB:FB:44:ED:57:C8:42:90:67:9B:43:A6:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/1db45472-9134-3bf8-aa89-4db40eab619e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.141.50.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:df:fb:96:7b:72:7d:2a:28:80:04:f5:6e:eb:e8:32:01:35:
         33:24:6f:37:6f:8a:46:4a:56:8c:14:45:4f:57:c3:f3:98:85:
         1a:6f:98:14:45:b7:a7:d2:88:45:e3:c5:43:2f:77:1e:5f:ba:
         71:ca:04:43:16:26:20:a9:1c:ea:68:a2:4c:f6:f2:6b:5e:97:
         cb:31:15:78:c8:67:c7:3e:ee:e7:29:e8:46:2f:fb:40:01:70:
         53:35:8a:60:a0:6c:c6:11:38:4d:e6:c2:ed:b8:02:a3:aa:7c:
         e9:bc:dc:3e:7c:fa:05:4f:ba:b1:70:d1:01:67:f0:7e:78:32:
         14:1a:15:d2:d9:4d:4b:b9:2e:59:0a:09:70:75:9c:13:91:82:
         49:ad:60:3f:b6:53:84:18:26:93:20:0e:89:3d:78:eb:0e:37:
         33:e1:36:38:f4:58:af:70:bf:e5:0d:a5:7b:e9:ac:61:25:00:
         84:87:9a:e6:fe:dc:fa:da:c4:90:de:b3:55:d8:31:89:10:5f:
         17:ef:ba:63:aa:5f:18:63:92:bd:4b:29:fa:a9:4f:d3:fd:4e:
         5a:87:4f:b6:1a:8a:4e:ba:89:ae:ef:23:81:fe:99:c6:ee:57:
         c7:58:2c:af:d5:f6:71:a5:89:d0:dc:2d:13:b3:f0:03:0f:e7:
         bf:3e:3c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:23:33 2026 by rpki-client