Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f49832b2-39cb-3775-8b78-adc9b8a89583.roa
File:                     f49832b2-39cb-3775-8b78-adc9b8a89583.roa (raw, json)
Hash identifier:          Gt1nGuayW7Q7CYgN/wsad/5JmjaO3P0vmofrjSIfGpU=
Subject key identifier:   C3:1A:0C:B8:C8:0C:DC:9C:B4:28:83:08:30:4A:EF:0B:FC:6F:EB:68
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E428F2FFDC4DA89D730AA6900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f49832b2-39cb-3775-8b78-adc9b8a89583.roa
Signing time:             Mon 22 Jun 2026 21:00:12 +0000
ROA not before:           Mon 22 Jun 2026 21:00:12 +0000
ROA not after:            Sun 20 Sep 2026 21:00:12 +0000
asID:                     400494
IP address blocks:        63.122.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:42:8f:2f:fd:c4:da:89:d7:30:aa:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 22 21:00:12 2026 GMT
            Not After : Sep 20 21:00:12 2026 GMT
        Subject: CN=5f7d93ec-c1fb-4b86-a3fd-8130234be108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:62:db:36:f5:74:77:cf:64:13:f2:db:8b:05:
                    eb:51:d6:7e:a8:cf:67:54:55:78:7f:4d:47:1a:e2:
                    46:29:6d:a8:d8:36:e4:40:39:80:68:8d:e5:83:c3:
                    f9:df:29:49:de:46:4c:69:32:6e:80:8d:54:eb:d3:
                    a7:01:28:54:b0:11:e2:ce:c3:8f:fd:96:77:b1:63:
                    b9:ea:70:ca:2c:1a:30:48:23:fb:95:90:07:da:44:
                    b0:30:09:4a:0b:0d:1c:b3:97:ed:c8:c7:4a:43:14:
                    88:3b:95:46:2a:7e:b6:64:ca:41:a2:dd:ae:4e:74:
                    13:01:71:1b:a8:8b:2d:e6:b3:b2:eb:0a:0c:10:94:
                    d3:e7:60:5a:04:22:d8:b3:e1:74:ef:08:90:63:80:
                    07:6c:2d:bc:b3:7a:a5:25:5a:45:ca:e9:7e:70:6b:
                    fe:18:d9:d2:33:da:55:db:66:0d:1d:87:df:bb:d1:
                    9e:b7:e4:dd:9b:37:0f:89:7e:d3:cb:b7:d6:69:3a:
                    9e:0f:44:ee:79:ee:a4:4e:ca:a1:09:d6:3a:02:fe:
                    27:b8:76:e7:cd:15:b0:b6:38:9c:93:01:5f:bc:98:
                    d6:cc:96:b3:22:e7:d0:ab:eb:93:a8:87:bb:f5:ad:
                    e7:d5:6c:95:cb:87:27:eb:89:57:4f:cf:24:a4:4c:
                    99:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:1A:0C:B8:C8:0C:DC:9C:B4:28:83:08:30:4A:EF:0B:FC:6F:EB:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f49832b2-39cb-3775-8b78-adc9b8a89583.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.122.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:b4:4c:bb:aa:5d:b5:3d:19:68:77:91:3b:bb:48:e0:97:6e:
         ef:33:c5:5d:ce:3b:b1:36:d9:b9:28:ff:cf:57:0b:de:85:be:
         a5:3e:5f:7e:9d:7c:e2:2d:87:15:68:84:e1:20:c5:6f:14:d0:
         a9:8a:96:d6:f9:e3:57:ec:c7:ad:78:a1:da:fa:8e:8d:ca:e0:
         de:83:5e:f7:19:81:ac:d6:6d:09:6e:2d:bd:c0:7f:bb:08:6c:
         ce:47:0e:00:12:9a:15:10:fb:52:18:01:ae:c2:af:76:c0:70:
         c8:51:68:f5:0d:42:2b:c6:20:98:47:b6:c5:ae:9d:6b:b4:20:
         6f:85:99:79:83:e9:86:db:99:1c:0c:57:50:9f:58:e2:b2:ab:
         20:33:69:c0:88:b7:0e:dc:01:fd:34:bb:7d:e8:09:c4:b9:ad:
         96:34:44:77:31:d3:db:23:93:40:83:60:25:35:9c:4a:9d:cd:
         37:7c:41:5d:d3:04:7c:40:5c:34:09:52:10:76:31:ef:97:fb:
         6e:ab:ba:ad:f2:90:0b:ce:11:a7:62:fb:f5:ce:35:48:ca:32:
         81:0b:62:fb:44:3e:99:00:e6:d6:9a:c7:15:23:99:7c:a5:58:
         77:72:72:d2:11:47:87:c2:ee:1e:c5:81:e2:f9:59:f0:a5:58:
         2b:ba:62:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5Cjy/9xNqJ1zCqaQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDYyMjIxMDAxMloXDTI2MDkyMDIxMDAxMlowLzEtMCsGA1UEAxMk
NWY3ZDkzZWMtYzFmYi00Yjg2LWEzZmQtODEzMDIzNGJlMTA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2LbNvV0d89kE/LbiwXrUdZ+qM9nVFV4f01H
GuJGKW2o2DbkQDmAaI3lg8P53ylJ3kZMaTJugI1U69OnAShUsBHizsOP/ZZ3sWO5
6nDKLBowSCP7lZAH2kSwMAlKCw0cs5ftyMdKQxSIO5VGKn62ZMpBot2uTnQTAXEb
qIst5rOy6woMEJTT52BaBCLYs+F07wiQY4AHbC28s3qlJVpFyul+cGv+GNnSM9pV
22YNHYffu9Get+TdmzcPiX7Ty7fWaTqeD0Tuee6kTsqhCdY6Av4nuHbnzRWwtjic
kwFfvJjWzJazIufQq+uTqIe79a3n1WyVy4cn64lXT88kpEyZGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMMaDLjIDNyctCiDCDBK7wv8b+toMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjQ5ODMyYjItMzljYi0z
Nzc1LThiNzgtYWRjOWI4YTg5NTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP3qYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD60TLuqXbU9GWh3kTu7SOCXbu8zxV3OO7E22bko/89XC96FvqU+X36d
fOIthxVohOEgxW8U0KmKltb541fsx614odr6jo3K4N6DXvcZgazWbQluLb3Af7sI
bM5HDgASmhUQ+1IYAa7Cr3bAcMhRaPUNQivGIJhHtsWunWu0IG+FmXmD6YbbmRwM
V1CfWOKyqyAzacCItw7cAf00u33oCcS5rZY0RHcx09sjk0CDYCU1nEqdzTd8QV3T
BHxAXDQJUhB2Me+X+26ruq3ykAvOEadi+/XONUjKMoELYvtEPpkA5taaxxUjmXyl
WHdyctIRR4fC7h7FgeL5WfClWCu6Yp8=
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:21:27 2026 by rpki-client