Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/154d7d54-a074-3eac-a5f4-43680f8a7d4e.roa
File:                     154d7d54-a074-3eac-a5f4-43680f8a7d4e.roa (raw, json)
Hash identifier:          9bzo4DvYTXgee8Psl2ldwoB1Dyj6xD5wy3bWwo9pqDE=
Subject key identifier:   4A:54:69:F7:8B:83:E2:13:4E:D1:29:4E:3C:08:EA:D7:D6:A0:35:4A
Certificate issuer:       /CN=f4f85718-cda0-442f-9727-709a536e1e27
Certificate serial:       010D0C9F4328584D4D5A4D3B5BE09868F0A09400
Authority key identifier: 6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/154d7d54-a074-3eac-a5f4-43680f8a7d4e.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     6639
IP address blocks:        63.136.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:4d:3b:5b:e0:98:68:f0:a0:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4f85718-cda0-442f-9727-709a536e1e27
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=00e2b7df-c4b5-4496-8144-be7f78798edc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d4:5f:cc:2e:3b:bc:87:87:84:e1:00:13:f7:
                    15:04:42:f0:0a:12:87:fa:5a:41:98:bf:98:e9:f4:
                    e6:d0:61:4c:ca:ee:75:a2:5a:e2:b8:db:80:5d:39:
                    00:80:20:ac:1a:0d:af:8b:25:76:85:72:03:b4:c0:
                    f7:a3:4a:1d:ac:2c:02:12:0d:39:de:39:10:8c:1a:
                    86:e0:66:4c:7a:85:cc:8b:ae:44:bc:8d:89:22:23:
                    c9:f1:e0:80:fe:94:80:b3:f2:f0:6b:06:ef:74:91:
                    10:4f:c6:20:3c:53:c0:11:4d:1f:2a:2d:38:bd:76:
                    dd:0a:94:c8:ac:82:8f:0d:9e:de:6e:86:e7:58:f5:
                    85:62:00:2d:45:fe:34:4e:2b:ba:0c:02:68:5a:e1:
                    88:f8:13:e2:cc:9b:07:6c:cc:01:5b:e0:79:17:c4:
                    9b:54:91:4c:67:e5:ae:d6:72:f1:6c:5f:d2:b3:f7:
                    e2:a1:fd:6b:ff:d4:fd:5e:4a:f2:d2:23:03:21:91:
                    8d:28:1e:a6:00:27:db:32:73:b9:d9:37:fe:81:fe:
                    38:88:64:38:80:c6:30:90:8e:aa:bc:76:de:20:75:
                    0e:e2:83:3a:cf:ac:a0:8a:92:a6:2c:25:af:eb:c7:
                    16:a7:53:ad:ca:15:7e:c3:a3:7a:54:0e:0a:8d:aa:
                    0d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:54:69:F7:8B:83:E2:13:4E:D1:29:4E:3C:08:EA:D7:D6:A0:35:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/154d7d54-a074-3eac-a5f4-43680f8a7d4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl

            X509v3 Authority Key Identifier:
                keyid:6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.136.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:2f:34:71:56:2f:d7:7a:fc:43:6e:ce:65:8f:0d:8f:1d:96:
         b2:75:ee:5e:7c:92:b7:c3:48:3c:2a:67:21:3e:96:d9:98:11:
         02:93:9a:a3:cd:f6:16:43:69:1c:fa:a5:cc:93:ff:e4:26:28:
         22:9e:24:64:df:ea:fc:2d:e4:1c:11:ff:12:fc:98:99:29:d7:
         e5:ae:e6:4a:97:3e:9a:29:fd:a5:a1:91:44:1c:b2:59:8d:c0:
         2a:c4:bd:60:7a:5b:2c:c8:b6:82:2b:5f:1b:96:39:18:f3:53:
         9c:23:60:70:43:65:ba:bb:4d:80:cb:0e:0d:c1:0d:dc:85:b4:
         62:9c:a9:62:5f:25:b1:cc:ca:33:fa:ff:ef:0b:25:a6:fe:41:
         3f:74:a6:78:8e:12:a2:15:c3:85:93:28:2f:d6:98:ac:67:19:
         07:35:6e:e1:8d:88:14:81:11:5e:f8:0c:30:2e:a5:e9:cb:28:
         ef:94:f8:7f:b7:47:3e:5f:bd:39:53:46:cc:1f:97:be:bd:e7:
         91:19:40:0a:5f:ea:27:7d:28:04:88:87:07:cf:49:e9:e0:6f:
         43:c8:66:be:7a:64:91:f1:b0:bd:5b:39:3f:20:a5:50:4a:f2:
         24:d5:73:bc:8e:1d:02:f3:68:45:98:ee:22:f0:72:66:29:0e:
         5f:90:78:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:35:51 2026 by rpki-client