Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/14a26257-053a-3e77-aaab-55d98e636539.roa
File:                     14a26257-053a-3e77-aaab-55d98e636539.roa (raw, json)
Hash identifier:          xg0CSNJRbGTM6r76y3tNckz+jSRaz/mrT3R8ICxW0qM=
Subject key identifier:   9C:9E:AE:EB:A2:26:F4:9C:70:74:99:2F:13:76:AA:65:57:A8:B0:26
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F4328584CCA41EAC8D7AE3B77C9F80DC0
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/14a26257-053a-3e77-aaab-55d98e636539.roa
Signing time:             Sun 08 Feb 2026 02:00:32 +0000
ROA not before:           Sun 08 Feb 2026 02:00:32 +0000
ROA not after:            Sat 09 May 2026 01:00:32 +0000
asID:                     13414
IP address blocks:        64.63.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ca:41:ea:c8:d7:ae:3b:77:c9:f8:0d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Feb  8 02:00:32 2026 GMT
            Not After : May  9 01:00:32 2026 GMT
        Subject: CN=95d10295-6136-4fa7-aead-f5dadff67243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c5:19:c2:36:7a:b8:d7:ee:78:08:84:25:ef:
                    26:ff:39:66:22:ad:49:3c:b2:bb:cf:ca:93:29:c8:
                    4c:b9:94:6f:f5:c7:5c:b2:0e:d5:21:54:0f:ed:1b:
                    0e:64:54:a8:ed:6e:e8:d6:97:02:96:ae:fc:17:35:
                    34:8f:72:27:ba:cc:2e:c4:30:d0:d9:80:8e:ac:89:
                    d9:3f:45:c4:46:1c:da:87:e9:b3:4f:bd:7f:2a:8d:
                    39:5f:04:51:b9:06:c0:6b:e3:d0:e0:4f:9d:3a:31:
                    ba:fc:0d:c0:ac:24:68:d3:69:6f:b7:0a:07:ac:36:
                    d4:87:bb:ca:db:23:3e:5c:27:67:5c:23:da:7f:3f:
                    31:a5:7d:45:82:35:95:f1:3e:48:e8:2e:ac:5a:d5:
                    1e:94:4b:61:ab:8c:89:32:46:38:b0:5b:ce:2c:15:
                    ad:61:13:e3:61:3f:6a:60:d2:3a:0b:18:14:db:e0:
                    88:dd:f0:13:a2:82:b3:ea:0b:3f:2b:65:1d:e2:f2:
                    cd:69:7e:ff:6b:c5:81:c5:84:a7:15:08:60:ed:2b:
                    d3:f2:33:4d:6b:6f:50:cd:ca:9a:03:45:cc:9e:73:
                    fc:19:da:83:30:c6:35:e1:db:8f:f2:46:8d:50:84:
                    65:ac:2d:4f:8d:56:0b:73:85:e4:a2:96:2c:4e:39:
                    89:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:9E:AE:EB:A2:26:F4:9C:70:74:99:2F:13:76:AA:65:57:A8:B0:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/14a26257-053a-3e77-aaab-55d98e636539.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.63.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:cc:85:cd:8f:f7:82:f9:f7:cc:c0:78:7d:d1:e7:22:76:66:
         31:b5:e7:8f:22:a3:ab:24:19:41:5b:6a:53:49:0b:cd:85:13:
         da:e8:16:e4:51:d0:bc:a9:7b:7c:67:0e:e0:07:b8:8f:38:8c:
         ba:a5:0e:1c:0e:b5:30:fd:25:1b:d1:6e:1d:93:aa:02:b8:7e:
         2d:fd:a6:f4:18:57:af:6a:d5:6b:12:54:a6:a8:62:44:29:6a:
         3c:31:b0:5b:e8:c7:2e:b5:ad:1f:d2:55:2b:c7:86:5d:4a:00:
         3c:82:49:4e:94:d1:49:a8:39:fa:76:30:50:85:5c:20:ae:28:
         07:21:36:58:f1:24:73:60:47:d8:b9:cf:03:4c:c0:da:4c:8a:
         a7:01:35:fb:e5:ae:43:32:e3:ab:63:e1:ea:27:e9:a4:22:0c:
         27:a3:83:05:93:5b:71:0c:a2:22:91:ed:db:11:d2:81:d8:1b:
         24:ae:2a:b9:e4:8e:56:0c:6a:7d:c0:a4:8c:8c:1a:cb:a0:15:
         9e:3d:af:e9:67:f7:e0:25:13:32:b4:b5:7d:2e:31:9b:d3:d3:
         12:23:fa:87:57:14:5c:b3:64:6a:84:20:73:de:b5:4d:a7:aa:
         39:ca:73:95:91:b5:f8:af:3f:94:18:00:d0:c2:71:94:31:4d:
         18:f9:88:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:33:46 2026 by rpki-client