Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/17063732-949a-3fe9-b294-49965e4df87a.roa
File:                     17063732-949a-3fe9-b294-49965e4df87a.roa (raw, json)
Hash identifier:          T7DFta+YyDbek7N7qvQej0zkM7WYDeEkI/RasDkfvHw=
Subject key identifier:   1E:8A:8C:63:A1:43:46:20:0D:7C:B3:8F:95:54:D1:76:CF:46:A8:96
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F4328584CCA41E3679BC0B95F89B85910
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/17063732-949a-3fe9-b294-49965e4df87a.roa
Signing time:             Sun 08 Feb 2026 02:00:32 +0000
ROA not before:           Sun 08 Feb 2026 02:00:32 +0000
ROA not after:            Sat 09 May 2026 01:00:32 +0000
asID:                     13414
IP address blocks:        64.63.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ca:41:e3:67:9b:c0:b9:5f:89:b8:59:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Feb  8 02:00:32 2026 GMT
            Not After : May  9 01:00:32 2026 GMT
        Subject: CN=b7633100-7248-4973-baeb-f54c82b46b2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:6a:76:37:17:28:41:a1:9c:6a:e3:9e:36:f1:
                    ed:ac:b9:da:f3:b1:17:a1:ee:15:56:42:e7:f2:65:
                    9e:ec:33:13:02:c2:00:c1:82:91:ea:af:9f:36:de:
                    33:56:8e:15:59:fb:82:54:68:a6:09:4b:ea:56:ac:
                    bd:1e:de:5e:77:01:2d:e9:48:6b:83:cf:20:2d:1d:
                    90:06:e7:ee:b5:0a:26:ce:87:f7:e9:e3:f6:5a:80:
                    0b:d7:d8:a0:7b:c3:81:66:cc:68:0f:8f:e1:1e:63:
                    4f:0e:66:17:1a:ab:66:73:8a:51:dd:a6:42:8f:96:
                    a9:66:bb:4c:ca:b7:fb:bf:60:87:d0:1a:6c:96:94:
                    1a:88:fc:56:01:50:4a:2e:3d:54:c3:2e:c5:46:55:
                    08:69:8b:3f:5a:39:e0:37:0a:81:0e:61:cb:af:1a:
                    44:99:dd:12:65:1c:74:6f:3a:82:fe:86:fa:3d:bf:
                    25:67:dd:aa:61:be:a3:aa:74:77:2a:75:13:d1:f6:
                    0f:7b:7d:d3:8f:89:65:4c:07:41:73:75:80:70:51:
                    dd:cc:f0:29:87:27:31:c6:5e:a5:12:a9:95:3c:b5:
                    36:1c:d2:df:05:56:8d:29:ef:e7:cc:cc:46:2b:59:
                    2d:c4:c8:25:51:20:4f:50:df:c3:5c:d1:92:70:42:
                    b6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:8A:8C:63:A1:43:46:20:0D:7C:B3:8F:95:54:D1:76:CF:46:A8:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/17063732-949a-3fe9-b294-49965e4df87a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.63.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:97:ca:6f:a6:ab:13:cc:8f:66:16:90:e6:c1:c0:ac:8a:44:
         f9:43:bc:df:04:25:ed:99:c6:57:eb:07:97:76:73:3e:87:34:
         a0:9a:4f:8b:f3:64:69:4e:e9:d5:ed:79:0c:25:3d:ce:87:1b:
         cc:21:e6:8c:86:a5:7e:e0:21:2e:20:81:77:20:8e:33:99:d9:
         cf:a8:00:98:1e:ed:fd:c5:68:bb:11:5f:95:a9:55:71:02:d2:
         99:99:d4:c0:56:76:00:6c:b1:cb:48:20:18:a1:ad:a8:9b:72:
         18:b0:f5:68:3b:f3:c0:55:ab:00:ac:d4:63:3d:b1:e4:12:92:
         01:fc:fe:e9:c1:9a:b5:52:9c:cc:61:d9:0b:ba:ea:e1:e7:0f:
         e4:a8:42:e3:91:f7:06:6a:3f:e4:73:1f:47:fa:56:38:85:5f:
         df:10:12:32:73:8e:b9:79:6a:1d:03:4c:3a:db:c5:22:21:0d:
         f6:15:af:18:91:3f:bc:a2:0b:17:e1:bd:d1:8c:d7:cd:ad:5f:
         45:2e:06:fb:bb:51:74:9f:b3:c1:a1:bb:1d:f9:cd:52:04:c3:
         85:14:e6:b3:9e:cc:79:5a:e4:78:e9:e0:34:2f:08:95:19:a4:
         c8:7f:a4:bc:e1:66:ab:68:55:7b:e0:b7:42:7f:9b:5a:8a:86:
         80:07:83:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:11:52 2026 by rpki-client