Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/2996a758-826f-39cd-9a08-8fff3bdfd6cf.roa
File:                     2996a758-826f-39cd-9a08-8fff3bdfd6cf.roa (raw, json)
Hash identifier:          PvY90gq1lB1HzveEtQnGVGTUYw2BTB+s7LkdNDnerf4=
Subject key identifier:   38:56:F1:88:05:A5:66:6C:BF:28:C4:40:BD:A7:B6:27:00:87:0C:4E
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F4328584CCA41E53B7D296D8197725B00
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/2996a758-826f-39cd-9a08-8fff3bdfd6cf.roa
Signing time:             Sun 08 Feb 2026 02:00:32 +0000
ROA not before:           Sun 08 Feb 2026 02:00:32 +0000
ROA not after:            Sat 09 May 2026 01:00:32 +0000
asID:                     13414
IP address blocks:        64.63.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ca:41:e5:3b:7d:29:6d:81:97:72:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Feb  8 02:00:32 2026 GMT
            Not After : May  9 01:00:32 2026 GMT
        Subject: CN=e3d78ee0-c40d-4939-a762-4349470886b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3f:be:83:4a:d4:82:a3:f7:08:83:db:9b:e6:
                    c0:56:1e:d0:65:17:93:a5:65:93:c8:59:c9:cd:d2:
                    c7:e8:8c:32:32:b2:ad:98:64:6b:0f:60:7f:c1:d3:
                    10:80:25:7f:46:64:ee:7e:6d:96:04:e7:c2:7b:c0:
                    e6:8e:bb:a4:8e:43:ad:97:30:fc:96:04:3c:0a:c8:
                    1c:83:92:53:ff:c9:2d:0a:39:88:7e:5e:84:ac:20:
                    a3:3b:0b:fb:df:72:01:80:ba:96:73:8c:3f:8f:1d:
                    0b:3f:e0:9c:2f:6a:04:dc:81:ef:c6:31:49:60:4c:
                    f1:19:b3:24:d0:03:a2:32:fc:05:60:96:b9:78:55:
                    b8:74:8f:ec:ac:89:8f:63:04:7d:9c:66:1e:75:d3:
                    d3:73:ee:34:4c:6d:7a:0e:d7:56:9e:58:69:44:a9:
                    c5:68:43:8e:cd:18:1f:3c:79:ba:2b:60:35:36:a7:
                    e4:df:d8:1b:66:ec:5c:eb:97:6d:f5:ab:9d:91:fc:
                    6e:e0:8f:bc:9e:b0:dd:5f:6f:2b:00:71:f6:0c:3e:
                    f9:0a:d6:b7:d4:cb:a4:5e:4a:12:37:69:ee:31:8f:
                    51:52:e4:68:8f:c7:3f:02:ae:f8:02:c1:4c:b9:55:
                    ef:fe:d3:23:65:dc:95:f2:72:50:91:ff:df:c2:be:
                    34:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:56:F1:88:05:A5:66:6C:BF:28:C4:40:BD:A7:B6:27:00:87:0C:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/2996a758-826f-39cd-9a08-8fff3bdfd6cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.63.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:4a:0d:78:ff:f7:61:3a:c9:43:d0:d5:de:cc:3f:7e:bc:60:
         ea:b6:8a:54:02:c1:a6:fc:e9:a1:db:f6:2a:43:70:92:c8:57:
         80:07:1f:f6:50:1b:62:6a:fe:44:b5:34:17:c5:d5:89:99:b5:
         f8:ac:81:c2:30:83:9f:73:9c:d5:4e:ba:e6:99:3a:fb:46:66:
         01:45:1e:ca:66:06:5d:7e:12:98:33:7f:1f:37:46:30:2f:f4:
         b2:96:c0:2b:fd:e0:60:09:24:4f:cb:f3:99:12:14:f2:7f:c9:
         16:f8:63:8f:a0:21:80:40:e3:e5:ea:36:28:4b:5b:d0:63:6c:
         1c:49:9c:ad:aa:d6:17:44:d4:fb:82:23:11:f2:b2:ee:3d:9f:
         ef:11:7e:d0:40:0f:c2:fb:a8:9e:d9:8c:d2:bc:a6:14:f7:a9:
         9e:00:55:ff:90:e8:cd:76:a4:be:47:53:ce:6a:2e:7f:b2:77:
         6f:f2:96:2c:75:56:25:46:dc:0a:fe:f2:3c:52:2a:78:56:51:
         39:8a:de:07:60:2a:9a:a8:14:54:7e:2e:b0:19:a1:c5:22:c2:
         e5:33:e2:50:87:eb:42:b4:7d:d9:7a:a2:88:30:7d:03:3f:9f:
         b7:97:9d:ca:64:43:10:13:7e:84:f5:fa:a4:f0:c9:54:ce:ea:
         33:1d:96:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:19:10 2026 by rpki-client