Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/c53561ea-94b5-31e9-8a49-85e6742191d9.roa
File:                     c53561ea-94b5-31e9-8a49-85e6742191d9.roa (raw, json)
Hash identifier:          lPpDoVJ5nwYBEDH2Jp2+vSXN9DIHGblb4hh3J/wYs9s=
Subject key identifier:   85:3E:74:54:59:14:79:3B:63:91:8D:D5:2C:EA:70:20:AE:D8:8A:1D
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F4328584CCA41EA95E52F52A7A3D283C0
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/c53561ea-94b5-31e9-8a49-85e6742191d9.roa
Signing time:             Sun 08 Feb 2026 02:00:32 +0000
ROA not before:           Sun 08 Feb 2026 02:00:32 +0000
ROA not after:            Sat 09 May 2026 01:00:32 +0000
asID:                     13414
IP address blocks:        64.63.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ca:41:ea:95:e5:2f:52:a7:a3:d2:83:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Feb  8 02:00:32 2026 GMT
            Not After : May  9 01:00:32 2026 GMT
        Subject: CN=f2b61788-0b86-46e4-af6a-ef6777284039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ad:fb:c8:2a:d3:b5:86:59:8a:82:9c:23:ef:
                    23:52:0e:7b:1f:75:87:6f:61:85:1a:12:26:61:e3:
                    c1:c0:60:de:bb:ae:19:b4:d0:db:53:fd:45:2a:aa:
                    98:28:4b:23:52:f2:0f:31:64:b1:f1:65:08:99:ea:
                    01:b4:97:64:67:27:4f:7c:67:57:1e:51:db:2c:f2:
                    65:44:0b:c6:c2:12:b9:eb:f5:5c:d1:6e:d9:66:4e:
                    11:1d:ed:e2:46:e6:2a:a3:01:9a:2e:6d:ad:86:af:
                    bc:42:4b:a4:ea:31:3b:ce:4e:bc:67:ef:1e:d9:f4:
                    0a:ba:17:91:de:8c:da:d3:9e:5c:2a:14:3e:4c:f1:
                    45:15:07:47:ac:d6:f9:2a:8b:70:c7:66:f5:0b:9b:
                    94:de:ab:f5:e5:07:49:76:96:4c:13:f2:61:58:54:
                    15:79:cc:df:4e:18:cf:8f:3f:b0:11:0e:de:ce:2a:
                    e4:5f:43:cc:6a:f8:ef:fd:91:72:56:c9:7d:4c:6f:
                    fb:76:cb:51:dd:32:6f:32:1e:69:d9:29:a7:d1:37:
                    4f:70:63:3c:91:15:35:16:d5:c1:d3:05:e4:01:03:
                    01:a6:3a:c2:49:6e:21:d1:81:3a:a4:1f:79:29:e7:
                    98:49:9c:41:d8:28:2b:74:4a:d4:9d:db:e4:7e:f4:
                    0d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:3E:74:54:59:14:79:3B:63:91:8D:D5:2C:EA:70:20:AE:D8:8A:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/c53561ea-94b5-31e9-8a49-85e6742191d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.63.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:66:13:c7:3e:12:83:e9:e4:36:0c:b5:ee:ce:a7:0f:09:64:
         9c:12:54:df:a0:1e:6a:2c:c5:c0:6e:b9:43:ab:27:2b:fa:e2:
         fa:c2:68:fd:fb:0b:2e:b5:cb:35:ea:e0:2d:48:af:5e:c4:fa:
         2a:f4:3c:0e:91:6f:5d:bb:8c:c1:63:24:13:f2:9a:03:1c:36:
         03:4f:c9:65:65:c7:7c:ac:9d:bb:97:78:b6:e1:1f:ee:bf:20:
         c2:e8:91:95:bb:39:23:7c:d7:06:1e:6d:bf:f6:49:ac:5b:c2:
         24:3c:9e:fc:aa:fb:7e:a9:c2:59:c6:b2:13:18:35:cb:da:fa:
         a5:c3:c6:c7:7c:6d:f4:ae:53:91:c6:43:25:11:80:76:2e:6f:
         57:d1:7c:c9:a9:28:4e:2a:e7:92:1f:ce:cd:55:32:17:db:0b:
         97:ed:04:41:f2:30:61:b6:e2:16:2a:94:ec:dc:17:76:b8:81:
         52:26:ae:36:d9:98:09:16:08:58:98:dc:b7:58:3e:45:08:d6:
         2c:78:4b:1d:c5:7f:9c:20:9f:10:fe:30:ec:af:50:e1:72:98:
         90:7e:46:a8:5d:c6:7e:e7:a3:02:ad:1e:f3:c3:09:49:ad:49:
         d8:7a:e5:71:3e:2e:5a:ae:db:86:e7:ef:7e:a7:1f:5a:7e:a0:
         cb:52:97:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:45:03 2026 by rpki-client