Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/e453e87f-2075-39a1-8d7e-b80cf54ae618.roa
File:                     e453e87f-2075-39a1-8d7e-b80cf54ae618.roa (raw, json)
Hash identifier:          1Va6TTZOTTTCmiWuRThH/abI1g7tfBQnnbJx73Tdy0M=
Subject key identifier:   69:50:7D:5C:82:32:5B:41:B4:F4:D2:E2:F9:5A:67:0A:2F:92:07:CD
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F4328584CCA41E3EBE82F3742CA6CED00
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/e453e87f-2075-39a1-8d7e-b80cf54ae618.roa
Signing time:             Sun 08 Feb 2026 02:00:32 +0000
ROA not before:           Sun 08 Feb 2026 02:00:32 +0000
ROA not after:            Sat 09 May 2026 01:00:32 +0000
asID:                     13414
IP address blocks:        64.63.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ca:41:e3:eb:e8:2f:37:42:ca:6c:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Feb  8 02:00:32 2026 GMT
            Not After : May  9 01:00:32 2026 GMT
        Subject: CN=39dadba0-978e-4777-ae2f-659c213f4bc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ad:44:95:eb:07:7f:8b:58:68:de:08:fe:59:
                    e1:cd:e6:18:8d:b3:b8:6a:5e:88:6e:40:92:34:3b:
                    3b:41:f4:90:3a:ec:ae:bf:9c:c7:3b:b3:c3:32:c4:
                    f7:2f:0a:f0:ef:3c:cf:04:02:1e:72:75:7c:e8:0d:
                    42:f4:20:62:6e:c3:01:9f:e1:de:b9:3f:53:6f:b3:
                    51:a1:6f:d1:37:c2:8d:fd:74:5a:20:61:b8:29:2a:
                    17:0a:09:80:32:2b:17:18:b8:81:cf:9e:01:9e:b0:
                    01:7d:74:73:1a:a6:fb:4e:a9:c1:fa:7e:da:43:21:
                    cc:a3:cf:42:ec:ea:b3:ff:04:41:67:1d:88:55:57:
                    f2:fe:b2:d7:9d:56:8c:13:5e:67:18:fc:8f:0c:bf:
                    a3:75:1a:e7:ed:44:c7:b8:f0:7c:99:81:5c:80:29:
                    e0:56:e1:ef:a9:06:d5:e8:5d:f0:97:68:3a:fd:c8:
                    ba:d1:dd:5f:e4:4f:63:8f:6b:8b:ce:27:db:10:a0:
                    a4:18:92:16:25:db:33:fd:de:90:7a:b5:eb:88:7f:
                    d5:6f:6a:86:59:44:4c:4e:db:ab:83:c4:eb:06:42:
                    2f:3f:ed:15:70:ea:3c:6a:ad:5b:51:b2:2c:60:a6:
                    3d:51:6b:a1:4b:93:29:0d:e9:64:76:32:49:25:77:
                    50:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:50:7D:5C:82:32:5B:41:B4:F4:D2:E2:F9:5A:67:0A:2F:92:07:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/e453e87f-2075-39a1-8d7e-b80cf54ae618.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.63.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:32:87:b7:27:fd:3c:af:a6:2c:3a:a1:ea:2f:ba:75:f0:80:
         77:91:1e:a3:73:f8:16:b6:3f:7b:cd:43:1d:de:6e:03:6b:51:
         d1:8c:70:06:40:3b:da:79:32:f2:ab:86:f2:82:08:6c:2f:bb:
         47:d3:72:41:f2:72:3e:e7:f0:3c:ce:bc:c8:0c:28:0a:06:ae:
         25:fd:50:df:f1:60:75:bd:a9:87:a9:8b:36:a0:b8:7f:14:e6:
         a9:a0:f4:f3:eb:40:a5:a3:18:f1:68:7a:d3:83:0b:4e:59:5b:
         70:9d:56:20:b5:12:c5:fa:0e:35:b6:53:f5:06:04:af:63:9b:
         4e:f5:af:2e:dc:25:17:ae:b6:bd:c8:d4:97:53:14:ce:dc:ec:
         52:c7:73:b8:85:08:b7:d2:7b:95:fa:c6:ba:c3:4d:51:de:0b:
         08:7c:bd:ee:72:50:7c:1c:36:b9:4a:f3:aa:00:d6:2e:43:06:
         bc:9f:7b:6a:e7:ca:0b:09:07:53:8d:a2:57:5d:72:92:45:e0:
         aa:f9:a1:01:12:18:66:17:eb:df:07:90:bc:ae:d3:8b:fd:69:
         da:09:ea:4e:86:88:e7:0d:fc:7f:c7:c6:e0:0c:e4:20:cb:fb:
         10:dc:46:3e:ee:32:7d:2c:6f:07:27:28:1f:af:d5:b7:4e:0e:
         4b:80:9a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:19:44 2026 by rpki-client