Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/11da962d-b616-3bbb-a780-d5f1555c8a88.roa
File:                     11da962d-b616-3bbb-a780-d5f1555c8a88.roa (raw, json)
Hash identifier:          hUIgiSIP36fiHoc+Mo6iUTP0Q7ITGtYQZIWw3fKO7vc=
Subject key identifier:   9C:7C:B2:F8:21:7D:A9:2A:3D:E7:F7:69:FD:66:3B:21:F5:B2:27:C2
Certificate issuer:       /CN=54ace249-bf6f-423c-93c6-7cc74d8a1acb
Certificate serial:       010D0C9F4328584D86955A43D0BB848D973D7780
Authority key identifier: BF:BE:CF:95:64:53:39:46:28:49:B7:00:59:5C:17:D2:6F:7D:7C:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/11da962d-b616-3bbb-a780-d5f1555c8a88.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     14618
IP address blocks:        64.95.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/54ace249-bf6f-423c-93c6-7cc74d8a1acb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/54ace249-bf6f-423c-93c6-7cc74d8a1acb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:5a:43:d0:bb:84:8d:97:3d:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54ace249-bf6f-423c-93c6-7cc74d8a1acb
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=e85237a7-d3b3-4282-abb0-f3ada409af9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:bc:b2:f2:7f:d2:13:c4:84:5d:c0:69:b9:60:
                    a7:8f:9c:1a:cc:ef:a4:9a:a1:07:e0:65:11:42:82:
                    5b:8d:d5:09:c1:dc:c4:57:fa:f0:c6:7f:d9:f8:d3:
                    26:fd:40:ce:ec:b7:f5:7d:fd:a4:45:6f:33:98:b3:
                    b3:9a:9a:d8:56:c9:23:24:ea:54:4a:ac:6e:46:c4:
                    53:ae:74:0d:e1:fa:75:ee:d2:e8:fa:57:aa:c6:b1:
                    35:58:35:7c:c4:24:9e:ef:c3:24:fc:ee:6d:05:7c:
                    66:9a:b9:d6:e5:48:76:3f:ce:1c:73:4b:67:30:ef:
                    aa:0a:ed:7e:c0:e7:d6:a1:a1:d6:88:fe:03:6d:b5:
                    59:e3:14:32:35:86:51:47:d4:c7:37:d7:fb:9c:3b:
                    8d:2d:3e:76:84:93:f2:7d:db:42:08:75:41:ff:3b:
                    6a:ee:af:91:f5:d7:80:66:fb:f3:49:7f:5f:92:29:
                    1c:a2:c9:78:d8:13:12:f4:21:10:eb:1c:df:ac:81:
                    32:fb:a6:33:8a:a0:c3:df:0f:ca:c5:e7:81:64:52:
                    63:5f:40:cc:86:19:8a:f3:2e:92:92:14:54:38:34:
                    41:c3:f2:93:04:eb:36:de:8d:ec:e1:37:55:e8:00:
                    09:7d:fa:88:91:68:b9:90:a2:fd:56:3a:92:bd:c7:
                    6a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:7C:B2:F8:21:7D:A9:2A:3D:E7:F7:69:FD:66:3B:21:F5:B2:27:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/11da962d-b616-3bbb-a780-d5f1555c8a88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/54ace249-bf6f-423c-93c6-7cc74d8a1acb.crl

            X509v3 Authority Key Identifier:
                keyid:BF:BE:CF:95:64:53:39:46:28:49:B7:00:59:5C:17:D2:6F:7D:7C:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.95.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:05:17:58:c2:f8:99:e1:ae:70:1d:3c:7e:90:b0:50:44:98:
         3b:7e:4d:7e:83:ac:38:f1:f6:d4:0e:c1:79:66:af:bd:2b:e4:
         7f:fd:87:61:f9:6f:15:fa:c5:4a:67:57:4d:96:5c:00:08:b9:
         e4:e0:dd:c7:cb:ec:27:30:8f:8b:60:d5:f1:f7:68:77:43:18:
         68:83:02:d8:06:7d:4f:4e:2d:bf:84:56:40:c1:3a:17:2e:7a:
         04:3e:0c:6d:1a:ad:97:37:85:f6:0d:b5:35:4c:bd:0f:d8:30:
         e5:56:5d:ab:db:b6:c4:ac:1a:23:2b:92:27:11:1e:a8:ed:30:
         58:38:5c:2c:f6:2f:21:77:89:88:f8:2b:9f:ea:1b:aa:44:c9:
         06:dd:99:fc:ea:14:c7:25:38:f2:92:f9:6b:13:c9:41:7c:d1:
         0b:bf:43:8c:1f:4b:fc:16:6a:42:f5:15:17:42:c6:f1:d0:b6:
         fe:96:67:1d:de:b7:8a:0d:06:84:ca:7f:69:eb:f5:fa:d7:8e:
         f8:b7:fc:19:63:e2:06:08:c4:65:52:70:1c:22:19:a1:03:61:
         d4:7c:40:cb:92:00:68:04:c4:53:d5:36:a3:32:4f:15:0e:86:
         d3:87:59:af:df:8a:4d:4f:c4:3f:96:73:e4:65:14:af:12:8c:
         b4:4d:48:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:24:18 2026 by rpki-client