Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/14a95db4-f488-33a6-a50e-3c5fecedab24.roa
File:                     14a95db4-f488-33a6-a50e-3c5fecedab24.roa (raw, json)
Hash identifier:          r6vewtNmo+VZsdXRL88EuAjIndTfq2mX2O7wVeDvwa8=
Subject key identifier:   D3:1A:3B:16:7D:64:64:F2:66:45:B1:7C:67:FF:2B:A6:A2:D0:50:0B
Certificate issuer:       /CN=54ace249-bf6f-423c-93c6-7cc74d8a1acb
Certificate serial:       010D0C9F4328584D86955A515A1B03996B7C3400
Authority key identifier: BF:BE:CF:95:64:53:39:46:28:49:B7:00:59:5C:17:D2:6F:7D:7C:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/14a95db4-f488-33a6-a50e-3c5fecedab24.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     16509
IP address blocks:        64.95.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/54ace249-bf6f-423c-93c6-7cc74d8a1acb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/54ace249-bf6f-423c-93c6-7cc74d8a1acb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:5a:51:5a:1b:03:99:6b:7c:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54ace249-bf6f-423c-93c6-7cc74d8a1acb
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=4b8140c0-91d6-4591-96cf-a441c7f486e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:11:91:70:fc:d1:eb:61:c5:2f:a8:68:52:86:
                    b1:31:cb:ae:0f:41:bd:de:a5:0b:8d:5a:1a:00:85:
                    96:47:cb:c6:67:4a:35:ab:0d:ff:e6:a7:f3:f1:06:
                    3c:d9:c5:00:d9:7f:e0:3a:86:48:c0:f3:ed:48:cc:
                    4f:34:ce:38:e1:9f:88:14:55:bf:89:17:f9:96:9d:
                    95:90:75:39:26:8b:37:ef:51:b7:18:82:27:c8:f1:
                    4a:e5:3f:11:4e:49:2f:b1:5d:b7:9f:34:c2:00:9e:
                    0b:35:b9:ac:c3:fd:77:8e:96:82:3c:fa:65:e2:e7:
                    d6:b1:51:9b:7b:0e:27:5b:90:4c:42:ec:40:6a:33:
                    88:c0:f4:13:17:eb:4c:50:f8:e6:b9:f3:ed:a2:bc:
                    a9:7c:82:50:20:71:90:34:fa:9e:c8:d2:a8:39:06:
                    b4:1b:fe:ef:3e:61:b7:7b:0e:a9:d6:e5:b1:24:42:
                    8a:00:f9:a7:64:db:5f:86:b2:77:92:cc:95:fa:3f:
                    16:36:2b:85:72:9d:99:2d:fd:2b:98:69:28:44:b8:
                    33:63:81:76:9b:33:d7:c0:85:3d:a9:09:f5:b8:cf:
                    b7:d8:29:d1:5f:b6:07:c0:08:d7:a5:fa:39:0c:3d:
                    1a:b0:73:b0:06:ad:c3:82:68:5a:f4:9a:10:47:80:
                    0b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:1A:3B:16:7D:64:64:F2:66:45:B1:7C:67:FF:2B:A6:A2:D0:50:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/14a95db4-f488-33a6-a50e-3c5fecedab24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/54ace249-bf6f-423c-93c6-7cc74d8a1acb.crl

            X509v3 Authority Key Identifier:
                keyid:BF:BE:CF:95:64:53:39:46:28:49:B7:00:59:5C:17:D2:6F:7D:7C:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.95.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:f8:d2:d7:e7:c8:5d:ae:3b:f3:9c:15:6b:e2:f6:0c:ef:97:
         29:0d:66:e6:9a:32:71:0f:71:43:39:6c:3f:d0:d8:a8:7f:34:
         df:20:61:28:47:89:b2:1d:0c:28:c0:70:2f:41:72:e8:3a:a0:
         f2:33:2e:63:bf:8e:aa:37:e3:a3:f2:af:fa:f1:84:7e:3f:fb:
         ab:15:d1:a4:4e:2a:62:cb:f2:30:bc:7b:c8:48:95:9e:de:ef:
         5d:0c:29:fc:7a:f6:7d:17:0c:96:5f:13:65:cb:8a:97:06:c9:
         12:2e:51:df:78:8d:a5:05:9c:a0:1a:c2:10:ad:cf:0a:c9:f1:
         92:17:6c:30:06:2c:c6:1d:5a:ee:19:5b:76:49:da:4c:46:61:
         f4:e1:9a:6e:07:7e:5c:4b:e3:70:1c:1c:29:99:1c:c5:4f:ec:
         59:e6:2c:a4:f0:8d:f4:f0:15:6d:08:f4:e1:bc:6b:99:41:af:
         7f:17:79:d0:bd:bf:51:2f:82:9f:46:ab:cb:08:7e:de:7c:7a:
         c2:fd:c7:b4:4f:84:fd:d1:e8:2b:6d:1b:cd:0e:e5:62:a7:c7:
         7d:88:f9:13:20:e6:e2:93:c9:3e:b9:97:a4:f9:44:5e:26:7d:
         26:db:52:4e:71:10:24:66:07:e0:4c:51:81:db:09:2f:b7:0a:
         56:da:42:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:52:53 2026 by rpki-client