Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/a846b54d-f778-38fa-aff7-24dda6cea45d.roa
File:                     a846b54d-f778-38fa-aff7-24dda6cea45d.roa (raw, json)
Hash identifier:          ZBs/yydIafmAzwyLJMnOt8AQGsBdbrPgLPeMl5wWZE0=
Subject key identifier:   41:A4:03:6B:C3:DF:60:79:F9:69:B7:E3:90:D6:24:05:D3:67:40:49
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F4328584F2D87BCFFA09923631A197B80
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/a846b54d-f778-38fa-aff7-24dda6cea45d.roa
Signing time:             Tue 15 Sep 2026 01:00:12 +0000
ROA not before:           Tue 15 Sep 2026 01:00:12 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     13414
IP address blocks:        64.63.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:87:bc:ff:a0:99:23:63:1a:19:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Sep 15 01:00:12 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=887a598d-ceb5-4406-862d-bcba80c92d31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7f:b0:ff:8b:a6:54:29:97:63:eb:02:ea:b0:
                    d4:eb:96:f0:94:05:88:e4:5b:55:eb:0d:8e:d8:87:
                    d4:31:bf:5b:9b:cc:ab:eb:95:fc:f8:8b:34:21:93:
                    9b:51:36:53:c6:b9:d9:35:0b:15:e5:65:6e:6b:b3:
                    10:2a:b8:07:7f:13:9a:73:b4:df:1e:7f:6e:07:ad:
                    b5:27:d6:bd:c6:81:71:f8:b9:7c:6f:47:55:0d:e0:
                    39:b2:a6:19:f7:08:f3:b2:11:ae:39:f5:38:1b:46:
                    97:7d:09:c1:25:f4:36:44:d2:25:74:05:bd:a4:e5:
                    bd:c0:db:31:97:97:d4:cd:c8:fe:d9:9e:46:9a:13:
                    c6:a3:a9:02:d0:19:b1:ca:fe:de:6c:ca:13:2b:9b:
                    02:bc:d9:51:13:43:37:36:ce:a1:f4:58:3f:26:8c:
                    a6:55:7a:4e:fc:73:39:57:f8:45:13:00:62:1f:dc:
                    c9:16:b4:a8:51:5a:c2:4c:cb:8b:0a:ec:71:1b:ec:
                    88:70:3b:bc:19:9d:64:46:b9:b0:66:bd:20:e3:06:
                    e9:ad:68:eb:7e:25:59:71:33:9f:4a:4d:97:af:78:
                    9a:7b:1d:bf:a6:2f:3e:c9:78:d7:27:14:bd:00:5e:
                    95:9c:2a:1a:7f:3e:e6:df:05:6f:7d:e5:02:07:6d:
                    b1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A4:03:6B:C3:DF:60:79:F9:69:B7:E3:90:D6:24:05:D3:67:40:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/a846b54d-f778-38fa-aff7-24dda6cea45d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.63.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:f4:1d:fa:17:b4:14:8b:1c:5c:3f:aa:7f:60:c4:fe:92:ca:
         a8:5f:17:2e:c1:b6:2b:9a:24:4e:70:fa:c9:a2:a0:9d:3c:8b:
         cf:84:4a:9e:32:06:11:03:f7:95:93:b7:6b:70:60:9d:d8:7a:
         1a:07:57:e8:4b:8f:0d:13:8b:31:57:30:f3:ce:91:27:ef:99:
         7a:03:21:a6:c0:fa:d7:14:49:7e:bd:e3:c3:df:26:62:69:12:
         a0:b4:41:90:39:a6:31:cd:5a:48:12:00:c4:32:de:d6:b1:19:
         e2:ad:03:8a:34:ef:b4:62:8d:4b:f2:81:56:e0:37:43:85:b6:
         5f:0f:b1:1f:44:be:94:95:f3:b2:a8:0c:42:b9:cc:98:95:50:
         82:69:5d:03:9b:68:99:cf:f4:20:06:16:f5:d4:90:b3:2d:99:
         63:84:33:ea:6d:d4:17:d6:c9:d6:23:f3:0f:ae:a2:cd:f1:15:
         a4:15:f1:ce:01:60:e3:62:9e:bc:eb:13:11:af:5a:05:7f:32:
         07:54:96:d7:1f:ff:0d:8c:39:b9:df:01:ff:37:96:c8:0c:91:
         d6:00:5d:f7:db:77:03:fa:5a:b8:72:19:11:43:ec:45:81:85:
         6e:ca:04:80:c4:23:4d:f1:ce:f0:43:ff:b3:d4:86:a9:e9:f1:
         46:8d:9b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:04:44 2026 by rpki-client