Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/af590b3c-8428-3d18-b0dd-b2b2d73d82b3.roa
File:                     af590b3c-8428-3d18-b0dd-b2b2d73d82b3.roa (raw, json)
Hash identifier:          3YqThoHx4i/FJrndQNRGdQd1j0zcx8lkAF8Ft5Z+ae0=
Subject key identifier:   F0:85:53:09:21:27:82:59:4A:71:42:45:78:6B:03:5C:F9:69:3A:70
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F4328584DA8157A80C5D8190791DDEFF0
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/af590b3c-8428-3d18-b0dd-b2b2d73d82b3.roa
Signing time:             Tue 28 Apr 2026 13:00:30 +0000
ROA not before:           Tue 28 Apr 2026 13:00:30 +0000
ROA not after:            Mon 27 Jul 2026 13:00:30 +0000
asID:                     13414
IP address blocks:        64.63.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:15:7a:80:c5:d8:19:07:91:dd:ef:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Apr 28 13:00:30 2026 GMT
            Not After : Jul 27 13:00:30 2026 GMT
        Subject: CN=ebfc9565-fc37-4c1e-9b32-488af40f2237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:91:2d:cf:9d:1d:a5:d4:e5:72:29:a8:cb:ac:
                    90:e5:53:50:bc:b0:ef:5b:2c:46:e3:1c:ee:be:23:
                    17:16:12:9f:2d:7b:7b:e6:c7:ba:8e:02:91:4e:62:
                    ab:f4:3e:cf:15:43:ed:3d:0e:0c:5d:7c:b8:23:bc:
                    a0:0d:47:a7:6f:02:e6:66:b9:f1:87:3b:72:84:7d:
                    f8:2f:39:a0:4d:31:7b:c4:72:63:a4:9b:42:14:ea:
                    f0:f1:fc:ef:aa:e9:4c:92:bc:0b:4e:4a:48:8a:4c:
                    1d:32:61:e8:29:7a:c3:66:8b:47:55:f6:a9:35:5f:
                    94:51:ce:d9:ff:d7:d5:cc:5a:1e:cf:89:6c:93:ea:
                    e7:d4:b0:f1:a3:e7:a5:56:d2:bd:e5:33:e5:e5:65:
                    a0:61:60:5f:52:45:14:e7:1e:5d:40:43:99:b0:29:
                    95:15:fa:36:64:1e:cc:41:a9:04:80:08:19:a1:80:
                    3b:80:19:1e:4a:ee:f4:4c:8b:41:81:f4:e9:b5:7c:
                    87:a3:8f:2e:fd:61:3b:f4:87:4b:7e:21:8c:2e:42:
                    f2:34:9d:00:01:33:62:40:e8:c8:35:33:d6:a1:c2:
                    0e:a5:33:de:e0:7b:00:64:90:fb:38:b1:3f:3b:d7:
                    28:d8:27:51:c4:a5:21:5a:a5:dc:55:90:93:73:34:
                    da:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:85:53:09:21:27:82:59:4A:71:42:45:78:6B:03:5C:F9:69:3A:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/af590b3c-8428-3d18-b0dd-b2b2d73d82b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.63.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:00:a0:1a:a2:35:49:c4:06:af:72:13:57:5b:82:8a:df:f2:
         3a:70:49:a1:4f:78:cf:9f:1f:1f:86:9f:7a:5c:6b:fd:d7:e1:
         0a:88:b3:1b:51:c5:15:4e:2d:6e:f4:8a:4c:a5:a6:a4:8c:0b:
         5d:f6:ee:37:aa:cc:6b:ce:cb:b1:84:50:b2:bd:4f:9c:c0:c9:
         94:e4:c0:a7:e2:21:e0:2f:d6:13:c5:71:19:fe:24:a9:1f:cb:
         52:e1:8b:3e:f0:69:3a:ec:c0:7d:c5:c7:51:83:17:79:03:8d:
         a0:4c:64:4a:41:c2:d5:8e:b3:f8:5d:b2:08:92:08:26:09:40:
         fa:ef:5e:c5:21:ba:a6:41:36:c9:d0:b6:c1:5e:23:fd:6e:72:
         4b:74:3d:02:55:df:64:00:4f:66:31:63:57:86:77:ec:49:b0:
         d4:c7:76:b0:c4:bd:f8:66:92:08:38:b4:94:16:f8:9e:e2:0b:
         42:6d:4a:e2:09:96:6e:59:4b:f0:d4:0e:fc:8d:76:37:61:e1:
         af:a1:65:e6:4a:14:2f:06:ed:1e:0a:50:d4:ee:96:7d:b3:bb:
         0d:43:32:b9:5f:f2:1d:6a:33:85:56:71:ab:dc:b4:5d:be:8b:
         53:17:00:a3:0d:9b:fa:6c:8a:6a:c5:57:21:9f:ee:50:d5:a3:
         f3:8e:84:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:29:42 2026 by rpki-client