Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/c45e0e64-1c59-3a97-b0c4-101173c45a5a.roa
File:                     c45e0e64-1c59-3a97-b0c4-101173c45a5a.roa (raw, json)
Hash identifier:          wAvGL9/tNo/FtiLUOgkHPI7BDGVcOiIDqAYrB5O5+q8=
Subject key identifier:   00:C4:16:A6:DB:F6:3D:DB:34:84:AE:8F:BE:F2:0A:24:A9:3D:36:F4
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F4328584DAAE029EBA22203718EAAA380
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/c45e0e64-1c59-3a97-b0c4-101173c45a5a.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     13414
IP address blocks:        64.63.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:29:eb:a2:22:03:71:8e:aa:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=f5dbab29-883e-497c-8ab0-de5e2a15aab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:94:02:43:01:2f:2d:dc:9e:d8:f5:e3:e6:52:
                    74:dd:c6:0e:72:eb:0b:bb:76:cd:a9:ee:6b:1a:7e:
                    95:55:d1:c3:7a:ac:6f:b2:8a:36:6b:77:83:c4:d8:
                    d8:ef:43:80:55:c9:8d:a3:ae:3f:f9:f4:f3:cd:3a:
                    11:13:f7:e7:18:42:bb:cb:71:1c:67:21:6a:ce:b2:
                    bd:80:2e:26:35:a2:99:8c:f3:83:83:af:4f:43:4a:
                    1f:55:63:2a:5f:96:14:89:0b:8e:c6:21:42:79:54:
                    bc:d6:72:28:b5:9f:54:9c:e4:76:07:3e:5f:6b:80:
                    40:23:9d:e8:ec:3e:05:ab:1f:09:ea:f7:7f:4e:ff:
                    a0:0c:2c:ad:a8:52:eb:c0:53:ac:23:c9:7b:b7:ce:
                    d0:fe:5e:6e:48:dd:eb:b9:92:47:91:c1:95:17:e2:
                    1e:cc:0e:ba:4c:e0:e4:c1:41:14:87:3d:cd:8b:60:
                    bc:61:36:d9:f8:3d:ba:08:40:fe:38:a1:b4:e7:06:
                    6c:ea:e7:b8:b7:c5:53:63:be:1f:0b:d9:df:e3:77:
                    a3:52:96:4f:f9:a0:03:59:e2:6d:bd:79:be:75:68:
                    bb:1f:a6:94:1f:78:ce:54:89:c9:b3:cf:51:c2:57:
                    61:3f:b7:09:23:6b:e5:34:59:e2:ee:79:0e:8c:4d:
                    51:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C4:16:A6:DB:F6:3D:DB:34:84:AE:8F:BE:F2:0A:24:A9:3D:36:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/c45e0e64-1c59-3a97-b0c4-101173c45a5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.63.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:f6:11:ad:5f:7b:d5:1e:52:7f:9c:c0:f8:d7:ab:51:30:e8:
         cf:81:d0:e9:15:87:ae:bb:e4:a1:d9:d6:a9:84:be:55:ae:48:
         bf:04:33:09:5c:17:cd:81:3f:74:ba:3f:d5:a3:28:5a:b6:bc:
         c5:60:6d:02:69:5a:f0:04:54:b4:ae:d9:43:ba:99:d5:8d:bd:
         29:db:27:24:7e:5c:05:b5:1c:66:fc:b2:6f:d8:b6:a3:0b:0a:
         18:52:0e:8d:8b:5d:6f:6d:b3:fa:36:06:5e:74:ab:ce:e3:31:
         01:50:be:a8:2a:cc:bf:e0:ff:99:92:6c:2d:66:e1:85:4d:b6:
         e7:28:46:93:ab:64:cc:b9:24:f0:be:03:e1:a9:91:7f:0d:bd:
         54:34:64:42:fd:70:db:b6:4f:34:a8:a8:6a:a3:cf:61:33:d2:
         b2:1d:4c:76:d9:c8:fc:a1:3c:54:c4:92:38:df:97:e9:e0:86:
         59:9b:5c:9d:20:18:7d:42:c9:cf:2f:88:38:bd:84:87:09:b7:
         2a:c4:f2:73:66:32:1e:c1:04:71:da:f1:a1:d1:7e:48:43:fc:
         5f:8c:4e:3c:5e:e2:9b:47:f8:21:3a:c1:49:b5:b4:5d:4e:45:
         78:6c:76:99:d4:7b:63:4b:46:86:e7:4b:e5:1d:17:93:bb:d9:
         b5:bd:d6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:05:20 2026 by rpki-client