Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/e5f5285b-e628-3455-8879-5db0205f9619.roa
File:                     e5f5285b-e628-3455-8879-5db0205f9619.roa (raw, json)
Hash identifier:          qFirU0vBhLBRXNOo/ZPOdBqeCupxzw6sl2yjc4VRq1U=
Subject key identifier:   37:29:F1:E1:FF:38:92:E0:D3:DD:A2:50:0C:70:D3:5D:DC:2A:AA:E1
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F4328584F2D87BBD4EB448FD3A86BF200
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/e5f5285b-e628-3455-8879-5db0205f9619.roa
Signing time:             Tue 15 Sep 2026 01:00:12 +0000
ROA not before:           Tue 15 Sep 2026 01:00:12 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     13414
IP address blocks:        64.63.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:87:bb:d4:eb:44:8f:d3:a8:6b:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Sep 15 01:00:12 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=4ed0c93b-1d93-40b5-be76-7b26cafa63d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:81:03:0d:0d:bc:8e:95:d5:9e:3a:a0:7b:46:
                    61:93:ee:d6:d7:93:13:bb:78:7a:63:3e:f1:99:6c:
                    54:93:2f:12:e2:0d:8a:a0:da:f0:f6:fa:a3:25:e7:
                    5a:d8:ee:23:0c:c7:7a:d1:41:71:c4:df:9a:a8:f3:
                    15:31:ed:6b:16:8d:fc:f7:7f:af:f8:93:17:3a:70:
                    15:29:d6:40:1a:1f:22:6c:3b:c1:1f:72:94:98:5d:
                    b3:a4:c9:15:9a:3f:e8:b6:07:9e:2f:bc:db:37:31:
                    ae:c2:c8:65:f5:00:23:b5:29:a2:60:e1:cf:5a:30:
                    6e:20:cc:eb:d6:3d:48:2b:36:d0:31:e7:a7:ad:82:
                    28:b5:58:d8:c9:f4:d7:2a:aa:8d:03:03:ef:40:a0:
                    a6:2a:4a:01:d0:2d:3e:57:3d:3e:91:ee:8c:24:9e:
                    e6:77:db:cc:90:2f:b2:a0:70:8a:3e:da:03:3c:d2:
                    a4:b4:a0:b8:12:ad:57:10:7c:3f:60:44:c8:4b:3a:
                    6b:ee:a3:29:4e:e6:5b:0e:bc:58:15:1a:c5:05:59:
                    de:82:a8:20:f3:16:e9:0e:59:f1:7f:72:d8:2e:87:
                    38:8e:c9:cb:ae:9e:5a:69:1f:08:c6:d7:53:85:43:
                    00:b5:72:3a:f1:4c:f5:e1:b3:5d:71:f2:77:70:bd:
                    89:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:29:F1:E1:FF:38:92:E0:D3:DD:A2:50:0C:70:D3:5D:DC:2A:AA:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/e5f5285b-e628-3455-8879-5db0205f9619.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.63.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:07:3d:d4:f7:8c:9a:48:5a:1f:e0:80:86:82:ef:29:09:fa:
         6c:f2:ba:55:65:d4:b8:c3:de:38:8d:e4:2c:8d:c1:7e:fe:2b:
         28:ae:3e:3d:e0:28:5f:dd:1a:11:90:c8:47:8b:d3:c1:81:a3:
         10:3f:04:0f:7c:b4:e7:5f:7b:1d:3c:1e:73:8b:9b:4a:69:3b:
         16:32:59:c5:66:a8:61:56:36:4b:8e:45:d8:9a:d0:f9:6a:b6:
         94:f6:6b:63:44:c8:06:ee:1d:9d:90:94:22:54:7e:cd:22:35:
         5c:a5:c4:34:f7:f1:d5:68:e3:25:07:62:e9:ad:6d:88:7c:61:
         af:1c:8b:59:4a:92:20:a9:5c:65:35:ba:20:ae:cb:77:9f:20:
         d4:4a:94:20:b6:52:16:4b:3d:1f:29:56:80:bb:b5:4f:ac:a7:
         36:e0:b9:a9:0e:47:e9:99:5b:56:08:f7:c4:eb:8b:d9:00:c2:
         d4:42:af:58:ca:da:0d:6b:21:ae:09:f1:f9:4f:77:27:93:e0:
         96:bf:9f:53:6b:09:24:af:71:3f:27:b7:0a:79:51:1f:71:3c:
         42:6e:f2:9e:10:9d:5b:ad:82:ed:9d:84:b3:1c:96:1b:71:e3:
         99:3a:51:98:d6:3c:ca:fd:38:d6:4d:27:f1:f5:9f:a1:6f:bd:
         25:38:a9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:48:25 2026 by rpki-client