Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/e811afce-0908-3263-aba4-6d6993e52eef.roa
File:                     e811afce-0908-3263-aba4-6d6993e52eef.roa (raw, json)
Hash identifier:          S84pdEswFFpPCUAOnAHtAWYFol+IN05APia+CQrfdy4=
Subject key identifier:   E5:B1:56:B5:B5:2E:35:FA:79:CD:E8:27:5D:42:BD:FD:C9:16:F3:95
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F4328584DA81574BF63D6C179C052AD00
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/e811afce-0908-3263-aba4-6d6993e52eef.roa
Signing time:             Tue 28 Apr 2026 13:00:30 +0000
ROA not before:           Tue 28 Apr 2026 13:00:30 +0000
ROA not after:            Mon 27 Jul 2026 13:00:30 +0000
asID:                     13414
IP address blocks:        64.63.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:15:74:bf:63:d6:c1:79:c0:52:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Apr 28 13:00:30 2026 GMT
            Not After : Jul 27 13:00:30 2026 GMT
        Subject: CN=19ed2399-a1aa-424a-bb1d-de43ce7b8f34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:de:a3:bd:a2:82:5d:bd:2d:fd:94:f5:91:8a:
                    dc:19:8a:df:85:57:19:4f:6f:98:dd:2e:ef:f1:00:
                    8c:1c:bc:95:40:05:3a:c6:9e:6b:a2:4a:56:77:70:
                    c8:7c:83:9b:6d:53:e4:06:23:14:0a:af:01:34:eb:
                    80:58:8f:29:5d:b5:1d:97:f4:1a:df:26:4e:6c:45:
                    06:7d:cc:c7:61:dd:46:26:08:63:d2:80:50:c1:bd:
                    e2:31:e1:25:20:38:13:fe:27:53:3b:c1:50:7f:de:
                    92:fe:03:31:7e:52:c6:eb:cd:48:0f:50:af:31:fc:
                    48:60:d6:91:ef:2f:f3:bf:c8:ea:34:cd:ba:0c:f5:
                    7f:96:45:f7:ec:34:25:e0:51:6d:78:26:3d:db:cc:
                    a3:c9:55:67:71:29:be:55:8f:ae:b8:2d:19:83:b2:
                    5f:fe:6c:20:eb:ba:d2:ce:bc:d1:ae:c1:c2:fc:8c:
                    f4:f8:49:80:c4:fd:02:d7:2b:e7:a9:41:3b:74:24:
                    b2:4f:52:79:ae:48:f9:c1:19:19:c6:87:e4:84:33:
                    a3:e9:c8:5c:b2:67:c9:03:2a:f4:d9:71:ab:2d:92:
                    f2:5c:76:d3:aa:3f:4e:f0:a1:35:b5:3c:e8:f8:7f:
                    ed:2c:d1:5b:fc:d3:a4:44:05:7b:0b:cf:7e:44:79:
                    fc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B1:56:B5:B5:2E:35:FA:79:CD:E8:27:5D:42:BD:FD:C9:16:F3:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/e811afce-0908-3263-aba4-6d6993e52eef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.63.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:74:3b:d0:57:3e:1d:de:77:9e:16:e6:ef:5a:99:e2:07:a5:
         a7:a7:ee:b1:0b:3f:1d:76:14:a1:6b:ea:2e:ba:51:92:ec:e3:
         b0:ce:6f:23:e8:d9:23:fb:a9:d2:39:1c:06:6b:00:7b:9c:42:
         1e:e6:27:1d:01:89:32:06:e0:8a:cb:3f:1f:ad:eb:fb:dc:de:
         7e:32:db:42:1b:6d:84:c1:6a:ca:ed:84:8c:66:b6:3b:54:d4:
         40:2a:73:7e:8f:9f:73:19:0e:8f:b7:f7:80:e3:91:66:73:a1:
         01:7d:3a:b4:4e:df:de:42:de:96:2f:2a:9a:c2:c3:0a:4a:7e:
         cc:f6:aa:0e:77:9d:64:77:12:8a:c6:19:d0:f4:28:a9:05:4e:
         5b:c2:0e:a1:47:0c:14:2f:a2:77:55:94:6a:ff:38:15:89:b2:
         ec:3e:d1:d0:53:05:e5:c4:21:f3:c4:9c:f3:02:5c:17:3d:50:
         26:45:d0:c3:79:40:8a:dd:00:fe:f7:68:b7:c8:20:34:17:4c:
         6b:74:d4:5e:be:ac:00:a0:87:b3:76:f0:d0:18:70:11:6d:4e:
         34:76:48:c2:43:26:d0:61:8f:09:e5:b7:57:3d:89:06:16:84:
         fe:7f:a2:23:e2:02:50:86:d8:e3:d1:54:d6:2a:0f:27:26:af:
         25:2f:0e:c4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oFXS/Y9bBecBSrQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy
NTc2MB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk
MTllZDIzOTktYTFhYS00MjRhLWJiMWQtZGU0M2NlN2I4ZjM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp96jvaKCXb0t/ZT1kYrcGYrfhVcZT2+Y3S7v
8QCMHLyVQAU6xp5rokpWd3DIfIObbVPkBiMUCq8BNOuAWI8pXbUdl/Qa3yZObEUG
fczHYd1GJghj0oBQwb3iMeElIDgT/idTO8FQf96S/gMxflLG681ID1CvMfxIYNaR
7y/zv8jqNM26DPV/lkX37DQl4FFteCY928yjyVVncSm+VY+uuC0Zg7Jf/mwg67rS
zrzRrsHC/Iz0+EmAxP0C1yvnqUE7dCSyT1J5rkj5wRkZxofkhDOj6chcsmfJAyr0
2XGrLZLyXHbTqj9O8KE1tTzo+H/tLNFb/NOkRAV7C89+RHn8gQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOWxVrW1LjX6ec3oJ11Cvf3JFvOVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3
YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvZTgxMWFmY2UtMDkwOC0z
MjYzLWFiYTQtNmQ2OTkzZTUyZWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3
YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi
MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh
NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD8CMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD50O9BXPh3ed54W5u9ameIHpaen7rELPx12FKFr6i66UZLs47DObyPo
2SP7qdI5HAZrAHucQh7mJx0BiTIG4IrLPx+t6/vc3n4y20IbbYTBasrthIxmtjtU
1EAqc36Pn3MZDo+394DjkWZzoQF9OrRO395C3pYvKprCwwpKfsz2qg53nWR3EorG
GdD0KKkFTlvCDqFHDBQvondVlGr/OBWJsuw+0dBTBeXEIfPEnPMCXBc9UCZF0MN5
QIrdAP73aLfIIDQXTGt01F6+rACgh7N28NAYcBFtTjR2SMJDJtBhjwnlt1c9iQYW
hP5/oiPiAlCG2OPRVNYqDycmryUvDsQ=
-----END CERTIFICATE-----
Generated at Wed May 13 07:16:24 2026 by rpki-client