Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/ff6ae0c5-7b2f-39f7-a5a1-84d83ce7d62f.roa
File:                     ff6ae0c5-7b2f-39f7-a5a1-84d83ce7d62f.roa (raw, json)
Hash identifier:          xhlHuquz89VTxObhsB+rhw79/+6AINPLEy9Esl75SR4=
Subject key identifier:   9A:0A:0C:C4:F1:A7:5C:84:C7:6B:46:92:8C:90:8D:73:77:93:62:7C
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F4328584DA815753EC70FBD6BFE48A680
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/ff6ae0c5-7b2f-39f7-a5a1-84d83ce7d62f.roa
Signing time:             Tue 28 Apr 2026 13:00:30 +0000
ROA not before:           Tue 28 Apr 2026 13:00:30 +0000
ROA not after:            Mon 27 Jul 2026 13:00:30 +0000
asID:                     13414
IP address blocks:        64.63.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:15:75:3e:c7:0f:bd:6b:fe:48:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Apr 28 13:00:30 2026 GMT
            Not After : Jul 27 13:00:30 2026 GMT
        Subject: CN=6017fa71-9710-4853-b12d-83f100f658ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b5:d8:a2:f6:eb:5b:33:b2:de:b5:2d:1c:bc:
                    e5:3b:90:bc:00:db:39:03:8b:d4:5c:89:45:ce:05:
                    b1:58:a0:5e:d1:eb:d7:a8:05:c7:ac:0c:36:ee:f4:
                    8d:ab:9c:89:36:04:5a:3f:0d:c6:dd:3a:26:d1:d8:
                    ac:52:39:92:45:00:01:67:6c:66:a1:03:64:0f:87:
                    20:64:a4:19:37:21:d9:0c:68:0f:9e:31:a6:37:cf:
                    76:da:a1:5e:95:8d:cb:57:5a:9b:2f:10:8c:2b:d1:
                    d8:d8:21:3d:fb:80:d2:0b:ce:16:5a:3d:b0:81:c1:
                    9a:c9:d5:b0:36:70:7f:e1:fc:0c:36:17:e3:d4:1a:
                    63:d4:ae:47:3d:ca:fb:04:48:15:c6:0c:07:4e:73:
                    e7:62:51:56:9a:a7:6d:3e:f2:76:cb:a2:a6:d7:f6:
                    74:84:28:78:25:1c:9c:e6:11:22:6c:76:f7:d3:f5:
                    93:5e:09:da:df:e3:e6:89:11:c0:01:4a:5c:16:7d:
                    40:25:65:d0:63:82:a8:bf:27:da:31:51:2e:c9:6d:
                    c7:fd:89:28:d9:85:44:8e:cd:e8:41:12:3a:7b:64:
                    e4:39:75:7b:10:c1:d2:e1:23:dc:d4:93:ed:24:fd:
                    aa:7b:c9:75:39:02:01:bd:de:5d:59:a8:d6:94:ab:
                    b8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:0A:0C:C4:F1:A7:5C:84:C7:6B:46:92:8C:90:8D:73:77:93:62:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/ff6ae0c5-7b2f-39f7-a5a1-84d83ce7d62f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.63.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:7d:ae:ec:29:dd:8d:f0:f1:14:7a:a9:00:f0:47:6a:f1:07:
         15:c1:6e:20:2f:69:eb:05:38:1e:5a:34:d2:91:ba:93:71:22:
         4b:52:a4:ce:86:72:d5:5e:e4:88:a3:3d:00:dd:a7:a0:4b:3c:
         00:44:bd:4c:1b:c9:7e:04:3b:da:54:b7:1a:f4:36:5e:5c:c9:
         71:8b:6a:6d:50:1e:4b:cd:61:35:7c:7c:1d:26:4f:22:4a:8d:
         89:f9:16:8c:b0:d3:09:30:f5:71:cd:40:1d:73:79:be:1b:c1:
         78:56:b6:60:4e:89:73:d9:19:d0:95:e5:2a:09:d3:bf:dd:05:
         e1:20:17:42:c8:6d:e4:8e:36:30:a3:4f:4e:e7:74:6a:31:7e:
         f4:7b:e9:e1:78:a3:08:d7:e2:a8:47:4c:36:53:4e:b4:f8:b4:
         46:bb:8c:e6:ff:0e:bd:e3:23:0a:b2:6b:a6:56:4a:73:35:fa:
         fd:07:db:2b:57:16:d4:21:10:80:77:d4:67:44:d9:4b:2b:1b:
         17:79:b8:9d:19:20:b5:85:18:d3:48:6a:ea:45:c8:e2:70:7f:
         3b:7b:a4:f5:bb:07:ad:b0:83:14:fc:fd:51:fd:55:ff:58:13:
         d0:a0:e1:ee:40:25:b6:00:50:33:e5:33:2c:0d:f2:8f:13:16:
         39:ca:ba:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:32:16 2026 by rpki-client