Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/11da962d-b616-3bbb-a780-d5f1555c8a88.roa
File:                     11da962d-b616-3bbb-a780-d5f1555c8a88.roa (raw, json)
Hash identifier:          nwAgJmsP2mE+ZMhritmkD83l072YEmffNXnMSCJnn+s=
Subject key identifier:   4E:7B:8F:42:42:D7:A7:ED:63:5C:0C:E5:B3:58:6B:F6:88:F7:30:C6
Certificate issuer:       /CN=54ace249-bf6f-423c-93c6-7cc74d8a1acb
Certificate serial:       010D0C9F4328584E66DA1BBB7BB9D25FA6570980
Authority key identifier: BF:BE:CF:95:64:53:39:46:28:49:B7:00:59:5C:17:D2:6F:7D:7C:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/11da962d-b616-3bbb-a780-d5f1555c8a88.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     14618
IP address blocks:        64.95.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/54ace249-bf6f-423c-93c6-7cc74d8a1acb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/54ace249-bf6f-423c-93c6-7cc74d8a1acb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:1b:bb:7b:b9:d2:5f:a6:57:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54ace249-bf6f-423c-93c6-7cc74d8a1acb
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=7f4a80cc-7c96-4c3c-90d0-899fb2683998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:be:d2:a8:30:50:db:c3:45:36:ee:05:6a:ef:
                    cf:a7:65:4a:fb:16:4c:fd:e1:37:56:a3:38:05:24:
                    ed:e4:11:53:9d:81:70:d2:7b:86:a7:ad:25:15:3b:
                    91:38:bc:f2:38:a4:58:0b:f1:fe:f4:86:2c:c4:22:
                    6d:7f:4b:d4:00:d7:90:15:45:93:b5:3e:88:4b:ae:
                    f8:e0:b3:51:f2:0f:ce:30:6a:a5:88:80:3a:54:f0:
                    f7:11:ee:47:a2:38:0e:a7:9c:7e:8c:df:13:b9:35:
                    a4:2e:3c:7d:2c:5d:48:f5:3e:89:4c:8d:6e:eb:97:
                    bb:97:e0:62:22:41:13:c3:e3:f3:87:67:7d:bb:da:
                    c2:7d:a0:c3:5c:5e:c6:01:1f:ed:85:52:73:aa:7e:
                    d5:b9:c0:6a:a8:f6:51:d1:cf:d9:c2:9d:6c:bc:80:
                    05:24:e7:c8:3f:72:fa:92:05:4e:d2:4b:52:3f:18:
                    b7:b8:24:5b:b3:5b:19:56:4a:05:35:da:84:3b:7e:
                    5e:61:85:54:a9:5d:f9:15:33:92:77:23:b4:98:bc:
                    05:3b:04:c9:e8:c9:29:31:51:f0:4d:51:74:6f:ff:
                    3f:2a:26:4b:4d:ba:7a:0e:67:b8:ef:32:a6:37:a9:
                    6a:cb:b3:d0:71:8d:fd:f5:a0:2e:4e:39:6f:bf:77:
                    9c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:7B:8F:42:42:D7:A7:ED:63:5C:0C:E5:B3:58:6B:F6:88:F7:30:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/11da962d-b616-3bbb-a780-d5f1555c8a88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/54ace249-bf6f-423c-93c6-7cc74d8a1acb.crl

            X509v3 Authority Key Identifier:
                keyid:BF:BE:CF:95:64:53:39:46:28:49:B7:00:59:5C:17:D2:6F:7D:7C:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.95.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:75:9a:0a:29:57:45:27:56:43:f4:da:48:24:cd:6c:13:d4:
         5e:9a:a0:c3:f0:da:82:6b:53:df:43:1b:e7:2d:be:e8:4a:0f:
         67:e6:ba:31:27:46:3b:36:89:bd:16:d4:c8:1b:94:39:9a:bd:
         bb:bf:e9:91:bb:b9:81:69:56:aa:16:0c:d5:33:7a:ec:e6:69:
         29:af:23:b7:70:91:01:77:ec:33:45:1e:4a:82:e9:a7:92:b1:
         06:e2:d5:08:56:9d:99:4a:a6:37:2c:0f:e5:b8:18:8b:a4:27:
         91:f0:e7:53:5e:e2:21:21:16:31:46:16:bb:f2:b5:ca:c3:68:
         7d:1b:0e:db:06:de:9d:42:7b:1a:51:46:ec:bf:d5:59:a5:47:
         76:51:d3:3d:b1:ed:7f:f2:59:1f:29:b5:41:d3:6b:7e:04:91:
         d1:c5:8a:eb:e3:db:c3:e9:47:50:8a:c4:9d:4d:66:ed:b4:13:
         9b:18:92:e5:6b:41:27:50:92:b9:aa:0f:9f:75:12:ab:92:d4:
         34:a6:22:ad:e6:8f:34:44:dc:df:71:b1:6d:38:1c:c1:d7:24:
         0d:64:cc:43:d8:08:43:f9:ab:54:74:5a:8d:4c:14:b4:3e:96:
         c7:54:44:c6:34:ec:55:59:c2:e7:c6:28:4c:7d:66:62:05:72:
         ba:ad:48:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:00:28 2026 by rpki-client