Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/14a95db4-f488-33a6-a50e-3c5fecedab24.roa
File:                     14a95db4-f488-33a6-a50e-3c5fecedab24.roa (raw, json)
Hash identifier:          oKOW/q1ekzs9YLeMfkuUotF6aXhkXtOvICLORM6U+VM=
Subject key identifier:   BA:ED:46:8E:A9:EB:58:95:A2:E6:5E:BA:2C:CD:F5:89:74:3F:CE:B2
Certificate issuer:       /CN=54ace249-bf6f-423c-93c6-7cc74d8a1acb
Certificate serial:       010D0C9F4328584E66DA1BC7698AC85155C99D80
Authority key identifier: BF:BE:CF:95:64:53:39:46:28:49:B7:00:59:5C:17:D2:6F:7D:7C:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/14a95db4-f488-33a6-a50e-3c5fecedab24.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     16509
IP address blocks:        64.95.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/54ace249-bf6f-423c-93c6-7cc74d8a1acb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/54ace249-bf6f-423c-93c6-7cc74d8a1acb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:1b:c7:69:8a:c8:51:55:c9:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54ace249-bf6f-423c-93c6-7cc74d8a1acb
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=b7cf6a60-54aa-4aee-97c7-497716d00d70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0c:35:b2:80:93:b4:65:23:dc:81:0c:97:d1:
                    ae:46:fd:44:d6:5b:41:6d:be:05:9e:f0:7d:5c:67:
                    fe:f0:61:56:05:b4:c2:9c:7d:4b:94:07:a2:4b:1e:
                    48:1b:74:2c:90:d1:c0:85:68:13:23:cb:04:3f:89:
                    70:65:64:c9:b2:21:81:48:de:0f:53:50:ac:fe:0d:
                    c5:cd:4e:5c:02:6b:fd:61:65:df:b7:30:3a:fd:62:
                    0c:88:04:d6:1b:14:63:8d:66:16:79:55:99:ff:0e:
                    3a:e8:e5:5d:0e:c6:46:e4:37:59:15:74:fc:f6:22:
                    65:fb:7f:ad:26:07:95:d5:35:dc:69:2f:8a:e9:13:
                    0c:47:9f:69:f8:41:e3:7e:b5:3e:38:c9:55:32:9b:
                    64:54:e8:5e:14:90:8f:fa:4a:61:54:1b:18:46:02:
                    c1:0e:d6:b4:c7:1b:e9:95:69:0e:e5:d5:61:f7:49:
                    87:e6:58:72:03:8f:2f:c6:e0:45:69:8c:06:2b:81:
                    d5:ad:ff:c8:a0:12:4b:cc:55:1d:46:96:f4:a2:30:
                    17:82:d3:5f:3a:8d:33:5f:fa:5c:22:37:5b:0f:09:
                    05:45:d0:a4:41:10:b9:f4:25:f2:c1:95:6b:f6:83:
                    25:89:24:9d:be:80:b4:46:87:ba:4b:2a:e9:b9:2c:
                    14:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:ED:46:8E:A9:EB:58:95:A2:E6:5E:BA:2C:CD:F5:89:74:3F:CE:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/14a95db4-f488-33a6-a50e-3c5fecedab24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/54ace249-bf6f-423c-93c6-7cc74d8a1acb.crl

            X509v3 Authority Key Identifier:
                keyid:BF:BE:CF:95:64:53:39:46:28:49:B7:00:59:5C:17:D2:6F:7D:7C:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.95.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:79:d4:ad:53:a5:bf:91:25:7f:77:6f:8b:da:47:64:41:68:
         59:a7:dd:dd:76:28:29:32:b3:6b:66:ac:97:74:aa:d0:f2:93:
         89:8a:23:6c:ea:2f:c7:ac:a4:be:4a:e0:00:36:a2:15:02:df:
         71:63:27:4a:ab:27:89:35:00:f0:07:56:7e:7c:9e:b7:18:7c:
         8c:33:c0:00:3d:88:0d:f7:57:97:1b:b3:ab:2a:57:89:b0:77:
         6d:c5:44:fb:ac:52:a7:05:d7:a4:b4:9a:86:95:59:c9:30:06:
         56:05:2c:e0:3e:a8:09:f9:cd:09:70:11:8a:33:27:ff:ca:e7:
         d9:04:5a:03:65:24:91:c3:7a:06:59:98:58:66:d2:28:e6:1b:
         72:e5:48:a5:9f:c9:bc:4b:ad:05:b6:d5:2e:fe:ba:ac:63:88:
         ba:aa:f6:af:3a:53:1d:87:62:bb:68:e4:8f:50:3c:ec:5b:ba:
         ac:1b:61:78:d3:01:36:26:98:4f:3c:03:cd:52:55:16:c7:d0:
         03:77:0b:89:e4:5f:44:5f:5c:5b:38:1f:aa:f2:3e:04:2c:67:
         6a:a4:59:7d:a8:fc:dd:78:a2:53:f1:53:c1:ec:f9:b5:75:ab:
         1e:3b:13:48:44:17:54:90:d9:0d:79:bc:dc:7a:ab:12:2f:36:
         37:56:87:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:33:14 2026 by rpki-client