Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee5309a0-cc40-45fb-8638-b4960e7326cc/dc4e5f51-78df-361d-b482-027c19400045.roa
File:                     dc4e5f51-78df-361d-b482-027c19400045.roa (raw, json)
Hash identifier:          Has5cjfvr3onxXwVhbSaeSwdWC9z1VIPosRbN8x6vjA=
Subject key identifier:   6E:F1:E7:A1:8D:D0:43:C8:D9:C3:CA:1F:AB:D1:8E:37:0D:B3:40:02
Certificate issuer:       /CN=ee5309a0-cc40-45fb-8638-b4960e7326cc
Certificate serial:       010D0C9F4328584CD2945E5B562B048EDD7D0D80
Authority key identifier: A1:99:DB:68:6C:94:EF:BE:6C:88:1D:82:50:B2:AC:89:F7:F9:13:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee5309a0-cc40-45fb-8638-b4960e7326cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee5309a0-cc40-45fb-8638-b4960e7326cc/dc4e5f51-78df-361d-b482-027c19400045.roa
Signing time:             Wed 11 Feb 2026 01:33:20 +0000
ROA not before:           Wed 11 Feb 2026 01:33:20 +0000
ROA not after:            Tue 12 May 2026 00:33:20 +0000
asID:                     53764
IP address blocks:        64.186.14.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee5309a0-cc40-45fb-8638-b4960e7326cc/ee5309a0-cc40-45fb-8638-b4960e7326cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee5309a0-cc40-45fb-8638-b4960e7326cc/ee5309a0-cc40-45fb-8638-b4960e7326cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee5309a0-cc40-45fb-8638-b4960e7326cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d2:94:5e:5b:56:2b:04:8e:dd:7d:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee5309a0-cc40-45fb-8638-b4960e7326cc
        Validity
            Not Before: Feb 11 01:33:20 2026 GMT
            Not After : May 12 00:33:20 2026 GMT
        Subject: CN=176878d1-94c9-45ed-9853-ee535b0f9650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:15:6c:0c:7c:44:fb:78:34:be:14:9b:3a:30:
                    05:b1:0f:7f:57:36:f4:98:e7:05:ae:13:36:29:1d:
                    a2:18:ce:95:63:eb:54:5a:7c:97:e8:ad:de:95:95:
                    9f:dc:2f:ac:3d:97:d5:8b:c5:9c:e7:87:3a:80:02:
                    f3:9e:3f:52:92:09:df:c0:b3:05:71:f0:c5:e0:22:
                    47:39:7d:d0:ba:a5:13:50:ea:5f:d1:b5:d3:9e:be:
                    fd:e0:52:ee:8f:d2:8d:b2:99:90:b6:8c:60:1d:fc:
                    2b:ee:61:aa:ad:91:33:1e:62:3c:72:a4:a6:fb:24:
                    7b:e4:41:97:78:4b:72:fe:3e:75:54:c5:8c:df:ec:
                    26:00:73:5e:21:d9:ff:a3:6e:44:af:67:71:65:4a:
                    b2:27:e2:87:8b:ad:b8:d9:0f:c2:5b:34:ef:4c:75:
                    b2:9f:83:fb:55:2e:de:6f:e7:33:0c:f5:2c:8e:4d:
                    35:1e:f4:cc:7f:d7:c2:52:ab:35:f9:30:a5:06:2b:
                    ba:14:89:f2:f5:7b:d1:b0:9c:f9:fc:43:9c:73:54:
                    dd:53:f1:bc:c7:c7:16:18:03:22:f2:05:09:ac:45:
                    5a:31:80:b8:b8:fb:8f:58:36:74:8e:d5:c1:93:8c:
                    04:bd:22:21:5c:f1:4a:44:8d:9a:f0:1e:72:cf:5e:
                    64:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F1:E7:A1:8D:D0:43:C8:D9:C3:CA:1F:AB:D1:8E:37:0D:B3:40:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee5309a0-cc40-45fb-8638-b4960e7326cc/dc4e5f51-78df-361d-b482-027c19400045.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee5309a0-cc40-45fb-8638-b4960e7326cc/ee5309a0-cc40-45fb-8638-b4960e7326cc.crl

            X509v3 Authority Key Identifier:
                keyid:A1:99:DB:68:6C:94:EF:BE:6C:88:1D:82:50:B2:AC:89:F7:F9:13:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee5309a0-cc40-45fb-8638-b4960e7326cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.186.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:8c:aa:7f:23:9c:6c:94:f5:df:05:8a:4f:e9:9f:48:43:aa:
         82:40:6c:31:77:13:94:13:54:89:1b:4a:17:51:a7:6d:4c:cb:
         e2:f6:e6:94:f9:b3:9f:f2:f7:52:b8:35:e7:8a:4c:df:01:38:
         1d:4b:3c:a2:6b:58:a1:df:9f:4e:e4:3b:02:9b:33:88:69:63:
         10:6f:c7:c7:be:2e:10:a3:5b:5a:2d:69:ae:df:3a:6f:7f:71:
         6e:86:9b:b6:4c:f6:9a:dc:d6:6b:4b:e7:8b:41:19:c2:81:54:
         07:3d:34:6e:50:fd:ac:ff:9a:10:f2:f6:a6:7b:9f:d9:a9:e8:
         1e:52:ec:e3:dd:0b:dd:32:ce:e5:75:19:f4:47:a2:2f:9e:7f:
         2f:ae:f2:08:c7:0a:45:52:ff:23:4b:2f:f2:1c:e7:e4:e5:a6:
         8e:7f:61:e6:92:bd:2d:55:7a:1c:a4:da:9e:cc:2a:f4:7c:34:
         67:c8:0b:58:5b:81:c8:69:4a:bf:9d:08:a9:42:01:98:ae:ac:
         d0:12:4b:13:3c:59:07:50:cd:c7:f8:2f:93:3a:ef:b2:9b:3b:
         eb:23:a6:1d:b2:41:83:4c:b0:e7:e1:b3:c4:39:0b:65:1d:ed:
         20:b9:1b:5d:87:c1:42:77:90:1b:46:fc:61:8a:fa:9a:01:89:
         a7:b8:5e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 19:10:36 2026 by rpki-client