Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/45387154-5e3f-334b-9217-bffbcdab101b.roa
File:                     45387154-5e3f-334b-9217-bffbcdab101b.roa (raw, json)
Hash identifier:          LVjQvTYMWiO6LVemuo/4REg+rTRpPODpxFx2abvWDY4=
Subject key identifier:   AA:0C:DB:E5:90:5A:E9:1D:AB:B2:B1:FD:1C:A4:C5:20:E4:DC:F2:73
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584DF640A3C1A461E42C50918668
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/45387154-5e3f-334b-9217-bffbcdab101b.roa
Signing time:             Tue 26 May 2026 13:00:31 +0000
ROA not before:           Tue 26 May 2026 13:00:31 +0000
ROA not after:            Mon 24 Aug 2026 13:00:31 +0000
asID:                     852
IP address blocks:        64.114.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f6:40:a3:c1:a4:61:e4:2c:50:91:86:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: May 26 13:00:31 2026 GMT
            Not After : Aug 24 13:00:31 2026 GMT
        Subject: CN=4a956f59-7813-4b9e-98c5-0d014e43bbf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:44:13:70:76:72:a9:6e:01:96:c5:64:d2:52:
                    b8:cf:a3:23:8f:94:2e:3a:87:18:de:be:e6:de:bd:
                    e1:46:01:87:fa:cc:cf:58:26:a2:27:da:42:5b:c5:
                    08:c2:19:be:97:0a:79:bc:e1:dd:79:ee:bf:ee:d5:
                    8b:ff:f7:9e:2f:19:88:5e:53:cf:a3:89:7a:bb:81:
                    e6:5a:29:d4:a4:d2:a8:d0:46:fa:7b:95:d8:24:af:
                    d9:13:32:b1:63:8d:82:6e:4f:df:57:8b:15:b2:a6:
                    c5:95:04:95:65:94:0f:26:bf:f0:46:b0:3b:2e:5e:
                    22:67:04:e9:89:78:b4:de:75:91:f4:39:10:a0:ef:
                    d6:28:af:69:d5:17:49:b4:42:ef:6c:91:d0:d8:46:
                    79:93:b8:e7:0a:b7:03:95:60:be:23:26:56:4e:aa:
                    e7:1d:4f:14:49:43:07:12:92:cd:5e:72:67:dd:ce:
                    56:df:18:a8:d7:48:a4:46:36:bf:30:5f:13:b9:ab:
                    ce:97:1e:a7:20:c3:fd:44:46:7d:19:ff:7f:f5:29:
                    b9:d6:7e:bf:13:0f:98:bd:34:4a:6b:f1:f7:68:ba:
                    89:fd:5f:c8:db:a0:02:2c:f6:91:31:4e:eb:29:22:
                    1c:f9:57:4b:6c:44:84:ed:d7:d6:11:4e:de:25:8e:
                    fc:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:0C:DB:E5:90:5A:E9:1D:AB:B2:B1:FD:1C:A4:C5:20:E4:DC:F2:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/45387154-5e3f-334b-9217-bffbcdab101b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.114.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:d8:77:42:5a:cc:14:16:0e:80:28:f7:5e:7a:37:a8:4b:45:
         5c:53:61:56:d5:3b:9d:bb:20:f8:a1:b1:f8:d0:9b:6e:2f:3b:
         f3:40:2f:e0:55:e0:a0:f3:d2:5d:40:98:82:a4:54:88:f2:3c:
         87:f9:b9:34:ff:30:d2:6a:f7:d0:05:26:30:88:35:1f:f0:18:
         7c:63:06:61:c7:12:da:f3:a7:d8:a0:cd:be:e0:b1:5d:ef:ca:
         59:48:62:96:fb:8e:be:55:fa:67:7d:d7:55:ed:d5:89:91:71:
         66:7b:87:b9:11:88:76:77:96:46:cc:17:bc:fe:7e:e4:4d:a2:
         b7:6e:11:02:25:8b:68:c9:7f:42:89:f3:48:bc:6e:0d:6b:aa:
         6e:7b:81:38:57:b5:d6:2d:22:57:19:14:bd:6d:1a:6d:d6:b9:
         43:8f:c8:33:97:cf:e4:ee:af:ce:5d:11:21:97:d4:dc:52:74:
         ed:03:8e:0f:14:df:ee:8c:5e:33:9f:c3:2d:8e:6a:6d:e7:da:
         80:1a:5c:eb:e0:e4:df:7c:03:ba:02:a4:12:09:de:8b:26:78:
         ef:16:85:8e:7e:22:18:c5:39:81:22:61:2f:72:b8:ab:11:c4:
         67:b0:e9:a5:92:55:0c:2b:85:08:20:d8:89:60:52:8c:3b:f7:
         dd:cd:2a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:56:15 2026 by rpki-client