Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/8b13b50f-66e1-30e9-8a8b-86a602c29d98.roa
File:                     8b13b50f-66e1-30e9-8a8b-86a602c29d98.roa (raw, json)
Hash identifier:          NrnpHf9tblFXqM0h15rf7kM9DZu+1Kt4Wa+2f+A4df0=
Subject key identifier:   A7:DA:31:D6:18:48:D1:39:F0:5A:FE:43:68:F5:BA:ED:D3:AB:CA:4A
Certificate issuer:       /CN=14ee329f-6a96-44cb-8cc5-222e0fec8c3a
Certificate serial:       010D0C9F4328584D7A052FF2C3350932BFFCCA80
Authority key identifier: AE:48:23:F9:A1:EA:C3:0A:1E:7A:D0:58:AA:D4:EA:78:AF:C1:EC:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/8b13b50f-66e1-30e9-8a8b-86a602c29d98.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     209453
IP address blocks:        173.246.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:2f:f2:c3:35:09:32:bf:fc:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14ee329f-6a96-44cb-8cc5-222e0fec8c3a
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=80405251-09a4-45a4-bb31-5208ff1fcda5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ec:13:d8:7b:f0:7c:51:fa:d6:18:17:e9:75:
                    f5:a7:59:9f:7a:17:f7:c8:9e:f5:dd:1b:ba:53:b7:
                    6d:69:f2:56:c2:c6:ad:2e:3b:ec:57:4e:e0:86:c3:
                    86:6d:fa:25:8b:92:8b:24:22:4c:51:ea:71:67:d1:
                    08:00:9d:b2:93:43:d2:56:d8:46:49:8b:ec:48:41:
                    1e:af:42:67:ad:b5:67:dc:49:49:ee:e6:8f:9a:93:
                    cc:51:8e:1d:a1:21:fa:5b:f0:19:7e:1c:75:9c:47:
                    63:ab:77:2c:7b:a0:3b:5d:14:71:db:4a:de:0c:e4:
                    6e:4d:b9:8d:63:de:89:1d:20:c1:d8:56:10:cc:0f:
                    51:7e:8d:b0:72:f9:29:87:53:0c:be:be:a0:c5:a0:
                    34:91:7f:12:f6:6d:01:56:ca:da:31:29:c5:31:4f:
                    7c:73:2f:2c:7d:de:c0:4e:9e:b9:ea:56:73:e1:1f:
                    58:5a:40:64:49:09:81:e2:9d:a1:33:a9:e6:26:ea:
                    2a:b8:ad:1f:98:ae:0a:e5:88:a3:4c:98:62:a7:2d:
                    95:0f:80:39:e6:73:cc:cc:10:9b:57:f6:14:b1:e1:
                    79:33:21:4c:8d:16:da:38:3c:bb:35:27:5e:94:b1:
                    c2:55:88:d9:4a:81:71:00:f7:3d:3b:94:27:11:cc:
                    95:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:DA:31:D6:18:48:D1:39:F0:5A:FE:43:68:F5:BA:ED:D3:AB:CA:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/8b13b50f-66e1-30e9-8a8b-86a602c29d98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.crl

            X509v3 Authority Key Identifier:
                keyid:AE:48:23:F9:A1:EA:C3:0A:1E:7A:D0:58:AA:D4:EA:78:AF:C1:EC:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.246.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:4d:f8:2b:f1:6c:50:00:d7:a2:83:fc:a3:83:58:07:13:c5:
         35:c7:71:45:b1:da:d1:d5:b6:a6:52:cb:f9:28:f6:35:03:72:
         0e:43:c0:80:84:cf:b7:e6:35:ac:3a:76:61:ed:64:78:b9:8c:
         92:c4:6f:97:7c:97:81:8b:9f:e1:77:52:d8:d8:9a:74:47:78:
         17:f9:ab:7d:ec:15:af:98:2c:57:2b:a2:58:88:8f:04:d8:33:
         c4:93:c0:be:14:50:65:9f:ab:9c:71:a9:32:59:ae:a5:35:95:
         49:88:9c:a3:6f:f0:0a:ae:7a:ab:0c:ee:76:9d:dd:d7:26:dd:
         e4:4f:f1:fc:d9:09:c4:87:e4:42:1d:e5:ea:80:24:23:61:12:
         df:5a:a1:14:8d:7e:db:94:99:b6:f5:61:48:7b:57:af:cb:d2:
         93:d2:9c:e2:53:43:3e:2b:ba:79:91:26:a4:25:a2:4d:e4:24:
         14:0b:e9:7e:6e:65:24:fb:e5:a8:06:82:5e:f7:2e:d9:4f:02:
         72:36:22:a1:02:61:f6:bf:64:0a:7f:e8:2f:9f:06:0e:d6:11:
         c6:80:e6:70:0e:47:c2:1a:ff:8b:18:45:3a:cc:f5:64:9b:48:
         62:8a:22:ee:f4:7d:4f:ab:b4:04:21:2a:e9:7f:b6:24:e7:97:
         76:0b:9f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:07:41 2026 by rpki-client