Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/f03ed9e3-4880-37ed-8a56-b1feec022ff2.roa
File:                     f03ed9e3-4880-37ed-8a56-b1feec022ff2.roa (raw, json)
Hash identifier:          CwqbS8NFL7OPr7SbJ7CKlAXjZcyBoRVsXIecTPRf9e8=
Subject key identifier:   7F:9C:5C:75:2E:29:52:99:72:A9:F9:4D:AE:A1:C2:5C:3F:B3:6A:BB
Certificate issuer:       /CN=14ee329f-6a96-44cb-8cc5-222e0fec8c3a
Certificate serial:       010D0C9F4328584C9967117F4C65C44C3461A5E0
Authority key identifier: AE:48:23:F9:A1:EA:C3:0A:1E:7A:D0:58:AA:D4:EA:78:AF:C1:EC:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/f03ed9e3-4880-37ed-8a56-b1feec022ff2.roa
Signing time:             Wed 21 Jan 2026 14:00:38 +0000
ROA not before:           Wed 21 Jan 2026 14:00:38 +0000
ROA not after:            Tue 21 Apr 2026 13:00:38 +0000
asID:                     29169
IP address blocks:        173.246.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:99:67:11:7f:4c:65:c4:4c:34:61:a5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14ee329f-6a96-44cb-8cc5-222e0fec8c3a
        Validity
            Not Before: Jan 21 14:00:38 2026 GMT
            Not After : Apr 21 13:00:38 2026 GMT
        Subject: CN=4a6a9db1-f2e2-484a-9a7e-108fb4fb15ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d7:99:4f:62:5d:c8:9b:94:da:10:32:ed:97:
                    8b:08:82:1c:ac:5a:fb:94:f6:44:c3:94:fb:21:a0:
                    e7:eb:2c:18:ea:af:77:23:c1:35:94:28:17:d6:47:
                    f8:32:33:22:f2:19:c6:49:26:65:3b:14:c1:8e:0c:
                    ed:cd:d7:31:e5:93:cd:c1:7a:8b:c2:31:fa:e2:d7:
                    1c:86:ad:42:43:06:2d:90:d4:6b:a4:19:84:cd:ab:
                    c9:54:44:4c:c4:26:6a:9f:5e:30:a5:df:27:b7:a1:
                    ed:21:cd:47:2b:1f:d8:60:2b:26:83:bb:4c:35:93:
                    38:14:b5:b2:9f:aa:23:17:48:fc:ec:e6:c8:0a:92:
                    d1:1e:6c:4e:aa:41:24:53:51:c6:fd:25:29:db:dc:
                    75:e7:84:b0:71:1e:fa:96:73:c4:06:67:cf:51:23:
                    6c:36:e8:00:34:c2:69:a8:f4:d1:ec:d6:9a:3a:ff:
                    9a:2a:1a:87:e7:03:30:07:66:6c:c7:6d:31:a2:ea:
                    71:ac:58:9c:5d:75:94:2f:fb:47:9d:88:31:7c:96:
                    8c:8f:50:f0:88:38:92:10:ed:96:90:1f:bf:90:f1:
                    e9:9f:40:a8:cf:e5:3b:94:95:59:6e:37:d2:c0:9b:
                    6e:12:9c:11:13:1b:b6:7e:83:ae:ae:f1:a4:a2:ef:
                    a5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:9C:5C:75:2E:29:52:99:72:A9:F9:4D:AE:A1:C2:5C:3F:B3:6A:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/f03ed9e3-4880-37ed-8a56-b1feec022ff2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.crl

            X509v3 Authority Key Identifier:
                keyid:AE:48:23:F9:A1:EA:C3:0A:1E:7A:D0:58:AA:D4:EA:78:AF:C1:EC:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.246.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:3b:76:d3:f8:23:79:86:ba:ca:1d:9a:7f:67:01:dc:44:84:
         de:4a:6f:17:83:a4:5f:4a:75:e7:bc:6c:d6:96:f4:80:29:b8:
         09:25:fc:01:b9:66:c1:93:73:de:84:ff:06:54:e7:5a:ea:9d:
         97:11:f3:32:5f:a1:fd:52:aa:d7:ed:c1:6a:d2:64:5f:8a:6e:
         28:50:bf:d0:9a:67:bf:dc:c4:81:a0:8c:1a:63:8a:fb:ba:18:
         1a:c0:d7:16:c7:ec:80:7c:2b:e7:86:f8:b8:6a:b2:f7:37:ef:
         42:3b:bd:ec:0c:8d:25:58:30:29:cb:dd:af:39:c8:53:91:3d:
         f6:fd:00:7f:4e:b1:d4:70:aa:c9:99:0c:b5:3c:ed:9e:34:82:
         3e:c5:95:fb:08:5e:c8:ae:a3:cf:e6:e8:9c:a1:32:8e:fa:77:
         55:97:c5:4a:1e:be:8f:13:bb:ab:e8:fe:82:b9:b4:77:f2:ed:
         8f:0d:40:df:aa:12:83:60:31:7b:40:53:47:89:6c:7a:bc:f4:
         02:7e:24:5a:ba:89:36:01:cd:eb:55:8b:f2:47:32:13:2e:ba:
         12:98:5a:c7:a8:c0:53:c8:1b:ad:6a:3b:7b:23:bd:5f:79:ca:
         21:4c:29:68:8b:99:84:11:66:b7:cf:70:b0:b6:9f:8a:14:90:
         78:38:21:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:41:19 2026 by rpki-client