Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/14fc1c0d-8e12-3e23-93cd-8d6bda6fec92.roa
File:                     14fc1c0d-8e12-3e23-93cd-8d6bda6fec92.roa (raw, json)
Hash identifier:          oI9oSO15pcyY4WtVv+XAvs7FA9RP73G/AgTKr3MKLmk=
Subject key identifier:   6D:40:46:98:04:FA:A3:11:06:08:85:71:64:22:15:61:61:A6:35:9C
Certificate issuer:       /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial:       010D0C9F4328584E1E444D23362162A43BA7B940
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/14fc1c0d-8e12-3e23-93cd-8d6bda6fec92.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     21928
IP address blocks:        172.32.0.0/11 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:4d:23:36:21:62:a4:3b:a7:b9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=b3b0770d-ca3c-4bb0-8e43-eaf5db0575c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8d:62:40:14:b2:6e:fa:1c:bb:cb:68:37:03:
                    d8:d0:44:98:ff:8b:84:16:58:41:32:53:64:1d:dd:
                    ab:85:a2:e0:85:16:21:ab:cf:98:fc:3d:83:a2:41:
                    6c:d3:3a:12:7e:18:fa:9e:b9:8b:e9:10:b5:15:19:
                    d0:a4:87:a2:04:e1:a9:86:10:e2:f7:ed:29:ce:8d:
                    38:f8:19:d3:fe:94:d7:fe:fd:51:c6:17:a1:89:9e:
                    77:b3:86:83:71:b3:bc:94:f8:b7:fd:30:5d:be:c5:
                    f5:0e:b0:73:c7:f1:eb:26:26:27:74:1c:79:e7:28:
                    df:94:70:49:95:71:19:e2:84:36:aa:7b:cb:aa:2a:
                    15:23:86:7f:2c:7f:89:1b:86:54:76:20:b0:db:98:
                    af:84:03:1d:f2:5a:81:70:6e:d3:dd:08:69:21:c2:
                    20:27:89:f3:b9:b8:b1:a5:d8:65:3d:66:37:1f:64:
                    b5:ed:6b:14:49:9f:c8:91:d2:d8:91:c9:c1:c9:cd:
                    00:97:d1:25:3f:98:1d:61:73:3a:c1:c7:a1:73:fe:
                    4b:74:47:54:29:e5:da:92:7c:62:1f:fd:10:45:fe:
                    50:2a:50:ce:ce:44:ca:52:5d:dc:54:55:4f:70:e4:
                    2c:46:76:5f:c6:1c:4c:ba:66:29:9d:29:15:65:33:
                    90:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:40:46:98:04:FA:A3:11:06:08:85:71:64:22:15:61:61:A6:35:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/14fc1c0d-8e12-3e23-93cd-8d6bda6fec92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.32.0.0/11

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:f7:a2:3f:28:84:42:a1:7e:70:bd:e1:83:63:28:63:cb:a9:
         ae:7c:21:5c:ad:52:66:3a:22:af:2b:f5:82:92:59:47:f6:23:
         7c:01:6b:5b:a8:48:36:31:d4:f4:21:63:5d:e5:d5:39:8a:40:
         10:bd:cc:14:cc:cd:27:3f:90:a6:e1:16:ab:15:5f:d9:f1:38:
         09:d3:2f:44:d9:7e:ef:f8:d5:c3:a7:ca:5d:0d:b7:00:48:fc:
         82:b2:aa:05:53:59:c3:e7:c9:65:52:67:05:81:c8:23:dc:be:
         75:84:8d:ad:2d:7d:97:7d:db:37:9e:b5:0e:8d:6b:f3:a9:04:
         21:9a:c7:51:f2:f6:bd:40:2e:66:27:10:74:dd:c0:e1:d4:e3:
         c7:54:78:21:1f:c2:50:0c:a2:0c:12:65:78:2d:32:b9:e5:73:
         81:ec:85:fc:a7:7d:d3:b2:88:ab:73:c9:c1:e8:d8:ec:a0:09:
         9a:48:56:f6:c8:25:e2:88:65:f0:80:35:c2:a9:21:de:44:90:
         f2:e9:ce:3e:34:7b:6f:86:0e:b5:6a:23:b2:93:e4:f6:2c:a6:
         ab:80:3f:21:cc:45:62:4e:4b:60:cd:3e:27:15:b0:58:7d:ea:
         43:3d:e7:ab:12:14:fa:00:af:ec:04:c7:4e:62:f0:02:9c:92:
         13:3d:6b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:55:17 2026 by rpki-client