Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d/7c37b044-4e3b-304e-ae4d-acca76fbf144.roa
File:                     7c37b044-4e3b-304e-ae4d-acca76fbf144.roa (raw, json)
Hash identifier:          TBZEMmAQHwJwCLJxhZQcR8GYjKw579cuOqthMOFksss=
Subject key identifier:   24:34:F3:17:B2:B9:65:68:2D:AD:47:E6:70:0E:0A:E6:04:10:B0:85
Certificate issuer:       /CN=14f19494-e6ec-42e7-bce4-8903df1f6f9d
Certificate serial:       010D0C9F4328584CA32C7248DCAEE874BBB565C0
Authority key identifier: D4:8C:24:71:3F:9D:60:6F:41:01:2C:8E:EA:45:83:5D:2D:5D:72:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d/7c37b044-4e3b-304e-ae4d-acca76fbf144.roa
Signing time:             Sun 25 Jan 2026 02:00:31 +0000
ROA not before:           Sun 25 Jan 2026 02:00:31 +0000
ROA not after:            Sat 25 Apr 2026 01:00:31 +0000
asID:                     16509
IP address blocks:        199.124.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d/14f19494-e6ec-42e7-bce4-8903df1f6f9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d/14f19494-e6ec-42e7-bce4-8903df1f6f9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a3:2c:72:48:dc:ae:e8:74:bb:b5:65:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14f19494-e6ec-42e7-bce4-8903df1f6f9d
        Validity
            Not Before: Jan 25 02:00:31 2026 GMT
            Not After : Apr 25 01:00:31 2026 GMT
        Subject: CN=eae8c068-3752-44fe-900a-18880f5a08f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:21:f3:c6:8a:d0:74:ac:0f:53:92:3a:91:36:
                    29:07:8d:b3:a0:b9:37:e7:47:8e:92:c5:9a:a3:1a:
                    5a:37:fd:c7:67:6a:e2:2a:83:91:99:d5:cb:91:08:
                    1d:ea:18:67:8f:77:f6:4e:eb:53:1e:f6:20:86:f8:
                    04:62:f0:58:a5:f4:a8:21:76:2d:d7:70:92:18:4a:
                    c8:eb:51:8a:9a:8a:82:d4:b7:cd:82:c6:c5:e3:8f:
                    ad:f1:aa:fa:74:b5:4d:0d:15:aa:5a:6d:81:08:6f:
                    83:4c:46:39:32:25:23:2b:97:44:81:f4:f2:48:1e:
                    51:b9:ec:78:e2:2a:af:33:86:35:00:7f:9d:ea:a8:
                    9e:b3:50:91:18:23:15:ba:42:8d:52:4d:91:a4:21:
                    60:9a:77:cd:bd:1b:6e:65:50:e5:ea:90:87:8e:7b:
                    dc:7a:c0:a0:37:de:40:54:81:b7:83:1d:3b:38:61:
                    5e:9c:e7:fb:f4:ff:47:f8:dc:17:51:76:d0:d0:e8:
                    17:11:95:f9:32:85:22:15:b8:78:46:53:a9:fd:54:
                    a2:b5:45:6d:60:49:a3:33:d1:35:cb:8e:9a:85:77:
                    7f:fa:a9:9b:47:fe:08:c8:89:19:d6:90:25:de:2f:
                    11:1b:ba:27:56:d1:67:96:da:6a:b5:a6:0f:8a:7b:
                    3e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:34:F3:17:B2:B9:65:68:2D:AD:47:E6:70:0E:0A:E6:04:10:B0:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d/7c37b044-4e3b-304e-ae4d-acca76fbf144.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d/14f19494-e6ec-42e7-bce4-8903df1f6f9d.crl

            X509v3 Authority Key Identifier:
                keyid:D4:8C:24:71:3F:9D:60:6F:41:01:2C:8E:EA:45:83:5D:2D:5D:72:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.124.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:9b:84:22:0c:ab:57:59:d0:1e:39:38:54:07:37:34:05:e7:
         96:ec:93:51:d7:7d:10:46:96:96:c3:0c:df:a2:e5:04:80:60:
         65:76:4d:0d:87:e4:01:92:1f:c3:05:78:c7:b1:fc:83:d6:ef:
         45:f6:69:ce:86:89:ac:72:1c:96:70:64:8b:c0:da:dc:dd:cc:
         bc:9f:25:c0:cd:47:6b:06:dd:77:06:d1:13:a8:db:87:0d:c0:
         1f:d5:38:6f:1e:f4:5c:d2:c8:b8:a7:6e:c3:b4:f7:c9:90:ab:
         3f:92:27:ad:e5:01:a1:45:4c:2e:c4:c4:ca:98:e4:b5:39:29:
         15:a5:9f:37:89:1e:d8:e0:8d:07:c3:0f:f9:3b:46:a1:4c:8d:
         0e:4a:b1:b0:d7:fe:d6:96:f2:9a:87:30:41:0e:57:04:b5:e3:
         7a:38:0e:ed:8c:8e:55:aa:d3:8c:28:f0:ad:d7:9d:6c:df:c9:
         28:17:d3:a7:27:5d:3c:c7:23:8d:69:75:a3:7f:ff:77:ca:b3:
         7c:f2:b0:44:b2:0c:97:80:bd:f7:36:57:2a:4a:a1:45:ba:0b:
         4d:56:b0:de:14:57:f4:25:88:4b:57:55:f6:67:0b:63:1a:b0:
         40:07:27:a4:1c:cb:48:6d:0c:2b:e5:98:20:17:a1:45:95:86:
         e1:0d:e0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:22:05 2026 by rpki-client