Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/1a955959-17c3-3e16-b629-4420a791edc1.roa
File:                     1a955959-17c3-3e16-b629-4420a791edc1.roa (raw, json)
Hash identifier:          IOQi20J45hjHLxb23hbPkSclCPu0o1BIqYdv3dY8SWY=
Subject key identifier:   FB:47:02:17:F5:1D:ED:12:C5:F5:E5:10:8E:90:44:BE:56:9B:E1:B7
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584F3CE285F3DE1F0F15B4A65410
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/1a955959-17c3-3e16-b629-4420a791edc1.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     62610
IP address blocks:        128.14.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:85:f3:de:1f:0f:15:b4:a6:54:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=b2a66900-ae19-492c-9a45-bea2cb81b4c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:57:19:fe:a3:2c:19:57:7c:4f:d0:97:c6:2f:
                    71:2b:85:d7:3a:e5:f4:5e:96:cb:b2:a6:8e:db:aa:
                    e6:68:5b:64:81:a0:cb:28:bd:ec:54:9b:93:78:70:
                    4e:2f:3d:69:2a:76:e7:9d:6f:87:fb:32:9e:26:34:
                    cd:6c:ca:64:a6:ba:73:84:23:e0:a2:25:f5:3a:c4:
                    a2:24:4e:78:81:3c:d9:73:d4:df:d9:c1:63:e8:3a:
                    8f:0c:f1:09:be:b7:56:c4:88:fa:01:9b:29:8c:ac:
                    62:a8:fd:c8:75:59:95:a7:80:4c:78:38:2b:69:f8:
                    ea:f0:1e:80:50:ef:bb:4c:a6:02:a7:72:78:b5:31:
                    48:fa:95:71:0f:ca:d6:dd:a6:0a:88:6f:ed:b5:36:
                    12:de:4d:11:3b:e6:68:5f:e3:d3:56:04:4f:e0:bb:
                    cf:af:80:2d:94:14:f6:76:90:e4:df:73:f2:61:92:
                    c9:9c:ca:15:dd:7f:ed:d8:ea:ae:24:89:1a:3c:14:
                    38:32:37:f0:cf:0f:77:9e:f4:bc:57:90:a3:28:81:
                    eb:3d:46:2d:10:2f:e9:ce:e4:ef:21:11:c8:b7:59:
                    51:13:cf:2f:0b:ff:31:53:68:f1:7c:cf:0a:fc:74:
                    e0:64:08:a2:2d:f3:34:49:43:ed:b9:6f:b4:6d:73:
                    ac:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:47:02:17:F5:1D:ED:12:C5:F5:E5:10:8E:90:44:BE:56:9B:E1:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/1a955959-17c3-3e16-b629-4420a791edc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.14.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:65:fb:ac:17:d3:ce:03:0c:4b:4a:80:97:3f:f9:66:5c:b0:
         98:c3:ee:f9:24:7c:2d:02:7d:a8:15:43:37:b5:71:28:8e:cb:
         03:47:e9:5c:c9:ea:09:2e:ab:a5:8d:d8:e5:8d:12:c6:b5:8f:
         11:05:21:97:23:09:df:ef:cc:a4:d1:e0:da:c3:dd:58:69:94:
         c5:2c:c5:28:52:20:65:b8:71:17:2a:b3:bd:05:47:c3:84:2c:
         80:bf:60:f0:81:cd:b5:84:53:62:34:85:50:ed:1d:58:16:45:
         d5:91:f2:40:55:27:c1:38:ab:45:7b:ad:75:50:5b:1a:24:4b:
         f9:6b:cc:0e:96:cf:c4:05:1b:87:a6:19:46:f9:69:fe:74:f4:
         99:4a:ec:db:f9:f8:1c:62:0a:7c:98:83:b6:c9:85:80:75:7c:
         3a:51:39:5d:61:ff:4a:fa:f9:fc:ea:10:64:83:e4:35:41:5b:
         22:51:ce:13:3f:8a:7b:50:b8:cb:b5:a8:67:9e:56:66:88:56:
         e2:ee:29:56:49:7a:fd:55:8b:fe:7a:c8:78:30:1f:57:13:e7:
         7b:c3:75:a0:9f:e7:3d:b8:9f:23:8a:c7:30:00:cd:a9:4c:dc:
         ef:44:11:1c:98:1f:b7:eb:f8:fd:5b:37:80:05:5b:24:47:26:
         24:ef:49:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884oXz3h8PFbSmVBAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk
YjJhNjY5MDAtYWUxOS00OTJjLTlhNDUtYmVhMmNiODFiNGMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1cZ/qMsGVd8T9CXxi9xK4XXOuX0XpbLsqaO
26rmaFtkgaDLKL3sVJuTeHBOLz1pKnbnnW+H+zKeJjTNbMpkprpzhCPgoiX1OsSi
JE54gTzZc9Tf2cFj6DqPDPEJvrdWxIj6AZspjKxiqP3IdVmVp4BMeDgrafjq8B6A
UO+7TKYCp3J4tTFI+pVxD8rW3aYKiG/ttTYS3k0RO+ZoX+PTVgRP4LvPr4AtlBT2
dpDk33PyYZLJnMoV3X/t2OquJIkaPBQ4Mjfwzw93nvS8V5CjKIHrPUYtEC/pzuTv
IRHIt1lRE88vC/8xU2jxfM8K/HTgZAiiLfM0SUPtuW+0bXOsoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPtHAhf1He0SxfXlEI6QRL5Wm+G3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvMWE5NTU5NTktMTdjMy0z
ZTE2LWI2MjktNDQyMGE3OTFlZGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgA4AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKRl+6wX084DDEtKgJc/+WZcsJjD7vkkfC0CfagVQze1cSiOywNH6VzJ
6gkuq6WN2OWNEsa1jxEFIZcjCd/vzKTR4NrD3VhplMUsxShSIGW4cRcqs70FR8OE
LIC/YPCBzbWEU2I0hVDtHVgWRdWR8kBVJ8E4q0V7rXVQWxokS/lrzA6Wz8QFG4em
GUb5af509JlK7Nv5+BxiCnyYg7bJhYB1fDpROV1h/0r6+fzqEGSD5DVBWyJRzhM/
intQuMu1qGeeVmaIVuLuKVZJev1Vi/56yHgwH1cT53vDdaCf5z24nyOKxzAAzalM
3O9EERyYH7fr+P1bN4AFWyRHJiTvSRA=
-----END CERTIFICATE-----
Generated at Sun Oct 4 22:38:45 2026 by rpki-client