Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/37ade73a-8894-3048-b1eb-b4dbb54278db.roa
File:                     37ade73a-8894-3048-b1eb-b4dbb54278db.roa (raw, json)
Hash identifier:          ccboWl9IPhBTkYUG8dix8xbRqSVgENyY20ufGgyejVs=
Subject key identifier:   D2:EC:3F:83:B3:0A:9D:5E:48:24:3A:82:92:4E:04:9A:D4:D6:AA:48
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584D6C0FD9D77B7267D616C018C0
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/37ade73a-8894-3048-b1eb-b4dbb54278db.roa
Signing time:             Tue 07 Apr 2026 01:00:23 +0000
ROA not before:           Tue 07 Apr 2026 01:00:23 +0000
ROA not after:            Mon 06 Jul 2026 01:00:23 +0000
asID:                     29752
IP address blocks:        128.14.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6c:0f:d9:d7:7b:72:67:d6:16:c0:18:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Apr  7 01:00:23 2026 GMT
            Not After : Jul  6 01:00:23 2026 GMT
        Subject: CN=1c84eb18-4805-4a7b-9a94-a5aeb502a3d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c9:d3:9c:57:d5:94:52:e8:0f:d0:0d:40:be:
                    65:db:39:73:9b:13:1a:32:b1:4f:66:94:0e:f3:3b:
                    ba:95:91:66:9c:66:af:d1:13:54:82:cc:ef:a9:1f:
                    31:35:a2:a5:5a:cf:45:bd:13:00:bb:7e:1f:46:a7:
                    a8:a9:b4:bc:24:08:cc:45:f1:f7:28:fd:c7:40:fd:
                    da:4c:60:76:9d:5b:02:e2:1e:94:ad:2c:75:39:97:
                    21:5c:e8:28:09:dc:c9:d2:34:45:a8:e2:87:37:f1:
                    23:81:09:b1:6f:e2:be:bc:1e:10:ee:23:74:50:a9:
                    3f:98:57:7b:12:a7:67:f2:39:7e:33:ba:e9:a5:5e:
                    17:19:ed:d7:b7:d8:c3:8f:88:db:14:0e:03:07:c4:
                    17:b1:16:aa:ab:65:ae:55:0f:10:80:d8:42:cc:0f:
                    56:0d:f1:5a:cb:33:55:8d:d4:f5:7a:97:51:cf:37:
                    f4:dc:8e:7f:5c:f0:07:df:d5:23:30:c7:4f:c0:3e:
                    29:b1:94:82:7a:39:fd:08:f5:ee:6c:26:6f:cc:d3:
                    7c:44:d7:42:79:76:27:51:07:73:b1:ab:3a:b9:dc:
                    f1:15:a7:f7:83:f1:0b:e3:34:eb:62:aa:11:18:73:
                    7e:d6:dc:a6:a9:ba:77:e0:a5:b5:f0:65:df:3c:96:
                    3b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:EC:3F:83:B3:0A:9D:5E:48:24:3A:82:92:4E:04:9A:D4:D6:AA:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/37ade73a-8894-3048-b1eb-b4dbb54278db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.14.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:e8:86:f9:f6:56:cb:c6:a2:f5:52:c0:96:65:59:58:b4:ff:
         aa:90:15:9c:fe:1f:be:ef:4e:99:13:bc:96:e2:6c:e9:8d:ea:
         10:a0:76:c3:4f:c5:6f:87:79:8d:01:2a:5c:52:d3:de:8d:f0:
         79:ce:1b:7b:c5:34:5e:28:dd:27:0e:38:84:24:20:b9:1c:6f:
         a0:63:72:33:1f:6c:ba:08:80:ec:57:a6:38:9e:d9:87:68:46:
         4e:89:d1:a2:d5:e5:de:6e:f6:ab:29:40:d7:e0:26:d7:49:0b:
         f3:f1:35:ca:6c:81:2c:d8:fe:5e:f1:7a:2e:1e:12:bf:54:76:
         8b:07:f8:70:ad:cd:01:85:9d:c4:a6:40:9a:94:d1:10:b3:78:
         9f:66:54:c2:17:f8:d1:c1:7e:b3:66:db:fd:a0:f0:2d:b2:c7:
         7b:e6:1a:21:58:25:33:7f:9b:66:33:4b:bf:2a:99:c7:ef:f3:
         ae:27:3a:4b:54:8c:66:69:cc:2c:39:06:b2:06:56:85:41:fd:
         f3:30:e5:4b:bb:24:b4:61:87:c7:7b:e6:44:1b:00:74:a9:09:
         76:e8:0a:ce:f3:bc:fb:e3:d2:00:0d:06:2c:ce:33:d0:94:78:
         1f:66:40:59:23:3b:33:4a:e5:1f:69:1f:b0:e7:ec:1d:77:c2:
         43:7a:50:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:57:17 2026 by rpki-client