Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/d4c0fb9c-88a5-3ec8-b79e-b67aa7d456ac.roa
File:                     d4c0fb9c-88a5-3ec8-b79e-b67aa7d456ac.roa (raw, json)
Hash identifier:          VB3VmTbXvoWehLo09wZCUni38cY96DrO6tKn0xEki3w=
Subject key identifier:   BC:C4:B4:6A:FA:BF:7F:CF:F5:34:5A:C9:25:A7:A5:A9:D2:BE:6A:69
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584F119CF6AE9E20736A18CC9640
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/d4c0fb9c-88a5-3ec8-b79e-b67aa7d456ac.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     21859
IP address blocks:        128.14.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:f6:ae:9e:20:73:6a:18:cc:96:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=fda839e7-ad11-4d87-a059-0a3a17a0ea1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:66:15:9c:fc:7d:9b:26:d0:62:98:df:75:fb:
                    66:96:d6:3b:e5:d8:0b:58:14:a5:be:c5:2c:9c:81:
                    1d:f9:e5:3d:f7:c5:5e:11:81:5d:28:09:2e:55:a0:
                    f3:9c:77:fb:d3:a8:bb:90:26:a7:c4:4e:46:14:89:
                    95:be:4c:fd:5f:7e:6a:e1:ea:4c:dc:61:fb:8b:0f:
                    36:03:9a:db:61:bb:0b:17:d4:5e:aa:f1:56:68:67:
                    02:f1:c5:83:63:2e:32:de:c1:f1:37:4a:fb:29:ff:
                    8f:30:c7:f5:30:25:61:48:e1:38:5d:bb:dc:8a:23:
                    2f:17:ad:53:6d:8d:3d:90:2f:42:ee:bd:ec:3e:28:
                    f1:b2:1b:6e:50:26:f0:ac:b3:fc:ae:53:b2:1b:62:
                    a4:5c:25:f2:24:32:3f:2e:5d:88:5a:a5:e7:cf:27:
                    d4:95:d2:1c:88:1e:df:e5:01:74:82:21:b3:b1:c2:
                    0b:f2:00:ff:33:43:6d:e4:26:d1:99:df:34:4d:4f:
                    ac:9b:4b:bb:73:60:a1:88:48:f8:6a:a9:70:e5:51:
                    70:5d:7f:8a:d8:ee:8c:71:b4:2b:f2:0b:83:b3:ee:
                    94:0b:e9:84:59:c6:30:41:9e:3c:1b:30:fb:db:49:
                    c3:d1:24:41:7a:36:93:58:f3:43:50:a1:6b:84:e4:
                    82:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C4:B4:6A:FA:BF:7F:CF:F5:34:5A:C9:25:A7:A5:A9:D2:BE:6A:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/d4c0fb9c-88a5-3ec8-b79e-b67aa7d456ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.14.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:07:cd:45:85:bf:00:d0:57:b2:d8:d7:35:db:8f:09:cc:1c:
         6f:ae:a9:8e:92:70:ee:08:06:49:0f:9b:70:97:2d:f5:4e:69:
         53:b2:e0:9b:5e:78:ac:7f:7a:95:31:8f:d4:6c:c5:08:72:73:
         48:8f:bd:cb:72:31:9a:46:28:ee:ad:3c:b4:6e:f2:d0:9f:39:
         68:f9:d3:bd:64:2e:20:30:60:fb:f8:88:af:1a:d2:44:24:db:
         9d:07:1b:ff:6d:32:00:4c:e4:11:7e:76:10:fd:dc:a7:7c:0b:
         b0:b3:89:ca:ef:0a:0f:d1:75:e4:37:9b:5e:ac:9a:cc:96:3c:
         af:f1:59:45:b4:6a:9a:7c:47:1d:99:82:58:23:b5:03:b5:43:
         8f:2d:e4:a5:90:d3:bc:1e:c5:ee:67:45:eb:4d:b1:fc:e0:58:
         a2:b2:ce:e4:e6:91:69:f4:04:58:ee:37:70:7c:fe:03:a7:6a:
         0c:17:c3:23:a8:8f:31:8a:46:1d:b8:04:db:99:5d:74:92:af:
         b5:47:fa:21:05:1c:f0:0b:60:82:65:b0:4c:dd:f2:85:04:60:
         9a:6c:c5:19:6b:9d:44:31:a2:b8:7f:f7:af:c0:65:cc:a7:da:
         c2:b3:f9:25:a6:07:42:93:5a:de:ef:a7:d5:2b:07:66:22:21:
         83:cc:67:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:59:13 2026 by rpki-client