Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/e6da2064-1f6a-3abd-8f9e-bcaa8d757210.roa
File:                     e6da2064-1f6a-3abd-8f9e-bcaa8d757210.roa (raw, json)
Hash identifier:          O5+PicYLMvtS/8ZIl7hR3i3UvQotQuM388QQwVIdIgA=
Subject key identifier:   6F:10:88:38:48:61:8F:3D:7B:1A:8A:AD:6E:E7:09:AD:5C:49:A9:E0
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584E1A14448AC1D99234BB76BE00
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/e6da2064-1f6a-3abd-8f9e-bcaa8d757210.roa
Signing time:             Mon 08 Jun 2026 09:00:12 +0000
ROA not before:           Mon 08 Jun 2026 09:00:12 +0000
ROA not after:            Sun 06 Sep 2026 09:00:12 +0000
asID:                     62610
IP address blocks:        128.14.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1a:14:44:8a:c1:d9:92:34:bb:76:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Jun  8 09:00:12 2026 GMT
            Not After : Sep  6 09:00:12 2026 GMT
        Subject: CN=cb477943-6571-4272-86a5-ffd9824f6827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ce:fd:e5:60:49:31:e4:4d:2e:6d:5a:8b:fb:
                    4b:50:4b:07:ed:ff:fc:c3:39:50:42:50:38:35:a1:
                    c4:be:e3:3f:ec:c6:24:84:98:c8:98:28:99:7e:e2:
                    ed:9b:bd:5f:11:47:4a:ba:18:23:19:a7:1a:a4:d7:
                    be:13:8d:b6:5f:ef:d9:e1:18:5c:0e:11:d4:66:3b:
                    e5:ad:3f:d8:57:8a:a3:b1:0a:de:48:6c:b6:93:40:
                    03:4a:30:b7:0a:ff:99:ca:f7:2d:b3:2e:4d:04:1a:
                    6a:cc:06:60:16:f3:77:15:93:5f:f3:d6:46:0f:cd:
                    58:5c:e2:73:17:b3:9e:83:bf:47:b5:70:3e:a8:ac:
                    eb:f7:81:19:f1:7a:23:23:54:01:95:9c:09:03:67:
                    41:e1:d2:34:aa:76:bf:69:7f:68:b2:65:96:d8:bb:
                    88:46:70:e6:4a:22:a4:c3:92:d2:4b:82:d9:68:6e:
                    0b:2b:91:f6:a9:49:52:8d:d9:fe:2b:83:29:02:f4:
                    3b:0a:1e:6c:68:af:5c:69:29:44:e0:fa:33:69:d1:
                    40:f8:72:33:2a:ab:61:9b:04:71:21:da:f6:45:d6:
                    36:7f:09:99:ba:80:e7:1a:ce:13:cc:32:f2:bf:e0:
                    60:61:e0:2d:a6:17:1c:c0:f2:0f:3a:60:52:eb:38:
                    00:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:10:88:38:48:61:8F:3D:7B:1A:8A:AD:6E:E7:09:AD:5C:49:A9:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/e6da2064-1f6a-3abd-8f9e-bcaa8d757210.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.14.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:b3:36:92:2e:aa:1d:67:27:95:ea:86:7f:78:73:6d:ef:69:
         c9:ee:35:05:f1:4e:16:d5:ec:49:4b:7d:46:a2:ac:38:70:29:
         00:18:42:0a:90:0a:fc:0b:10:18:f0:a9:7f:e4:63:eb:0c:b1:
         06:33:c3:4a:c2:59:0d:b8:3c:6c:a2:ce:9a:67:24:b2:e7:7f:
         e3:d7:fb:7c:96:ee:d3:fd:49:01:a9:e6:5a:e7:87:85:24:62:
         9c:2a:4e:3a:1b:4e:73:03:f8:a3:8a:b5:6c:c8:34:09:23:5b:
         11:bd:19:94:2c:c3:75:52:f5:bf:76:64:33:02:fe:e8:ed:8e:
         cd:89:37:d3:9c:9c:e2:fe:a7:a8:d0:3d:3c:e7:82:1d:59:ee:
         3e:b1:fc:49:bd:36:91:18:32:79:88:5a:69:13:2d:9e:c8:57:
         8a:ff:25:4d:54:70:dd:30:77:cb:dc:1f:32:c8:ca:4c:a1:ac:
         f2:93:c1:0b:39:bb:cd:6a:70:98:ce:24:78:dc:a3:c4:06:3e:
         f9:ae:97:d5:a2:a5:a3:3a:a7:69:e8:3f:43:9c:a0:4f:cf:bf:
         4d:8c:b0:30:57:45:d7:c9:b1:58:bc:7d:1e:fc:61:ed:83:f0:
         c9:ea:23:0b:b9:9e:52:ce:71:b6:3a:84:7a:60:ce:d4:d8:6e:
         17:3d:50:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:38:54 2026 by rpki-client