Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/f598378a-1633-33e0-87c1-341edebf66b5.roa
File:                     f598378a-1633-33e0-87c1-341edebf66b5.roa (raw, json)
Hash identifier:          9sYcpJLPa8YSJehQ/QpICNJFIpDHOVPSMg2mDkrKqew=
Subject key identifier:   0B:87:D0:F2:FB:67:68:E6:9B:8B:FC:95:E2:C6:DE:29:CE:20:2E:73
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584D6C0FA8BDCBBD40E8B011F180
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/f598378a-1633-33e0-87c1-341edebf66b5.roa
Signing time:             Tue 07 Apr 2026 01:00:23 +0000
ROA not before:           Tue 07 Apr 2026 01:00:23 +0000
ROA not after:            Mon 06 Jul 2026 01:00:23 +0000
asID:                     29752
IP address blocks:        128.14.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6c:0f:a8:bd:cb:bd:40:e8:b0:11:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Apr  7 01:00:23 2026 GMT
            Not After : Jul  6 01:00:23 2026 GMT
        Subject: CN=241a82c6-4a85-40d6-ae94-c39a23f24232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:3f:5c:49:b4:59:db:53:3d:d8:3f:5c:eb:43:
                    40:24:80:c5:52:6f:5f:fe:ff:4c:68:78:2c:ea:3a:
                    47:2e:bc:f6:12:dc:14:d6:c9:14:89:e2:38:85:eb:
                    f8:62:73:e5:4e:1d:26:5f:57:78:da:8e:ec:94:45:
                    d3:4f:41:74:11:3c:69:13:6d:ca:48:63:42:a5:2b:
                    92:67:54:82:66:4c:b9:df:8f:66:87:7c:dd:43:a1:
                    2d:90:e2:67:36:57:77:d1:0c:a4:6f:d3:c6:cb:78:
                    cb:f0:8e:79:0b:86:f3:26:20:0e:ff:a3:7b:29:9c:
                    a2:23:2c:ca:76:39:fa:d1:48:c8:2a:1a:d9:89:70:
                    8d:a8:17:35:36:0b:6e:ec:51:5b:37:01:12:69:65:
                    6b:a6:f1:9c:51:b0:b0:fb:45:d0:83:30:3a:35:e2:
                    44:c8:aa:50:e7:4f:c6:05:9c:9a:54:ed:11:d6:88:
                    65:4e:b0:38:83:6c:e0:70:47:c6:9e:f5:60:c4:31:
                    0a:a8:01:b1:46:60:a3:d4:5e:64:c0:23:b3:c7:fa:
                    1d:c2:a6:9b:0e:5b:15:e4:f9:62:13:82:fd:33:e8:
                    b1:f2:8a:e8:d8:5a:2c:1e:a8:4f:2e:08:de:d5:3a:
                    60:38:eb:19:cb:28:50:67:e6:68:5d:24:08:ce:90:
                    f5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:87:D0:F2:FB:67:68:E6:9B:8B:FC:95:E2:C6:DE:29:CE:20:2E:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/f598378a-1633-33e0-87c1-341edebf66b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.14.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:d0:aa:8f:2a:0d:78:a9:1f:2d:14:aa:53:d5:bd:cb:92:87:
         41:fb:98:d7:6b:b3:5e:43:88:ba:8e:5c:26:01:51:bf:ca:e6:
         99:ff:2e:9a:e6:57:6a:c2:48:bd:e7:44:34:6c:a6:cd:10:cd:
         aa:9f:f9:d7:59:82:0a:6f:ea:8d:4e:34:3a:66:e3:f5:51:a8:
         62:2c:f2:53:f8:be:c9:f0:fa:f6:8f:5a:5a:c4:28:a1:0f:96:
         81:6f:68:29:ea:1f:2e:65:85:68:98:85:65:08:ac:21:25:60:
         83:27:67:96:f4:c4:e9:0b:81:57:68:6c:2e:2b:3c:8c:e9:97:
         25:53:09:11:b3:83:29:e7:5a:b0:5e:f3:0d:95:04:87:f1:58:
         31:06:d5:91:3b:52:4c:47:38:f9:90:ed:a4:96:9f:3b:3f:cb:
         db:cc:16:14:f1:49:14:17:db:b2:24:e8:84:40:75:8b:73:2d:
         bb:34:63:a4:71:d6:69:95:e5:55:1b:5c:fe:93:32:e4:e2:0e:
         1d:41:46:15:d2:ca:c1:ed:18:c9:de:fa:98:5b:18:60:f4:96:
         97:4e:be:80:4d:85:3c:61:76:2c:bf:b3:26:0d:87:08:e2:5f:
         6c:b9:06:94:07:34:c7:55:95:29:71:87:33:69:22:59:8b:09:
         96:40:98:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:52:56 2026 by rpki-client