Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/91f245d2-ace9-4f2b-ab8e-927934d9805f/c1cbc946-fa38-376c-910a-70a850448b50.roa
File:                     c1cbc946-fa38-376c-910a-70a850448b50.roa (raw, json)
Hash identifier:          EptYDsw9/i1FVknWvMJivKndNs//bVpL3EkuLUvLTMQ=
Subject key identifier:   5A:99:74:AA:AE:56:80:8E:5E:29:36:9F:9D:9E:FB:BB:DA:E0:DB:88
Certificate issuer:       /CN=91f245d2-ace9-4f2b-ab8e-927934d9805f
Certificate serial:       010D0C9F4328584D65150E432A405BC9B6489AA0
Authority key identifier: 7B:81:F3:E6:29:C6:08:6B:E8:1A:B4:36:4F:D1:89:2E:37:B5:0C:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/91f245d2-ace9-4f2b-ab8e-927934d9805f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/91f245d2-ace9-4f2b-ab8e-927934d9805f/c1cbc946-fa38-376c-910a-70a850448b50.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     16509
IP address blocks:        172.99.14.0/24 maxlen: 24
                          172.99.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/91f245d2-ace9-4f2b-ab8e-927934d9805f/91f245d2-ace9-4f2b-ab8e-927934d9805f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/91f245d2-ace9-4f2b-ab8e-927934d9805f/91f245d2-ace9-4f2b-ab8e-927934d9805f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/91f245d2-ace9-4f2b-ab8e-927934d9805f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:0e:43:2a:40:5b:c9:b6:48:9a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91f245d2-ace9-4f2b-ab8e-927934d9805f
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=2c41ab92-ea00-4957-b629-1bd88084e5eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:93:50:fb:3a:34:e3:b4:55:0b:f0:1e:30:20:
                    fd:92:30:d4:b4:58:8e:44:0f:f7:40:77:cd:0c:6b:
                    82:44:d6:6f:44:03:e2:fd:b1:38:75:d6:71:25:75:
                    15:db:a4:36:06:9c:1b:fb:fa:0a:06:20:e7:c3:fa:
                    70:84:62:07:19:7d:74:12:bd:bb:3d:a7:6e:b3:88:
                    92:41:b0:d6:44:6c:89:53:74:01:05:a1:0d:1a:c3:
                    b0:52:ad:e3:dc:d1:83:96:f1:35:ca:bc:17:5e:70:
                    c7:ff:d4:37:0a:1f:f9:76:e8:8a:ae:07:db:73:5e:
                    9e:38:7d:47:51:3f:a7:33:fc:b3:27:c0:c5:6c:f4:
                    d2:d3:3b:73:c4:c5:78:f5:97:03:56:f1:1d:3f:28:
                    dc:2d:4b:ca:fb:aa:18:9b:b4:5a:ff:44:6d:fe:d0:
                    c9:f1:58:2c:46:9f:e0:9b:8f:1b:24:5d:99:43:68:
                    ab:f8:c0:b3:26:19:04:c0:28:64:f6:c3:18:1d:d2:
                    16:b3:a1:a3:1b:c6:f0:fc:b7:90:5b:43:aa:6f:2d:
                    3e:cf:f4:6f:16:a8:48:ec:9e:b4:81:2f:21:a8:71:
                    67:ea:f3:cc:6d:ae:44:9a:77:a0:90:53:5d:4d:d5:
                    fc:3b:ad:60:74:97:05:c7:35:b2:a0:6c:46:10:f9:
                    d8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:99:74:AA:AE:56:80:8E:5E:29:36:9F:9D:9E:FB:BB:DA:E0:DB:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/91f245d2-ace9-4f2b-ab8e-927934d9805f/c1cbc946-fa38-376c-910a-70a850448b50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/91f245d2-ace9-4f2b-ab8e-927934d9805f/91f245d2-ace9-4f2b-ab8e-927934d9805f.crl

            X509v3 Authority Key Identifier:
                keyid:7B:81:F3:E6:29:C6:08:6B:E8:1A:B4:36:4F:D1:89:2E:37:B5:0C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/91f245d2-ace9-4f2b-ab8e-927934d9805f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.99.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:0f:9a:76:34:ce:9c:36:54:57:52:b7:02:b8:99:25:4b:2b:
         2a:86:f3:bd:04:a7:38:68:5e:ca:ec:15:36:31:36:5d:64:ad:
         cb:84:43:d6:d8:0b:79:58:eb:df:16:74:79:ef:9f:d4:58:81:
         b2:23:02:69:95:8b:ec:8c:b3:5a:24:38:a5:ad:54:fa:a5:98:
         69:2b:4f:1a:4f:4c:19:87:62:17:df:81:a3:b0:04:4c:ea:4a:
         01:7a:df:f1:7b:d1:46:ed:90:5b:48:6c:87:f0:76:3f:17:44:
         02:9d:9c:dc:bb:a7:d9:60:6f:a3:28:ba:08:47:1c:fe:aa:ba:
         16:86:9e:c6:be:77:a6:cb:ae:ea:58:a8:e9:53:79:ad:93:f8:
         b3:08:89:17:ae:d9:f3:32:ae:81:a6:50:d7:28:0f:8f:64:1d:
         ff:fc:1c:0f:03:3d:4c:92:6e:8a:08:f7:41:5a:57:50:b5:5a:
         04:34:d9:3b:98:2e:75:71:0a:7d:bb:65:f8:30:8f:51:8c:3c:
         74:31:15:30:26:0d:aa:2c:90:b3:df:90:5e:d9:24:34:a2:86:
         88:ee:8b:39:02:6d:a0:6e:96:38:53:3d:10:82:d8:a5:bc:23:
         07:34:7e:cc:79:07:b1:60:ad:46:0a:40:65:1c:78:c0:13:a1:
         58:81:e4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:06:49 2026 by rpki-client