Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/d0a1f707-a3b6-3064-b955-8dfcaf321300.roa
File:                     d0a1f707-a3b6-3064-b955-8dfcaf321300.roa (raw, json)
Hash identifier:          FKWDZ+dc3duo6QG3FYN+3YTcNuhzm+AgycDXR4isiDI=
Subject key identifier:   EE:06:DD:E4:E6:8C:86:24:78:35:AC:C9:92:05:4F:EE:82:15:88:CA
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F4328584D651509ED7D681E1F40738F90
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/d0a1f707-a3b6-3064-b955-8dfcaf321300.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     14297
IP address blocks:        138.229.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:09:ed:7d:68:1e:1f:40:73:8f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=a62ca62c-609b-498c-8326-3d5fcd6be2e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:71:cf:0c:67:1a:80:69:3b:21:b1:89:a4:50:
                    59:de:a8:96:0f:37:c5:4b:3b:26:2c:a8:a7:db:24:
                    13:01:47:57:36:a6:4d:24:4b:55:df:7b:f0:71:c8:
                    24:6e:13:ba:86:55:46:5a:da:56:08:0b:99:ba:73:
                    87:f2:c5:a9:87:9d:74:58:b1:c1:71:87:2a:b4:0a:
                    87:5c:a1:84:00:ee:0f:a0:04:63:ea:02:18:31:1c:
                    ba:4e:2b:34:45:9f:93:f3:ba:57:8e:6c:e6:8b:83:
                    2d:bf:4d:e0:4a:b9:0b:08:96:dc:8e:74:f7:73:a6:
                    3b:d3:cc:13:80:97:06:10:fb:8a:a0:c2:24:46:f7:
                    f9:15:1b:4d:15:3a:a2:ee:09:68:97:06:bb:b9:17:
                    b4:6b:89:12:d5:d8:12:14:de:13:8f:2b:f3:b1:52:
                    74:41:8e:2b:2e:a4:df:e2:c9:18:dd:c2:7c:30:e9:
                    f2:06:f0:8c:25:48:e0:0c:19:0b:1d:0c:45:ce:b9:
                    27:33:5c:be:0f:c2:a9:94:ec:22:4f:0e:7c:ff:c8:
                    f7:e8:8c:39:78:43:15:fe:c6:84:07:4d:62:f8:e4:
                    56:3b:f6:9d:fe:70:1a:25:bf:c0:54:4c:da:ed:88:
                    dd:cc:a5:29:ae:29:b9:53:1b:51:91:0c:91:5a:c2:
                    80:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:06:DD:E4:E6:8C:86:24:78:35:AC:C9:92:05:4F:EE:82:15:88:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/d0a1f707-a3b6-3064-b955-8dfcaf321300.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.229.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:ff:53:d0:04:bd:5e:8d:d3:1d:d5:5e:84:65:38:2b:c3:a5:
         28:bf:45:36:6d:6e:2e:ab:a3:cb:24:8b:12:d0:ba:e5:f3:b9:
         01:82:c8:45:73:30:bd:b1:37:e6:d8:d1:d8:bd:63:42:b4:57:
         d8:0b:64:99:f5:bd:84:ec:cb:18:8b:b8:df:5a:01:79:b0:e8:
         6a:26:0a:a7:fb:cf:07:ae:cf:99:17:2c:44:4a:57:10:23:d9:
         b0:b0:e0:15:52:8b:cc:97:f2:55:8f:f9:fe:02:81:a2:b3:e4:
         56:41:bf:03:06:f0:9c:ba:18:20:a0:52:5c:cf:c5:42:91:e8:
         dc:b2:39:4f:e2:4a:8f:da:25:fd:54:e9:79:24:32:0f:f5:22:
         25:15:69:33:bf:65:91:88:c6:5a:f4:4a:c9:70:d6:dc:b8:53:
         2a:15:95:9a:49:9e:1d:9c:51:4e:84:54:6d:d6:2e:12:ef:69:
         78:85:4b:a4:a1:61:0c:61:9d:d7:7e:a4:9b:19:03:20:f0:b1:
         42:45:19:cd:a5:b5:c1:11:94:ad:6e:c2:8c:0d:77:39:8b:36:
         fd:e6:aa:50:91:e7:50:b6:10:ac:67:82:3b:1e:45:d3:f4:a3:
         4f:5e:2b:77:be:00:db:d2:04:26:d5:9c:f6:86:e7:cb:c5:e7:
         e0:9b:13:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:09:19 2026 by rpki-client