Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/14ca64f1-a427-334a-8a5a-19d183301379.roa
File:                     14ca64f1-a427-334a-8a5a-19d183301379.roa (raw, json)
Hash identifier:          MGriqpAjo0ERigplZkxBYlr+B2c4fAEDYaYjGO5k6rM=
Subject key identifier:   D1:81:1E:CD:10:4C:FE:F8:A3:74:C7:08:0B:9C:A1:96:E7:4C:53:54
Certificate issuer:       /CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
Certificate serial:       010D0C9F4328584E0006373AECFA4312ADEF1790
Authority key identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/14ca64f1-a427-334a-8a5a-19d183301379.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     18914
IP address blocks:        167.254.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:37:3a:ec:fa:43:12:ad:ef:17:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=fe379c96-cc4c-4dfb-bd64-975aba143a29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3c:df:9a:78:ba:ae:4b:81:69:d3:6f:fd:23:
                    b5:2b:70:d2:27:26:09:9b:22:6a:08:f7:31:17:9e:
                    cd:27:b7:0c:74:21:ca:b1:fb:55:b3:ba:2c:b4:a3:
                    ef:d8:55:f5:7f:d4:a5:8d:ad:ff:59:5e:91:14:8c:
                    7e:27:88:da:04:5e:eb:5a:f4:72:28:f2:61:6c:66:
                    80:fd:f8:9b:77:4c:df:8a:2d:1b:06:d9:3b:b2:5a:
                    53:8c:dd:5d:60:31:ce:24:17:b1:ef:76:9e:b4:58:
                    7f:6a:32:d8:1f:5e:80:48:8a:86:80:41:3a:a9:4c:
                    c7:b3:06:9a:0f:2f:8f:b8:a5:15:c4:01:7e:4f:8e:
                    85:69:25:02:d3:d9:aa:e4:56:9c:59:7c:20:19:4f:
                    b0:e4:98:65:15:6d:f6:aa:10:f4:db:a3:af:bb:f3:
                    0d:c3:f3:ed:cf:51:0b:52:b7:28:27:0d:59:b0:60:
                    10:7f:f7:5f:b6:83:d0:6b:fd:1f:56:f5:21:8f:e3:
                    d0:89:b7:7e:55:b8:a9:f5:8a:5b:1a:8e:61:c7:d9:
                    4f:26:97:7c:85:3f:f3:99:8a:98:da:3e:cb:44:86:
                    79:77:0d:6b:18:43:c7:59:75:6d:ba:1f:b4:26:6d:
                    80:95:5c:8d:35:cc:47:da:01:84:b1:b3:bb:2c:61:
                    4c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:81:1E:CD:10:4C:FE:F8:A3:74:C7:08:0B:9C:A1:96:E7:4C:53:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/14ca64f1-a427-334a-8a5a-19d183301379.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl

            X509v3 Authority Key Identifier:
                keyid:C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.254.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:4a:8d:33:f1:b6:40:51:61:7c:51:fa:fd:16:9b:12:1c:7c:
         82:97:15:df:fc:7f:82:67:07:a5:03:7a:08:0b:df:4e:88:4d:
         61:3d:41:a4:b9:f4:65:0e:28:5d:74:c4:9e:4b:cd:c7:8c:e9:
         bb:8b:fa:ae:ab:9c:8e:f5:b9:46:16:ba:c9:f2:3f:22:89:dc:
         f0:f0:80:fd:34:d2:99:4e:c8:28:1b:46:30:f4:23:6a:91:44:
         7e:36:8b:86:6c:33:db:47:62:52:09:56:af:a2:b5:a6:bd:66:
         93:4a:e2:a5:88:78:b3:98:91:6a:01:8a:4e:40:3e:56:bd:7a:
         63:71:eb:40:b9:81:c3:ab:e1:15:6f:0f:13:42:d3:fb:b6:6c:
         e7:3b:d9:7d:c0:ee:01:31:c4:13:5a:82:f8:4e:21:65:1c:53:
         cc:64:64:a2:cf:05:d3:50:a6:a8:25:db:5c:ed:9b:fd:6b:a3:
         f0:16:56:89:ab:28:93:14:d8:81:db:68:a7:80:cd:a1:2b:21:
         e9:0f:f2:7a:a7:97:8a:a4:79:59:e7:a4:b8:b7:95:28:cc:fe:
         4a:18:3e:d7:70:e9:3e:c2:2d:7f:f9:2f:c5:ce:32:54:a1:a0:
         f5:cb:10:75:80:fb:8e:96:25:77:d8:86:e8:a3:65:07:ce:46:
         36:b7:51:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:29:14 2026 by rpki-client