Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/d8a29e38-cbb0-3d29-8075-dc1fa9167ee8.roa
File:                     d8a29e38-cbb0-3d29-8075-dc1fa9167ee8.roa (raw, json)
Hash identifier:          WgXCKYD/poFVdCVNXb2DFYiFPp0aw+APoHIqUln09RE=
Subject key identifier:   82:AD:91:A3:B9:0D:1F:78:1D:FD:44:8B:02:1F:72:35:F9:96:FC:4A
Certificate issuer:       /CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
Certificate serial:       010D0C9F4328584D67DFC50AE46A671AA943A840
Authority key identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/d8a29e38-cbb0-3d29-8075-dc1fa9167ee8.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     18914
IP address blocks:        206.168.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:c5:0a:e4:6a:67:1a:a9:43:a8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=f7562c2d-a989-43a7-8cbc-1b2095f0ba9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:97:b1:b4:41:20:97:6e:b5:38:37:9e:30:c3:
                    f4:8c:23:43:6e:5a:e5:1b:de:78:e8:d7:c5:3d:b1:
                    93:24:1c:a9:98:6e:ab:2a:fa:25:56:6b:22:31:a0:
                    2f:4a:9f:37:ef:de:80:6f:92:73:01:e7:22:af:69:
                    dc:92:12:09:0b:6e:e9:7f:78:c5:f6:5a:07:b8:57:
                    b1:55:46:01:19:f4:9f:af:bf:d6:e7:31:1b:81:2a:
                    6b:f3:95:db:0c:ce:30:ac:e9:36:fb:40:af:15:4d:
                    9f:e1:ee:2e:19:58:91:3a:53:77:99:75:06:74:9f:
                    f1:6b:25:af:92:d1:4f:3d:a0:ae:a0:68:8b:41:6d:
                    86:d0:fc:71:8f:a8:4a:8d:3a:0f:f8:62:2a:81:08:
                    28:36:c7:0a:5d:46:14:ff:13:48:a7:db:6c:98:0a:
                    74:f2:e6:57:da:de:27:20:6e:b7:ad:a4:01:07:16:
                    8f:5f:5c:44:7a:87:3c:13:65:9a:32:b6:83:d6:b5:
                    93:73:1b:1e:31:c4:25:e0:f5:3d:be:c8:6c:e5:15:
                    a1:f2:99:99:00:0f:ff:a3:5d:f6:76:a1:74:4e:d1:
                    dc:4d:97:5f:41:ea:22:44:9d:73:96:84:3b:7b:39:
                    e8:31:20:21:69:f5:8b:6f:71:2f:56:68:42:f4:43:
                    e8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:AD:91:A3:B9:0D:1F:78:1D:FD:44:8B:02:1F:72:35:F9:96:FC:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/d8a29e38-cbb0-3d29-8075-dc1fa9167ee8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl

            X509v3 Authority Key Identifier:
                keyid:C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:5d:c1:f1:9b:d5:75:d7:23:c4:a1:9c:32:9e:7c:a0:6b:01:
         5a:e4:55:dc:f8:a8:2e:b3:e3:0c:69:67:c8:12:fe:22:06:4e:
         4e:cf:2b:25:69:e7:9d:d7:de:17:c0:48:82:4a:71:66:56:8f:
         07:c1:d6:09:5f:35:73:75:5d:4b:66:70:6b:5f:55:e3:f7:26:
         7b:c2:0e:a5:bc:7f:4d:c8:31:52:23:a8:df:00:51:f8:0b:d5:
         30:e5:ea:be:c4:58:40:ac:23:92:23:ed:9e:d6:32:88:82:d9:
         81:ad:96:e9:67:64:0d:0f:c0:79:c3:c5:46:c5:5f:c0:ec:a3:
         48:a8:37:f7:cc:03:e6:62:55:3e:53:9f:aa:8c:39:d8:1f:43:
         9e:b6:45:d9:b6:27:8a:85:a8:68:65:45:9f:b2:88:fc:d3:63:
         76:aa:3d:03:71:f0:57:c0:eb:d5:ce:0d:69:e7:61:7b:02:74:
         7c:b0:a2:57:0f:55:19:60:40:4a:a4:1e:a1:00:44:2c:15:33:
         35:32:a1:61:9b:39:cd:20:54:4b:dc:76:2d:b6:a7:68:bf:1c:
         58:3f:05:b3:72:d6:65:13:c3:29:30:bb:d8:68:ce:b9:16:17:
         bb:71:1b:1c:32:fe:b4:33:5c:31:a0:60:b9:a3:c8:ec:f4:1e:
         27:34:61:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:44:07 2026 by rpki-client