Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5/0e54e1d0-33a4-3d2b-a2e0-6c28b8f25ef1.roa
File:                     0e54e1d0-33a4-3d2b-a2e0-6c28b8f25ef1.roa (raw, json)
Hash identifier:          RK7K5TXtG2AhV0jCxFe0YRn8D3ZGlfu287wFCtiDdrc=
Subject key identifier:   0C:D6:50:A9:C4:1D:3F:ED:F9:5F:A1:16:33:C8:DA:16:6B:38:77:43
Certificate issuer:       /CN=18c22446-23f2-433c-bff0-b35a75738dd5
Certificate serial:       010D0C9F4328584D4D5A4B7C1EC0E2EA31B95F00
Authority key identifier: F1:84:FA:82:AB:89:52:E5:C3:DE:8E:A7:86:B7:2C:C5:48:52:91:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5/0e54e1d0-33a4-3d2b-a2e0-6c28b8f25ef1.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     14618
IP address blocks:        138.43.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5/18c22446-23f2-433c-bff0-b35a75738dd5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5/18c22446-23f2-433c-bff0-b35a75738dd5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:4b:7c:1e:c0:e2:ea:31:b9:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18c22446-23f2-433c-bff0-b35a75738dd5
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=9a8602bd-585e-42ef-bcf6-1ce4f2c37b1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:05:81:e3:04:c4:00:28:b0:e8:35:aa:66:ae:
                    a6:9f:d2:7c:53:e4:6b:f9:b0:e8:57:cc:ab:4a:6c:
                    02:b9:bd:97:cc:2b:f1:40:89:f2:53:a7:47:d0:cf:
                    7e:7f:1f:df:75:b6:c7:cc:06:cd:83:25:3f:55:ea:
                    34:37:23:0e:4c:08:63:7d:ac:42:c2:07:c7:31:a1:
                    bf:16:f2:57:b3:c3:af:47:9a:8c:95:dc:c6:40:71:
                    7b:c4:f9:f5:da:80:30:b0:ee:ff:34:11:93:17:42:
                    5b:97:81:df:8d:90:16:14:ea:be:5f:8b:ad:bf:aa:
                    80:fb:55:d3:54:c6:b0:7e:1f:33:2f:27:82:83:2d:
                    2d:12:6d:24:e3:8e:f3:19:9c:ad:5b:7d:54:44:f1:
                    70:0d:58:91:80:01:b6:8f:3b:83:ed:86:29:0b:bc:
                    10:c3:5c:38:d3:66:a0:02:35:60:43:50:07:0b:56:
                    ec:f3:56:35:63:bc:30:dd:47:5c:d1:ba:31:61:c3:
                    31:bd:cf:b3:b8:7f:fa:18:80:f2:97:62:95:b2:3e:
                    1f:a5:a6:81:f5:d0:33:8b:e8:b6:a6:43:1e:64:58:
                    f2:7b:ec:0b:b3:ab:c0:31:f7:07:b3:c2:9b:ec:f6:
                    04:53:56:f9:38:2f:90:1a:3b:2e:40:f4:9b:43:a8:
                    ea:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D6:50:A9:C4:1D:3F:ED:F9:5F:A1:16:33:C8:DA:16:6B:38:77:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5/0e54e1d0-33a4-3d2b-a2e0-6c28b8f25ef1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5/18c22446-23f2-433c-bff0-b35a75738dd5.crl

            X509v3 Authority Key Identifier:
                keyid:F1:84:FA:82:AB:89:52:E5:C3:DE:8E:A7:86:B7:2C:C5:48:52:91:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.43.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:70:19:70:6b:5b:83:7a:d6:16:48:eb:cf:50:81:01:02:44:
         69:3c:3e:e9:98:cc:90:eb:91:66:6a:b1:8b:b5:45:de:2f:b1:
         7c:b3:5d:0f:53:41:f7:c2:77:b5:b6:61:ee:05:2b:c8:6c:dc:
         ee:d8:ab:78:bd:04:67:9e:b5:4f:80:49:6f:91:d3:4a:e7:67:
         48:57:90:2b:6c:7e:98:ff:b6:20:3a:c7:76:58:ad:bd:9d:41:
         28:2b:0d:85:c2:6a:3b:92:3a:f8:f3:98:90:be:c8:11:60:2b:
         e9:18:e9:aa:f1:7b:92:d7:70:db:29:da:21:ef:a1:5c:25:0e:
         72:82:57:7e:c0:1b:f3:4c:57:62:69:63:ea:c8:85:28:62:69:
         90:1d:58:e3:ad:6e:bf:67:a1:38:69:23:8d:06:19:fa:5e:3c:
         32:72:7f:10:51:b4:d5:5d:8d:f7:d9:67:46:72:f4:22:3a:53:
         78:07:1c:3f:4f:09:2a:13:25:a2:3d:12:a7:ae:6c:89:84:20:
         a2:87:9f:ab:28:8c:4f:9f:24:25:b2:46:b6:85:c0:c6:a5:94:
         6d:05:b0:e1:41:69:1d:96:3e:2a:21:59:25:7e:1a:64:98:b1:
         66:07:fb:f3:27:d4:e2:b6:83:64:5f:66:41:5c:78:3a:10:54:
         45:2d:8b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:21:29 2026 by rpki-client