Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/097952e5-3fea-3e53-aed7-9597238cda72.roa
File:                     097952e5-3fea-3e53-aed7-9597238cda72.roa (raw, json)
Hash identifier:          Gwvyl0DA9BNgvavaAiPIFukbtKRBKVzZTYez0OrA7PM=
Subject key identifier:   7B:4B:EF:74:48:C1:86:38:53:AE:8A:08:06:26:10:70:AE:0C:6D:C6
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584D6AAA7598D75E5C4386562440
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/097952e5-3fea-3e53-aed7-9597238cda72.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     14618
IP address blocks:        170.114.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:75:98:d7:5e:5c:43:86:56:24:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=cf68d5ae-4ca0-4c68-9596-a75a0d90701a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:07:9f:54:0b:9c:82:f1:eb:5d:ee:6e:33:d8:
                    60:9d:ed:ac:2a:c3:e0:b6:19:b8:14:77:bf:4a:9f:
                    15:37:4e:c7:c4:a6:72:a0:58:90:37:7b:58:85:ec:
                    33:19:da:1b:2a:fb:ee:0f:2a:e1:61:ae:ba:70:74:
                    0e:58:24:d0:b3:ae:85:ec:d9:f2:5e:8c:7e:f7:2f:
                    0e:7c:7a:b3:1b:09:53:26:1a:72:57:07:d9:e6:29:
                    af:a6:94:48:d4:04:b5:d5:9a:e4:5e:60:6a:b9:f3:
                    5d:7c:b7:77:85:be:1c:b0:bf:8b:30:f0:ea:dd:b1:
                    ea:4a:bd:dc:cb:71:08:5a:4f:88:00:91:84:67:dd:
                    e2:d1:a6:4e:92:e8:7c:01:46:9c:9a:54:d3:85:29:
                    f5:bd:66:ce:39:72:ab:b9:e5:a1:f0:b1:d6:b3:bd:
                    62:dc:9d:35:2a:b4:6f:89:e6:bd:da:70:e5:24:45:
                    42:f1:76:39:f6:1d:e2:32:c3:68:01:ae:19:f3:ed:
                    01:ff:d5:ee:6c:4b:c3:4d:1e:87:65:d5:9c:82:39:
                    21:be:5b:f7:42:25:26:d6:46:ba:25:e6:8c:4a:5d:
                    d0:ff:eb:31:e0:03:a9:91:a5:35:35:f0:fa:35:0d:
                    19:1a:92:c6:bd:8f:6e:8a:55:49:df:2b:9c:21:4e:
                    3c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:4B:EF:74:48:C1:86:38:53:AE:8A:08:06:26:10:70:AE:0C:6D:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/097952e5-3fea-3e53-aed7-9597238cda72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:71:f2:40:e5:18:4b:1c:a8:95:92:04:9f:74:65:47:7f:3a:
         e3:b6:fd:64:7b:17:e0:d5:5c:4b:76:83:67:c6:7e:6d:82:2f:
         73:c5:9d:19:c7:33:37:40:5e:13:fa:5d:b2:e2:97:ee:17:63:
         44:70:7f:a2:49:83:80:c1:0e:c9:9e:75:ce:62:0e:21:0a:3b:
         a3:a4:60:cf:f1:de:fe:a9:ac:cb:2b:5b:d0:7a:48:1a:9a:e0:
         25:d5:35:e9:5b:ab:3e:a9:b2:67:53:87:d6:71:a7:da:0d:56:
         0e:93:c0:f1:81:56:5d:c8:26:3a:8c:9a:8b:49:0f:ed:d2:da:
         02:ea:1e:66:c8:93:de:c7:44:3d:cc:28:21:f1:57:40:72:41:
         39:fa:1c:71:2c:8a:01:88:76:78:77:0f:0d:92:af:73:2a:ca:
         db:c5:10:35:85:bc:0b:4c:79:14:0e:02:8b:d3:47:fd:14:58:
         fd:29:18:c3:dc:84:44:1c:f9:9d:7e:4f:76:a4:18:b3:69:42:
         6a:50:26:a8:f7:73:9f:6f:32:95:95:60:31:af:45:31:80:f0:
         08:87:58:37:24:c8:f4:38:bc:81:29:8e:ec:c2:4f:01:b6:b1:
         84:8e:19:a6:c8:a0:de:c8:6d:7e:de:ff:9e:68:4b:25:dc:e3:
         8f:f7:e4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:18:06 2026 by rpki-client