Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/14b1ca4a-ee6e-3bf5-8b62-0b17ad8e7c56.roa
File:                     14b1ca4a-ee6e-3bf5-8b62-0b17ad8e7c56.roa (raw, json)
Hash identifier:          8OrnqPZsIR4iLtrr2HS2oNvvxcKhX4/RY6JXIWSMEY0=
Subject key identifier:   E9:0C:34:9F:24:EF:AD:51:CB:A8:06:3C:2D:23:6F:08:A5:DD:72:ED
Certificate issuer:       /CN=4f4faf2a-17ff-4827-9bec-c6ffcb2ad092
Certificate serial:       010D0C9F4328584D4D5A59A266A726DCC6768CA0
Authority key identifier: E0:13:5E:C0:DD:C6:72:A7:38:54:95:87:17:94:16:8E:6D:99:70:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/14b1ca4a-ee6e-3bf5-8b62-0b17ad8e7c56.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     14618
IP address blocks:        152.129.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:59:a2:66:a7:26:dc:c6:76:8c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f4faf2a-17ff-4827-9bec-c6ffcb2ad092
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=07cb86a2-b3c4-4beb-b39d-ba33f076ba5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7f:71:4d:7d:04:9e:37:42:d2:06:c4:2f:25:
                    3c:b6:02:83:5a:15:9b:34:7d:2f:14:ad:17:17:29:
                    ba:c9:56:36:b4:9f:d9:40:ae:3a:4f:46:35:a6:89:
                    77:86:96:de:f7:80:e5:2d:0b:8b:18:3b:d3:bf:50:
                    c1:f2:80:8d:d4:53:f6:9b:32:4b:3e:b7:52:76:58:
                    b8:91:52:45:4d:50:01:9c:38:63:da:cd:48:29:6f:
                    c6:9f:34:ab:03:87:67:32:9c:0e:55:8a:77:ba:70:
                    8c:d9:e4:ee:97:08:ff:08:19:19:00:4e:84:99:45:
                    38:b1:cf:7a:c0:4c:57:e3:ab:35:5b:49:d7:a7:92:
                    bb:cd:8b:bb:7d:4e:99:97:43:6b:9d:98:e3:b8:73:
                    64:83:6f:5d:7b:82:5a:a0:82:b8:7e:b3:a3:66:ad:
                    70:8d:2a:44:30:f5:b2:43:7c:9b:9c:44:b8:9f:2c:
                    0e:36:7c:3d:7e:69:4c:a6:dc:da:06:e7:f7:37:d6:
                    7c:a5:4a:56:27:ef:5a:58:fe:1f:2c:6c:a2:b4:8d:
                    86:23:09:a8:1f:61:ba:c1:27:16:88:61:fb:4e:56:
                    7c:9a:2c:34:b1:9c:89:b5:ac:e1:48:1a:e0:32:9b:
                    0e:87:33:c0:e3:7b:38:f5:f0:71:f7:af:39:83:83:
                    b5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:0C:34:9F:24:EF:AD:51:CB:A8:06:3C:2D:23:6F:08:A5:DD:72:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/14b1ca4a-ee6e-3bf5-8b62-0b17ad8e7c56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.crl

            X509v3 Authority Key Identifier:
                keyid:E0:13:5E:C0:DD:C6:72:A7:38:54:95:87:17:94:16:8E:6D:99:70:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.129.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:21:9e:5b:af:78:9f:a0:40:ac:9c:7e:83:fa:52:32:57:cd:
         e3:42:bd:e4:55:58:81:96:5e:2b:16:fc:07:cb:a5:b2:d0:66:
         8b:37:76:58:ec:0c:0a:08:80:bf:68:c9:d9:a8:3b:39:00:ea:
         04:39:96:17:c7:47:51:f1:e9:34:ca:7c:35:95:06:48:41:c1:
         41:30:a2:ac:73:77:fb:94:2a:e3:06:06:84:7d:6c:56:bf:8b:
         40:21:53:87:3f:d3:37:df:7e:a3:7c:1a:4a:f0:5d:55:72:ec:
         5f:ce:7f:86:dd:d4:3a:9b:cb:c7:5e:63:ff:76:e6:92:e3:70:
         36:ba:b8:dc:31:47:44:70:bc:f2:58:39:6f:12:12:75:ab:44:
         c1:9e:ed:9c:22:64:1d:7f:ce:58:0f:cb:f0:65:2c:d8:55:8a:
         80:b7:6e:2f:0b:28:78:dd:97:b1:4f:b9:26:9a:31:10:33:34:
         25:dd:00:09:51:ba:38:c2:52:35:e8:4e:25:c6:d3:50:e3:92:
         35:4c:08:57:ce:af:d9:4c:80:68:70:e7:9f:c1:55:40:2c:ad:
         3f:e9:24:9f:ca:91:46:0a:4e:3f:59:19:07:ed:6f:8b:64:b6:
         0f:fa:4a:22:e3:04:44:28:43:bc:c3:ae:99:6d:c5:f0:98:9e:
         52:6d:43:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 10:34:20 2026 by rpki-client