Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/171c0907-2f1a-35bf-aac3-f7c7e2639c36.roa
File:                     171c0907-2f1a-35bf-aac3-f7c7e2639c36.roa (raw, json)
Hash identifier:          jE4UxE1XmrEX3/deu4Y0tq/0dp4paKkyHQI/86PB1wk=
Subject key identifier:   7E:F7:65:AD:AA:91:87:0B:D8:8B:41:D9:61:E7:DF:07:B8:50:1B:FB
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584D8EF56382BB486002D13FF898
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/171c0907-2f1a-35bf-aac3-f7c7e2639c36.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     62610
IP address blocks:        128.14.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:63:82:bb:48:60:02:d1:3f:f8:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=d6a5f56a-2940-4e3f-a76e-f35834a00380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:41:fc:de:43:06:16:c5:28:ed:fe:09:c5:36:
                    4f:d1:4e:5e:11:fb:e9:86:ce:45:5a:ed:c9:74:3a:
                    c6:14:74:21:0a:cb:17:90:1d:b4:3f:82:6b:4a:7a:
                    10:3c:1e:a9:0f:25:d4:7d:01:09:e1:d5:30:12:5f:
                    6a:50:7a:62:bf:83:4e:dc:08:e7:48:30:3d:03:a3:
                    3f:1b:b5:63:8a:1f:dc:fa:1e:68:f3:87:80:4d:51:
                    68:1a:bc:aa:fc:84:b6:2f:30:04:6e:2b:b1:31:65:
                    a4:b1:a2:09:e2:47:14:cf:18:9d:b0:e1:54:92:08:
                    fc:0f:fe:22:94:f3:74:33:6c:00:56:0c:5f:6f:ff:
                    ae:fb:3f:96:99:71:96:f5:00:e8:ab:36:35:b6:80:
                    7c:50:5f:b6:04:45:81:e0:08:f9:8a:dd:9c:f6:68:
                    8b:80:58:95:f3:d7:44:12:bb:b7:a8:cd:4e:f9:f6:
                    53:dc:97:4e:97:02:a6:6f:51:14:f7:c6:1a:96:63:
                    cf:8f:7b:6b:70:09:a8:89:2d:0b:10:e2:d3:2d:22:
                    ac:76:f2:53:d9:c5:07:58:f8:37:f2:51:1b:02:0f:
                    0b:1b:cb:65:91:af:2d:7f:fe:37:0d:05:03:59:ff:
                    f5:03:6c:be:1f:11:51:05:92:03:aa:71:c7:9b:b2:
                    37:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F7:65:AD:AA:91:87:0B:D8:8B:41:D9:61:E7:DF:07:B8:50:1B:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/171c0907-2f1a-35bf-aac3-f7c7e2639c36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.14.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:46:3a:1a:64:e6:61:7c:ce:05:2b:2d:89:52:d5:c2:0b:3c:
         31:db:ec:36:2d:ce:c2:4e:fe:68:21:c0:84:91:23:11:42:52:
         5c:4a:23:a5:50:7f:a2:68:a1:aa:19:e2:38:eb:f5:2f:9b:2c:
         4a:c2:4a:4e:7f:06:c3:a8:bd:a2:f8:3b:2f:80:78:17:92:a7:
         f8:af:05:43:0b:76:e5:1b:0c:96:3a:8c:b5:09:c8:46:6d:d4:
         fa:0d:99:fa:53:63:aa:3f:a5:c0:72:22:96:34:e2:11:ee:23:
         16:07:f5:7c:10:5b:c9:71:6c:b5:65:3c:85:42:0b:ca:80:11:
         85:62:fe:8f:0d:77:3c:bd:38:0d:da:73:a5:22:f6:0d:bc:4d:
         e5:5c:12:40:16:e0:36:7f:08:74:04:e8:1d:67:fe:97:9d:50:
         7b:fa:33:79:81:c3:aa:a5:52:48:aa:72:0a:6b:8c:0e:e1:5c:
         2e:51:07:6f:7b:71:66:bc:d2:ea:dc:e3:4d:53:c6:c8:a2:67:
         55:6e:e2:f3:22:3f:fa:73:84:83:b4:3b:c3:a2:54:f3:55:81:
         68:75:e3:70:a2:12:d5:8e:50:d7:ff:e5:e4:36:0f:4a:98:ad:
         6f:7e:1c:de:e9:de:a5:3d:77:78:65:04:97:0e:45:9d:af:d4:
         6a:54:05:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9WOCu0hgAtE/+JgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk
ZDZhNWY1NmEtMjk0MC00ZTNmLWE3NmUtZjM1ODM0YTAwMzgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0H83kMGFsUo7f4JxTZP0U5eEfvphs5FWu3J
dDrGFHQhCssXkB20P4JrSnoQPB6pDyXUfQEJ4dUwEl9qUHpiv4NO3AjnSDA9A6M/
G7Vjih/c+h5o84eATVFoGryq/IS2LzAEbiuxMWWksaIJ4kcUzxidsOFUkgj8D/4i
lPN0M2wAVgxfb/+u+z+WmXGW9QDoqzY1toB8UF+2BEWB4Aj5it2c9miLgFiV89dE
Eru3qM1O+fZT3JdOlwKmb1EU98YalmPPj3trcAmoiS0LEOLTLSKsdvJT2cUHWPg3
8lEbAg8LG8tlka8tf/43DQUDWf/1A2y+HxFRBZIDqnHHm7I3sQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH73Za2qkYcL2ItB2WHn3we4UBv7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvMTcxYzA5MDctMmYxYS0z
NWJmLWFhYzMtZjdjN2UyNjM5YzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgA5HMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB5GOhpk5mF8zgUrLYlS1cILPDHb7DYtzsJO/mghwISRIxFCUlxKI6VQ
f6JooaoZ4jjr9S+bLErCSk5/BsOovaL4Oy+AeBeSp/ivBUMLduUbDJY6jLUJyEZt
1PoNmfpTY6o/pcByIpY04hHuIxYH9XwQW8lxbLVlPIVCC8qAEYVi/o8Ndzy9OA3a
c6Ui9g28TeVcEkAW4DZ/CHQE6B1n/pedUHv6M3mBw6qlUkiqcgprjA7hXC5RB297
cWa80urc401TxsiiZ1Vu4vMiP/pzhIO0O8OiVPNVgWh143CiEtWOUNf/5eQ2D0qY
rW9+HN7p3qU9d3hlBJcORZ2v1GpUBWA=
-----END CERTIFICATE-----
Generated at Tue Apr 21 15:23:59 2026 by rpki-client