Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/171c0907-2f1a-35bf-aac3-f7c7e2639c36.roa
File:                     171c0907-2f1a-35bf-aac3-f7c7e2639c36.roa (raw, json)
Hash identifier:          xIS4PIiX4zYW1ebU6DtbDUKp3mx7ufBZ10fBKQkpinY=
Subject key identifier:   DD:FC:C3:CF:4B:A3:25:A2:A2:D6:05:46:60:60:BF:A0:47:08:B4:0A
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584F119CF697DE499C413EB16380
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/171c0907-2f1a-35bf-aac3-f7c7e2639c36.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     62610
IP address blocks:        128.14.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:f6:97:de:49:9c:41:3e:b1:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=6354c506-0640-476c-b5b2-e2499eb3354a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:00:76:71:0d:87:91:e2:9b:3e:76:3c:1d:72:
                    c1:b4:b1:9d:8e:dc:28:85:6c:f9:2f:f7:f2:3f:9f:
                    2b:63:55:c8:24:b9:3c:72:76:30:76:ee:d0:d0:2b:
                    33:14:b1:cb:75:c5:04:e4:7c:cb:10:50:c9:5d:7d:
                    4d:c1:4f:38:0b:f1:e8:d3:96:75:92:e9:d2:bf:96:
                    e4:98:7d:69:0e:f2:cb:3e:c8:e5:7b:3f:ec:a5:42:
                    f6:4f:0f:90:45:e6:0b:2f:82:56:c0:ab:fc:94:c3:
                    f9:2d:73:26:43:ab:3b:08:00:80:bc:56:8a:21:ea:
                    fa:a7:5b:3f:fe:7c:4b:0a:18:fc:06:53:c0:08:2f:
                    16:0f:7a:de:cf:14:71:31:0f:9f:4e:bd:24:84:93:
                    20:06:a9:03:b5:79:72:74:9f:eb:04:44:01:e9:0f:
                    a5:ea:52:eb:7d:b5:7f:cf:ea:bc:56:95:61:73:cd:
                    2c:b9:b1:67:8d:f6:f5:dd:1c:69:1f:f0:32:e1:28:
                    9a:fa:41:2d:d7:ec:96:58:70:60:23:d5:b2:d4:70:
                    8f:ee:59:70:4b:55:a2:8c:ee:84:d0:3b:71:83:e9:
                    22:b2:02:64:72:85:fc:88:14:0b:18:81:1a:74:a5:
                    cd:40:a7:db:e0:c1:88:82:48:39:da:b0:a9:8d:15:
                    2b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:FC:C3:CF:4B:A3:25:A2:A2:D6:05:46:60:60:BF:A0:47:08:B4:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/171c0907-2f1a-35bf-aac3-f7c7e2639c36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.14.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:d4:b3:af:68:8f:37:df:04:a6:a7:2b:3f:a1:d8:bc:40:be:
         0c:b5:14:dd:cb:db:88:74:f1:75:70:db:10:91:14:c4:ac:a9:
         d1:d6:c1:cf:66:79:75:38:40:bd:24:86:1f:e9:7d:e5:da:b0:
         ba:cd:a5:61:bd:a3:5e:19:84:24:7b:ca:ff:ff:35:e7:7d:69:
         9b:60:12:57:77:2b:31:42:a9:11:a6:0c:60:ce:f1:71:9e:6c:
         58:88:20:21:04:48:ea:2d:ad:11:38:65:72:c0:2c:64:dc:a3:
         97:77:d8:85:87:76:15:85:41:2e:43:7c:a2:38:8e:da:1b:6c:
         5a:c8:db:82:f9:e3:50:bb:f8:fe:ec:70:ec:4e:54:14:3f:87:
         d6:cd:2d:88:2e:89:5f:a7:f5:2b:77:9c:f7:35:8e:44:74:4f:
         fc:26:e5:b6:e6:09:8c:8c:d0:a4:3b:f0:3a:3f:f8:bc:55:6d:
         64:d8:34:43:f0:09:f9:dd:9c:6c:f6:42:df:a3:71:8c:d3:6c:
         97:f7:ef:d7:14:c1:1b:13:78:11:92:14:5a:7a:20:d7:73:bb:
         ad:b8:e6:3f:36:fd:b2:88:2c:3a:73:37:03:85:d7:f1:e2:16:
         33:55:bb:70:25:ef:af:19:15:74:c4:d1:5c:4a:78:14:b4:03:
         a5:f1:71:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:00:23 2026 by rpki-client