Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/5e8b6406-e150-35df-9d11-45c96f7290b6.roa
File:                     5e8b6406-e150-35df-9d11-45c96f7290b6.roa (raw, json)
Hash identifier:          QAZYd8aT7gWXntJcKlH3k75c6yCyRyEIkMRsibfQquw=
Subject key identifier:   F6:99:F6:3F:36:07:77:0C:52:CC:D4:91:FA:92:85:DD:CC:C7:2D:59
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584F49896D21F18C0572FEA3C080
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/5e8b6406-e150-35df-9d11-45c96f7290b6.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     62610
IP address blocks:        128.14.133.0/24 maxlen: 24
                          128.14.136.0/23 maxlen: 23
                          128.14.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:6d:21:f1:8c:05:72:fe:a3:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d942a4c5-18bd-4a42-9f2b-ce9ef99f40c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9e:11:34:7d:e1:99:dd:72:4c:e5:d2:a9:6b:
                    66:15:da:04:32:3d:0a:30:3a:ad:7e:00:5e:ec:bc:
                    34:e7:73:f4:91:60:98:c7:a8:73:f2:3a:60:39:cb:
                    07:77:01:27:86:e7:4e:eb:13:5e:b7:24:59:fd:fd:
                    13:70:89:35:00:99:13:a5:1e:93:e6:f6:8a:29:f4:
                    1e:64:cb:bc:e5:d4:0f:9b:26:85:eb:f8:69:ab:59:
                    b2:83:f1:dc:87:e3:e7:08:15:7f:80:ae:34:ea:2b:
                    52:2b:e8:64:50:b7:e8:6a:9a:1d:fd:c2:f5:4c:d7:
                    fb:e8:9a:56:8a:cf:16:59:9f:81:74:7e:e1:65:f1:
                    46:b8:00:6c:44:b7:b4:27:cd:19:56:06:d0:db:09:
                    e2:9a:52:9d:7a:81:34:3d:a7:ac:35:7a:b7:90:ba:
                    ae:7f:3f:b7:de:0a:2d:93:f5:18:5b:16:45:5a:c0:
                    d0:dd:5f:e6:f2:9c:91:75:28:01:94:5f:2f:89:36:
                    0e:c5:ca:ad:5d:fb:ca:24:78:06:4a:dc:e7:3d:90:
                    2a:63:b5:2e:22:f9:9a:8e:ca:7e:9c:3b:82:1d:fd:
                    af:0f:8d:55:48:12:3b:d5:a8:b3:65:7a:ec:34:e1:
                    bb:b6:71:0d:e9:aa:3f:72:8a:cf:a8:ed:44:5c:02:
                    e0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:99:F6:3F:36:07:77:0C:52:CC:D4:91:FA:92:85:DD:CC:C7:2D:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/5e8b6406-e150-35df-9d11-45c96f7290b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.14.133.0/24
                  128.14.136.0/23
                  128.14.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:f4:ce:5f:b2:a3:3d:76:81:1b:d1:9a:f2:1e:57:6b:22:c1:
         77:2a:d3:e1:66:39:2a:af:f7:b8:67:4f:fa:f5:77:cd:58:e3:
         00:67:d7:f6:9b:a2:4b:bc:ed:7e:88:14:e5:7e:f9:a9:32:4d:
         af:5f:f1:89:31:d1:7f:3b:4e:7a:9f:a4:34:df:00:1c:bb:23:
         35:3a:65:6c:9b:d4:b7:b2:2c:37:eb:b1:6b:28:e8:d0:e1:40:
         2a:b2:e4:72:6e:cb:58:7e:d1:ab:f7:f4:81:8c:78:f2:67:4b:
         80:6f:16:76:d8:d8:7c:52:58:e0:f0:81:55:fa:af:4c:fc:7f:
         5b:f5:19:0f:56:d3:97:72:5e:ed:d9:d0:5f:65:e6:9b:74:2f:
         33:71:c2:da:fb:95:38:93:16:a4:8c:d9:c0:e6:c1:60:73:0d:
         91:91:03:38:38:45:13:3b:a9:c7:fd:14:5d:b8:81:4d:4d:5d:
         0f:e6:36:1e:79:34:4a:43:e9:03:ac:1c:2b:81:d5:4c:3f:06:
         47:a3:ea:e9:95:b5:de:60:8a:62:17:84:cf:5e:09:2b:bd:71:
         d9:87:a3:ed:53:c8:08:b8:86:e0:34:12:1d:58:1a:c4:ea:96:
         a6:88:17:ed:13:96:03:d5:32:9d:45:72:24:d0:17:87:45:d3:
         52:c4:33:15
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE9JiW0h8YwFcv6jwIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZDk0MmE0YzUtMThiZC00YTQyLTlmMmItY2U5ZWY5OWY0MGMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZ4RNH3hmd1yTOXSqWtmFdoEMj0KMDqtfgBe
7Lw053P0kWCYx6hz8jpgOcsHdwEnhudO6xNetyRZ/f0TcIk1AJkTpR6T5vaKKfQe
ZMu85dQPmyaF6/hpq1myg/Hch+PnCBV/gK406itSK+hkULfoapod/cL1TNf76JpW
is8WWZ+BdH7hZfFGuABsRLe0J80ZVgbQ2wnimlKdeoE0PaesNXq3kLqufz+33got
k/UYWxZFWsDQ3V/m8pyRdSgBlF8viTYOxcqtXfvKJHgGStznPZAqY7UuIvmajsp+
nDuCHf2vD41VSBI71aizZXrsNOG7tnEN6ao/corPqO1EXALg0wIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFPaZ9j82B3cMUszUkfqShd3Mxy1ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvNWU4YjY0MDYtZTE1MC0z
NWRmLTlkMTEtNDVjOTZmNzI5MGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAgA6FAwQB
gA6IAwQAgA6OMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAJ70zl+yoz12gRvRmvIeV2siwXcq0+FmOSqv97hn
T/r1d81Y4wBn1/aboku87X6IFOV++akyTa9f8Ykx0X87TnqfpDTfABy7IzU6ZWyb
1LeyLDfrsWso6NDhQCqy5HJuy1h+0av39IGMePJnS4BvFnbY2HxSWODwgVX6r0z8
f1v1GQ9W05dyXu3Z0F9l5pt0LzNxwtr7lTiTFqSM2cDmwWBzDZGRAzg4RRM7qcf9
FF24gU1NXQ/mNh55NEpD6QOsHCuB1Uw/Bkej6umVtd5gimIXhM9eCSu9cdmHo+1T
yAi4huA0Eh1YGsTqlqaIF+0TlgPVMp1FciTQF4dF01LEMxU=
-----END CERTIFICATE-----
Generated at Sat Oct 24 07:09:29 2026 by rpki-client