Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/be3cb13e-9e17-31b9-8a96-d9d57ee91e56.roa
File:                     be3cb13e-9e17-31b9-8a96-d9d57ee91e56.roa (raw, json)
Hash identifier:          8CgQHo6U3V1PD9M3+HQcVBCRynHfd1yEuzwlsT4ZH8A=
Subject key identifier:   C4:0C:FA:EE:DA:00:30:51:7E:93:FE:14:14:3B:21:65:94:78:63:9F
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584DEC7B22930C47DE84E41C9600
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/be3cb13e-9e17-31b9-8a96-d9d57ee91e56.roa
Signing time:             Sat 23 May 2026 01:00:25 +0000
ROA not before:           Sat 23 May 2026 01:00:25 +0000
ROA not after:            Fri 21 Aug 2026 01:00:25 +0000
asID:                     62610
IP address blocks:        128.14.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ec:7b:22:93:0c:47:de:84:e4:1c:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: May 23 01:00:25 2026 GMT
            Not After : Aug 21 01:00:25 2026 GMT
        Subject: CN=2bad277f-5ea2-47fd-9bf5-6435767b388e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:cc:10:72:a8:2d:60:fd:bb:2c:5a:02:d3:2c:
                    82:a6:c6:68:0c:38:18:9e:64:90:b6:22:66:f8:f1:
                    24:89:a1:94:aa:48:03:35:62:ee:99:61:51:8b:ad:
                    df:d0:0e:69:b3:62:66:96:9b:fb:3f:91:15:cd:15:
                    ee:ad:c3:35:72:9c:4c:df:84:d6:95:24:b2:3d:d3:
                    9e:0d:57:e9:5d:1d:4a:31:4b:35:88:39:15:6a:94:
                    fa:ad:60:56:c9:3a:59:5a:54:8d:a7:05:f1:9b:dc:
                    59:5e:9b:25:97:88:3a:42:24:6e:44:32:eb:cf:e4:
                    19:a0:2f:93:b7:da:b5:c8:85:85:a3:e3:fc:bf:e5:
                    8a:9c:ee:2d:67:0e:ff:1a:e4:ad:68:89:fc:d9:fd:
                    fd:4d:ba:b8:06:95:e7:14:9f:e6:d6:cf:ea:ff:0f:
                    c5:93:98:38:d8:96:75:f3:aa:d5:d8:2f:ee:b2:1b:
                    b7:d1:e0:3b:35:53:cf:38:97:13:f4:3b:c4:36:e1:
                    8f:bc:64:d5:57:01:53:be:34:ac:1d:e4:ad:68:8a:
                    04:d0:65:eb:cf:c5:3b:e0:5a:d3:86:65:d7:ba:b3:
                    1b:d6:56:0b:00:bd:0b:29:3c:ed:21:61:10:2a:6a:
                    2c:25:3d:5a:03:e8:34:e2:06:58:0f:de:d3:20:9e:
                    20:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:0C:FA:EE:DA:00:30:51:7E:93:FE:14:14:3B:21:65:94:78:63:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/be3cb13e-9e17-31b9-8a96-d9d57ee91e56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.14.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:28:5d:d2:ff:8e:64:f4:07:44:b3:37:35:c6:df:8b:78:4d:
         1b:79:2b:62:f3:52:3a:1f:22:3b:da:48:ba:c4:7c:e9:a7:f2:
         ad:14:18:75:b0:be:5f:af:bc:c3:2d:c7:fc:67:b1:e1:32:a8:
         66:70:58:5b:75:97:8b:6a:3b:bf:73:f3:d5:db:00:8a:31:b6:
         0d:b8:61:d9:54:7b:bb:73:cd:0c:87:5b:6b:0f:0e:8c:c7:81:
         a8:9c:f4:50:83:72:6a:b2:58:61:58:99:48:47:a8:40:eb:5b:
         a2:4a:d5:5c:3d:b4:48:69:88:b9:04:35:02:ea:4e:e9:17:f5:
         55:c6:a1:c3:d9:05:13:f5:2b:35:4d:cf:bc:f9:75:71:b3:fd:
         71:9b:12:c0:93:0d:1f:ab:65:98:db:2c:8e:d7:f3:1d:89:68:
         37:ae:62:2a:7e:b5:d9:9f:cf:a3:3b:01:8d:cf:4f:b9:a5:e3:
         2e:ac:64:21:27:90:48:33:19:12:b4:5a:49:4b:9d:c4:2a:50:
         10:26:07:6f:29:fc:29:0b:20:34:ed:48:89:3b:c3:62:d0:c4:
         1a:13:da:2f:6c:0b:52:50:bb:c1:ce:41:0d:f6:61:29:11:6c:
         05:3d:ec:35:bd:17:b1:b0:b6:2e:d7:ee:21:dc:60:93:e3:0a:
         f3:e4:76:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:41:06 2026 by rpki-client