Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/d4c0fb9c-88a5-3ec8-b79e-b67aa7d456ac.roa
File:                     d4c0fb9c-88a5-3ec8-b79e-b67aa7d456ac.roa (raw, json)
Hash identifier:          QnfBS5wsoa5SHRfdMzSmt2mg+2p/7UjL4ikl5l1DyLs=
Subject key identifier:   18:AD:C0:A6:D1:F5:3D:A0:62:39:56:DE:8E:B5:74:C8:FF:EC:AF:7E
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584CAE57168021E51D614E805EC0
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/d4c0fb9c-88a5-3ec8-b79e-b67aa7d456ac.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     21859
IP address blocks:        128.14.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:16:80:21:e5:1d:61:4e:80:5e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=a971bd50-b0e7-44dd-b396-119186dc1563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0b:9d:c4:e7:59:6c:01:ab:40:b5:cd:9b:75:
                    af:5b:6f:c6:50:3b:e3:0f:ef:e8:b7:76:46:00:87:
                    46:b3:29:7c:07:36:07:a9:99:a5:54:d1:17:47:70:
                    ba:69:4d:a6:2b:d2:0b:cd:8c:a9:90:e9:0c:06:0f:
                    df:34:fb:ad:e9:3a:6e:6b:40:c4:dc:d5:8e:2e:be:
                    37:17:bd:8a:75:b2:89:bb:0d:1d:0b:ff:c5:29:7e:
                    0d:df:02:74:f0:a6:65:28:82:a6:3b:8e:46:8e:1b:
                    57:a7:64:66:76:71:c1:01:80:a4:05:17:b5:95:7d:
                    a8:9f:7e:77:45:a9:4f:72:67:5c:d6:35:bc:c3:dd:
                    91:ae:bc:fc:0e:7a:b1:b7:8a:2a:66:d2:d3:b1:a0:
                    01:8e:a2:5b:66:d3:5c:d6:e9:e2:ef:fa:ce:55:60:
                    d1:62:9e:81:50:3e:89:17:23:31:19:df:90:f1:63:
                    be:d0:c8:6b:1f:53:a9:d9:e1:ae:f3:ab:6a:7d:8f:
                    2d:2f:e4:2b:7d:31:81:e0:bd:50:5b:e2:f0:8c:f1:
                    53:30:9a:e5:0f:34:67:10:77:cb:dd:31:fc:b0:c8:
                    c9:cd:09:15:31:e5:9f:c0:7a:88:14:46:cf:88:58:
                    d5:43:5c:45:ff:c8:50:9b:b6:5a:55:9c:3b:72:8c:
                    ad:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:AD:C0:A6:D1:F5:3D:A0:62:39:56:DE:8E:B5:74:C8:FF:EC:AF:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/d4c0fb9c-88a5-3ec8-b79e-b67aa7d456ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.14.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:7a:9d:c6:41:67:63:f9:8d:33:d9:9e:90:55:7e:a4:85:42:
         af:13:81:1a:b4:ac:f2:20:45:1a:af:bd:06:2c:b2:db:83:61:
         10:d2:7c:42:4a:48:75:b9:26:a3:19:b8:14:54:93:3f:22:5b:
         43:e0:e2:36:aa:37:52:ab:37:c8:79:80:89:f4:0f:f7:ba:ff:
         56:65:f6:c6:80:49:7c:45:6c:69:90:4c:c1:51:28:8f:9d:8e:
         f0:84:e2:56:6a:f9:78:8f:8a:c3:a5:3f:b8:0b:2f:d0:07:d5:
         f1:c3:2c:c6:62:c3:34:b4:12:bd:cc:71:79:e6:7c:f3:a7:e3:
         2f:2c:4a:a1:89:3c:8c:29:11:7f:f4:0c:61:a0:d8:8a:09:0b:
         4d:61:1e:79:b6:b2:53:ea:cd:96:6d:fc:e3:9e:b8:ee:1d:a9:
         96:88:22:16:87:3c:f8:44:5e:19:5c:6a:73:0f:3d:bd:ab:6b:
         3b:52:ea:21:88:9c:47:db:6e:8c:c4:9e:7a:ad:c3:98:00:f9:
         d5:ce:9c:75:ce:a2:65:e7:34:cd:aa:2b:bf:61:77:3c:a5:b2:
         b5:60:04:7b:e3:fd:f6:f6:d3:c0:52:6f:77:59:82:b2:4f:94:
         4c:7f:11:8d:e8:1d:69:28:6f:05:f8:ef:43:1c:10:30:f7:b3:
         0e:7f:8a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 22:02:25 2026 by rpki-client