Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa/9a8c514a-5fb3-38bf-9ce7-e9d5e7942004.roa
File:                     9a8c514a-5fb3-38bf-9ce7-e9d5e7942004.roa (raw, json)
Hash identifier:          hCDE2+W12IBm0MMkwkxX6Y+UW+2/SnAXCQbxPANiMg0=
Subject key identifier:   2C:03:11:80:BA:77:32:82:6B:E6:1B:5C:41:04:21:55:F2:0C:18:DB
Certificate issuer:       /CN=14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa
Certificate serial:       010D0C9F4328584E31CF05651BB1833EC43EA300
Authority key identifier: AF:7E:74:FC:70:9F:AB:B7:AA:68:46:E8:30:D2:DD:9B:F3:08:30:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa/9a8c514a-5fb3-38bf-9ce7-e9d5e7942004.roa
Signing time:             Tue 16 Jun 2026 21:00:12 +0000
ROA not before:           Tue 16 Jun 2026 21:00:12 +0000
ROA not after:            Mon 14 Sep 2026 21:00:12 +0000
asID:                     401160
IP address blocks:        23.145.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:cf:05:65:1b:b1:83:3e:c4:3e:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa
        Validity
            Not Before: Jun 16 21:00:12 2026 GMT
            Not After : Sep 14 21:00:12 2026 GMT
        Subject: CN=6cb803c3-058f-4e97-b08a-244311967c04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e3:d0:34:fb:a0:87:16:1d:28:f5:7a:24:19:
                    45:24:93:42:e4:8f:9c:77:87:04:49:0a:34:f8:c8:
                    c9:92:c7:1c:1d:a3:63:61:8c:b4:36:63:46:24:8e:
                    a6:77:13:5c:34:ad:cd:05:5e:09:b8:09:54:79:46:
                    0c:b9:8c:d1:ad:d2:f0:73:f2:46:1a:1e:3b:2d:63:
                    7e:47:44:27:15:fc:d6:32:d6:8c:a6:e6:0e:2e:84:
                    17:c2:32:70:f3:24:c0:99:f5:67:d0:7e:82:1c:ce:
                    2a:03:a8:7f:05:6c:c8:85:cd:1c:07:0b:3f:b7:a5:
                    22:0c:ab:7e:68:58:e9:06:2d:8a:b3:c1:f3:ab:65:
                    34:03:58:78:99:0b:d2:76:f8:41:2b:23:8c:c5:28:
                    11:2c:10:fc:a3:9e:a3:94:95:90:ff:0c:89:cd:0e:
                    09:8e:7b:6e:62:da:1e:42:31:86:7a:eb:97:68:f0:
                    c9:52:76:32:3a:86:f2:ae:3c:11:2f:2c:e0:52:16:
                    18:ca:9b:79:ca:e1:22:b2:e9:77:cc:94:f4:ca:e9:
                    eb:e1:a0:48:e8:17:31:12:61:de:d0:a5:e2:d6:cc:
                    00:5a:b1:c7:5a:0e:76:ce:ca:ee:6f:70:7c:89:f9:
                    ec:76:40:a1:dc:a3:e3:91:b2:7a:c2:6c:e7:e8:61:
                    39:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:03:11:80:BA:77:32:82:6B:E6:1B:5C:41:04:21:55:F2:0C:18:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa/9a8c514a-5fb3-38bf-9ce7-e9d5e7942004.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa.crl

            X509v3 Authority Key Identifier:
                keyid:AF:7E:74:FC:70:9F:AB:B7:AA:68:46:E8:30:D2:DD:9B:F3:08:30:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:01:0b:4a:99:e7:df:57:9e:63:89:c6:e7:10:8b:4b:df:97:
         f6:a7:06:d9:eb:5d:ee:1f:b9:50:97:aa:4b:30:93:82:75:df:
         81:b7:2b:e2:60:04:5f:c3:c7:0d:f7:8e:b1:86:68:59:65:99:
         c7:08:b4:17:91:f0:59:77:49:e8:4d:8b:a2:8a:3b:27:ce:a1:
         04:97:55:3d:4b:d1:62:5b:c0:a7:f4:eb:0d:5d:61:c9:53:09:
         ed:1c:0f:a6:d4:61:63:14:53:ef:ba:8b:cd:e6:d1:63:b9:d1:
         b0:6d:06:42:47:93:c7:e8:b4:a5:c6:2c:ac:42:29:d5:4a:f4:
         cb:6d:b5:22:dc:3d:e4:ba:f7:b9:67:52:f6:1f:2a:e6:41:56:
         ea:0b:e3:fa:db:6f:ab:c7:71:5e:48:79:13:a8:53:ab:8a:89:
         7e:91:9c:2c:ae:49:f5:ee:5e:d2:ab:41:b9:f2:32:4c:90:d7:
         f4:a5:fd:33:ab:2e:57:a6:23:01:61:ab:23:fb:67:53:32:55:
         67:cd:38:9a:73:af:96:5f:c2:79:69:f4:d5:fd:bd:6e:c0:df:
         ee:b4:3c:ec:b1:b5:03:13:48:90:ba:6f:91:ab:22:6e:34:e0:
         22:39:a4:87:e1:13:55:cf:71:5f:2e:a5:d2:7b:5a:15:e8:19:
         5d:51:07:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 06:46:17 2026 by rpki-client