Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/14ca64f1-a427-334a-8a5a-19d183301379.roa
File:                     14ca64f1-a427-334a-8a5a-19d183301379.roa (raw, json)
Hash identifier:          mnL6fTktfDGrx9Kub8NX+V4I7sUriraaSRFbqKnqbq4=
Subject key identifier:   B3:FD:0A:37:EB:8A:C1:D5:4A:66:7B:62:F7:98:F0:A6:4A:92:1F:80
Certificate issuer:       /CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
Certificate serial:       010D0C9F4328584D1FD9C97066172E72CA515910
Authority key identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/14ca64f1-a427-334a-8a5a-19d183301379.roa
Signing time:             Tue 10 Mar 2026 17:50:27 +0000
ROA not before:           Tue 10 Mar 2026 17:50:27 +0000
ROA not after:            Mon 08 Jun 2026 17:50:27 +0000
asID:                     18914
IP address blocks:        167.254.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:d9:c9:70:66:17:2e:72:ca:51:59:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
        Validity
            Not Before: Mar 10 17:50:27 2026 GMT
            Not After : Jun  8 17:50:27 2026 GMT
        Subject: CN=89465bb6-8a39-4c50-9f70-f38d9d217d8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:fc:64:60:6c:b8:77:63:33:1b:ec:62:39:c0:
                    23:48:75:26:65:f6:c2:1e:d4:98:08:e6:b8:82:4b:
                    be:d3:8b:8d:67:60:8d:ef:a8:2e:20:63:09:a7:11:
                    db:78:b0:e6:f3:f3:45:00:e3:92:40:ff:89:8f:2b:
                    53:da:95:dd:c6:e0:6f:1d:a9:7d:ff:2e:70:4c:63:
                    b9:4f:9c:a1:eb:50:b5:67:56:09:68:bc:37:b9:40:
                    cf:61:c4:a0:ff:2a:97:34:a4:f6:ce:c5:ea:cb:5a:
                    97:24:5f:d2:02:f2:ee:2d:69:8c:c7:60:c1:6c:9e:
                    9e:31:03:69:15:45:7a:76:7e:3e:23:9d:fd:69:c6:
                    a0:73:4f:0d:85:53:aa:36:92:a4:7f:39:5b:33:be:
                    25:6b:ca:73:1a:a9:68:9d:59:2b:52:48:88:e4:c2:
                    ba:a9:79:43:3c:38:a2:f2:15:d9:a2:d4:b6:4c:c2:
                    ba:5d:cc:14:20:4a:69:47:28:9d:e9:af:44:08:cb:
                    d9:57:18:b7:d3:a3:21:ec:b0:55:eb:b7:51:ef:2b:
                    f1:41:1a:8e:e9:f7:9c:45:9b:d7:41:f0:be:dd:ec:
                    88:bd:29:04:6b:f8:0d:be:7c:29:ad:c6:9d:92:1f:
                    20:ef:0e:3e:5f:f1:a4:2b:8d:3e:86:75:e1:29:8f:
                    f5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:FD:0A:37:EB:8A:C1:D5:4A:66:7B:62:F7:98:F0:A6:4A:92:1F:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/14ca64f1-a427-334a-8a5a-19d183301379.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl

            X509v3 Authority Key Identifier:
                keyid:C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.254.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:45:47:f3:d0:2f:fd:b8:1d:72:d1:3e:0b:4a:24:55:d3:c7:
         54:d7:a3:5b:aa:42:08:8a:f4:f4:c5:f1:16:8e:15:af:1d:eb:
         b9:9d:56:e8:f8:84:e4:17:0e:3d:a7:8a:3f:4f:e5:75:69:1f:
         f5:35:8f:a7:e7:9d:0a:dc:2c:e7:d3:37:71:b7:3c:f1:27:90:
         a6:7b:89:f3:a2:7f:e6:dd:1f:85:83:68:43:8b:05:5f:a5:80:
         36:ea:41:77:3c:df:6e:06:39:9a:8f:eb:4a:52:46:d0:a1:ae:
         04:d5:59:fe:ed:de:a2:fe:4c:50:a2:00:9f:b5:0f:4b:0d:df:
         c9:14:a6:17:93:d4:8e:11:68:00:7f:f2:ca:5c:43:60:be:82:
         e4:ec:a1:31:17:41:33:ae:d0:1f:95:e5:74:bf:e3:39:f3:21:
         f3:84:c3:22:aa:78:78:00:8e:77:93:1a:1c:7a:c9:a2:70:fa:
         f1:86:e7:17:f2:d2:6a:26:ab:12:7a:c8:0a:c3:5b:48:f0:1e:
         f4:5e:6b:8a:51:4a:96:eb:e8:69:ef:6c:40:4a:95:7d:a2:46:
         ac:b7:c2:70:6d:b6:ca:07:be:4b:d4:59:d3:e1:da:37:a6:72:
         29:74:7c:70:bb:7b:ef:46:42:7f:1a:e0:51:46:22:0e:64:8c:
         7e:37:f3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 09:55:14 2026 by rpki-client