Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/0704457f-e787-3224-a8dc-a525bf5aec40.roa
File:                     0704457f-e787-3224-a8dc-a525bf5aec40.roa (raw, json)
Hash identifier:          d79cqF45sS3Jd/OEGFGQZ3fjeB//udju3EU19z8nA/4=
Subject key identifier:   AE:2C:C9:6E:E5:BF:F1:E5:2F:B6:D4:1D:E1:14:A9:23:A3:4E:DA:D7
Certificate issuer:       /CN=f0657a3e-0c20-4004-9a6b-e66cf7940583
Certificate serial:       010D0C9F4328584EE0C21FDA751B50BD4EA6FA00
Authority key identifier: AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/0704457f-e787-3224-a8dc-a525bf5aec40.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        160.32.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:1f:da:75:1b:50:bd:4e:a6:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0657a3e-0c20-4004-9a6b-e66cf7940583
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=d9334c06-09c7-489a-be83-c822c398aa30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:24:30:22:05:19:93:30:f5:37:c7:e4:76:d0:
                    24:ac:a5:59:03:b0:69:d8:9c:f0:e2:6b:44:b0:22:
                    84:da:3e:c9:b3:a5:ee:8b:e0:41:04:e0:a8:5a:5a:
                    e6:52:37:25:a8:a3:39:f6:b8:89:67:33:0b:e3:bc:
                    8c:8c:77:06:00:61:d1:ab:ee:91:d4:00:e3:52:b7:
                    0b:e3:7e:8d:c2:95:fd:32:ec:ae:b5:b0:3a:9c:5a:
                    d9:94:7b:77:98:41:bc:6b:91:46:5e:af:df:cb:30:
                    7b:5b:64:36:77:41:2e:4b:a0:d5:83:fa:90:ac:45:
                    14:67:53:7b:a9:45:5c:48:d1:3a:af:e0:de:12:90:
                    39:7e:bb:a9:2a:fc:ba:43:0e:04:e4:0f:9a:73:b9:
                    f9:db:5f:7f:95:5b:77:0e:ac:c8:2a:5c:1d:33:6b:
                    96:b8:cf:7d:c8:bf:b3:1f:a0:d1:2d:5f:b1:a9:dd:
                    1e:04:46:e0:75:ff:54:bd:19:4d:f8:d7:69:d8:b9:
                    1e:ff:e6:3c:0d:61:54:7b:92:2e:70:80:c7:5f:0f:
                    ac:31:9e:81:ed:e4:00:4e:91:36:2b:ee:79:24:76:
                    e7:cb:2d:49:44:11:6e:c1:7e:40:ad:66:f9:cc:97:
                    5a:5b:ae:a7:57:36:42:6b:5b:87:d6:9f:f6:d5:38:
                    47:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:2C:C9:6E:E5:BF:F1:E5:2F:B6:D4:1D:E1:14:A9:23:A3:4E:DA:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/0704457f-e787-3224-a8dc-a525bf5aec40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.crl

            X509v3 Authority Key Identifier:
                keyid:AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.32.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:86:8b:6d:cc:6e:aa:dc:2d:16:48:c9:ea:15:a6:12:7c:65:
         66:74:97:6e:6d:14:d8:28:6e:50:9b:68:0b:0e:a4:83:4f:fb:
         f4:d8:f0:35:92:54:08:ac:c5:bb:6c:5d:a3:2e:3e:67:cd:46:
         c0:2a:bd:5b:f2:b2:10:9a:53:11:39:83:7d:b8:76:f6:11:8d:
         8a:84:66:c7:70:b5:85:7c:90:d0:04:1d:b8:f3:16:a4:a1:d9:
         93:3d:76:fb:b7:fe:93:a4:c2:76:04:96:98:f7:87:63:61:11:
         d9:8f:c8:92:77:cb:10:e2:6d:5d:a9:61:bc:0a:23:fb:5c:41:
         c6:43:b6:59:a2:92:cf:25:dc:24:1d:de:9e:41:5c:96:23:a1:
         97:25:0e:b2:86:9f:46:3e:9d:09:a4:b2:fc:08:ca:7f:db:c5:
         c6:05:6d:99:91:d8:49:9b:31:40:fe:6a:2f:c4:a0:95:21:71:
         f9:2b:2e:ad:ee:5d:c2:60:15:f0:f5:b1:2c:39:ba:34:fe:bc:
         cc:43:e7:a3:57:13:d6:9c:11:a9:2a:ea:01:0e:3f:3c:df:69:
         d2:2f:cb:d3:a9:0e:ac:60:08:d9:40:dc:95:ad:f9:61:94:47:
         07:41:67:36:fe:61:42:a6:79:66:ce:cb:99:97:69:ad:21:3e:
         a8:79:14:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:56:14 2026 by rpki-client