Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d53c2ae-4922-3e33-8102-06de1e662cd3.roa
File:                     0d53c2ae-4922-3e33-8102-06de1e662cd3.roa (raw, json)
Hash identifier:          fhklZ0fPXornnSoFKlAnZVh88G2YJ3iHs9xBk9jTpag=
Subject key identifier:   AD:02:71:38:9C:E6:48:8C:EC:5C:F1:BB:F6:6B:04:72:8A:29:B5:A1
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584F3CE28A383763D52F94891600
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d53c2ae-4922-3e33-8102-06de1e662cd3.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     21859
IP address blocks:        128.14.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:8a:38:37:63:d5:2f:94:89:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=5ad750ec-9668-469f-8adf-c2e7481b2de6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:1f:dc:20:0d:d0:3a:7c:a1:fe:bf:da:a3:b6:
                    44:3d:f1:9a:c2:1e:12:2e:18:2f:e0:db:a2:cd:c9:
                    05:70:f4:16:d4:d6:28:74:1d:d9:b2:c8:d1:72:b6:
                    a6:54:13:30:8d:ab:c9:0b:1e:74:7f:7c:fa:dc:8b:
                    a8:c8:74:e9:53:67:4b:90:03:79:ba:af:f6:b8:03:
                    73:82:b6:5f:b4:da:33:6f:ec:02:b9:1f:69:17:69:
                    95:e5:51:5f:26:2a:85:ba:f3:33:67:38:61:c7:84:
                    34:d6:72:3f:ee:4e:c0:42:1c:f3:23:c9:f1:34:86:
                    b2:4a:5a:6e:43:7a:d1:64:15:23:09:22:97:33:00:
                    6d:0c:f5:2b:81:37:7a:35:92:f9:86:c9:b2:90:03:
                    f1:52:ef:e0:c9:77:1e:25:d6:05:db:c7:5f:52:f3:
                    94:9f:e0:b1:64:a3:be:66:0d:17:8a:e6:86:5c:e9:
                    fa:ff:3f:57:43:5f:6a:13:47:ad:78:89:df:67:57:
                    e3:24:50:c4:5b:86:63:eb:e6:0f:a5:01:f1:9b:37:
                    19:0d:50:55:5b:5c:ff:9c:a6:c6:f4:8e:ff:da:ae:
                    8d:f6:c5:e7:96:00:b7:de:9c:be:16:d1:22:22:fc:
                    69:87:76:50:b6:30:b8:c8:28:b4:eb:74:1f:44:bb:
                    b8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:02:71:38:9C:E6:48:8C:EC:5C:F1:BB:F6:6B:04:72:8A:29:B5:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d53c2ae-4922-3e33-8102-06de1e662cd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.14.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:78:21:97:e4:e5:5c:e2:f1:94:c7:18:6e:3f:a0:0d:cb:6c:
         52:c3:5e:8c:32:c6:ed:fc:46:1a:cf:b1:48:09:cb:1b:20:75:
         a3:25:71:6c:35:0a:92:47:ff:7c:fa:b1:82:d1:95:ff:44:7d:
         d4:0c:bb:d7:84:56:ba:eb:32:27:43:b0:c6:2b:28:99:11:8d:
         b8:6e:8d:73:06:89:3a:9a:cd:88:d6:76:ca:e9:38:93:1d:d5:
         78:4f:b8:86:6e:b5:ef:c2:4c:09:ca:86:8d:7e:9d:45:87:19:
         85:b6:90:a4:2a:29:76:4b:21:5a:a0:fb:e5:90:dd:ff:33:b8:
         78:3b:f4:4e:e8:6b:27:a3:7c:65:e0:73:03:16:5a:f8:c3:bb:
         1c:b1:1e:b7:4d:e6:41:91:f8:4b:b5:9a:e0:45:1c:a9:0e:da:
         4f:dd:00:74:39:2c:2c:72:23:e9:45:36:c4:3f:52:ba:f2:38:
         60:c9:e0:75:f5:e5:67:18:9a:cc:4e:c3:94:ae:bc:8d:7b:6e:
         76:da:de:ab:ea:a5:b9:a5:eb:fd:bb:d7:4b:f1:7e:8e:f1:c8:
         54:88:e9:a4:e0:ee:3f:b1:06:b7:b0:06:d8:32:20:e3:1f:62:
         81:8a:3d:5f:54:32:50:3b:13:2f:77:ac:8a:93:c9:31:c9:64:
         5f:43:7a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 16:48:53 2026 by rpki-client