Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/6a23d286-7d5f-3049-bb18-d873e0cfa98b.roa
File:                     6a23d286-7d5f-3049-bb18-d873e0cfa98b.roa (raw, json)
Hash identifier:          6Nq/51qJUvEzEBI6iY4o+CfkISTuldrVDjPo2OGQeyk=
Subject key identifier:   06:B2:36:47:11:4B:91:88:17:06:E5:AA:F2:27:81:10:66:31:85:07
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584DBA3AE434C298F245A90DCC80
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/6a23d286-7d5f-3049-bb18-d873e0cfa98b.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     21859
IP address blocks:        128.14.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3a:e4:34:c2:98:f2:45:a9:0d:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=79d24fe0-a45f-4270-ab8b-d5bd097640ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f9:2f:38:19:70:68:9b:ce:9d:ba:2c:a9:b7:
                    4b:86:78:54:7f:ff:63:c5:49:df:20:91:12:3d:a1:
                    3d:d5:d1:ea:b0:37:7f:08:b0:1e:fd:6a:97:a2:1a:
                    ab:e1:4b:af:dd:a7:07:a7:97:46:3f:4e:36:b4:66:
                    76:e3:f8:3e:d0:2e:5a:e5:bf:bc:a0:28:05:ce:19:
                    f7:55:6d:22:8a:09:a7:25:94:98:01:78:77:8b:50:
                    fb:fe:c1:ba:e8:b1:b9:ae:9f:10:67:98:6f:7c:86:
                    d7:ca:b8:6a:9c:ad:95:1e:9c:b9:74:77:97:8d:6d:
                    07:47:79:37:78:ae:d9:19:07:de:8f:7f:aa:03:97:
                    52:e7:54:23:d7:d7:4e:89:fd:96:ff:28:5e:74:45:
                    61:71:98:d3:e3:42:e9:2b:74:b5:51:78:32:b2:8a:
                    d3:f3:bf:ec:fd:fa:15:0b:54:d0:aa:a2:0b:b0:70:
                    06:81:d5:4c:de:df:16:60:9a:7d:15:b8:67:92:9d:
                    96:fc:c3:0e:3a:a4:21:68:ca:5f:60:db:24:e7:68:
                    7b:e3:a4:28:9e:d7:9e:30:9c:14:8c:c5:4b:99:d8:
                    53:1f:6e:a9:d8:28:5f:d2:97:47:e8:49:5e:bb:83:
                    3e:08:e2:d3:96:23:af:e8:97:52:b9:1a:80:c1:4c:
                    f4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B2:36:47:11:4B:91:88:17:06:E5:AA:F2:27:81:10:66:31:85:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/6a23d286-7d5f-3049-bb18-d873e0cfa98b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.14.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:fe:4b:87:93:a6:aa:58:17:83:db:32:b1:c4:b2:bb:0e:11:
         d1:7c:c1:f3:d7:4e:45:17:b8:63:a7:2e:7a:e6:5d:87:1c:4a:
         0c:e1:5d:fc:a3:b7:7e:4d:b5:b4:8c:3b:b8:ad:98:b9:9d:84:
         0c:dd:ae:ec:07:5c:b0:82:96:44:65:7b:59:f6:eb:0e:8f:71:
         76:64:cb:9d:89:a2:8c:d7:31:b7:56:68:63:7d:c6:b9:c4:e7:
         e2:19:a8:ea:2a:cf:4a:dd:30:b2:d1:09:7d:4e:25:f4:e9:b2:
         d3:62:a9:93:ca:e6:ce:55:27:6f:fc:60:35:71:d9:f9:ac:d1:
         01:b4:19:c7:6c:6f:8c:84:d7:8b:ae:60:63:ec:b2:87:c4:ac:
         f9:de:b5:78:04:db:5a:fa:12:b3:c7:5f:55:e6:6a:10:39:88:
         d0:4c:65:2b:f5:0c:af:cc:be:48:0c:44:ed:4f:13:92:2e:08:
         ed:2f:9b:8b:c8:4c:9e:d0:ad:21:a9:10:fb:fa:1d:27:74:c0:
         28:4f:67:18:4b:59:b6:ce:b5:d0:0f:8f:1f:a4:b2:92:d2:75:
         20:8b:c6:3b:a6:2d:e0:66:34:f2:75:05:70:00:e9:04:28:74:
         f3:76:82:5f:8f:9f:16:f8:c2:54:5c:1b:cf:bf:ea:48:0a:0c:
         b3:8e:aa:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:03:27 2026 by rpki-client