Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/e46e4db9-9c51-349d-a739-b1b2841a33f6.roa
File:                     e46e4db9-9c51-349d-a739-b1b2841a33f6.roa (raw, json)
Hash identifier:          lWS+R/J5wOx2Dzwu3doqicytmxwikrZGu+cdNyfj3WE=
Subject key identifier:   69:CF:83:30:41:50:CA:96:34:9D:1A:31:33:D7:A4:90:14:FF:A9:F7
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584B521CB3D2827B547EDF4FFE00
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/e46e4db9-9c51-349d-a739-b1b2841a33f6.roa
Signing time:             Fri 26 Sep 2025 08:21:49 +0000
ROA not before:           Fri 26 Sep 2025 08:21:49 +0000
ROA not after:            Thu 25 Dec 2025 09:21:49 +0000
asID:                     29752
IP address blocks:        128.14.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:1c:b3:d2:82:7b:54:7e:df:4f:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Sep 26 08:21:49 2025 GMT
            Not After : Dec 25 09:21:49 2025 GMT
        Subject: CN=35d2eb22-73c4-4319-9d8c-5d9169cb7d97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:3f:d1:9e:cd:a1:3c:44:37:b8:8f:20:64:6e:
                    44:11:10:ab:ec:e7:e4:96:be:51:0f:f7:f9:87:e4:
                    7f:e8:03:1c:1c:4a:1c:28:d6:62:1a:5b:3e:59:f5:
                    62:c7:3b:f5:0c:f8:91:ef:8a:71:df:f5:41:04:bf:
                    31:f6:d8:4f:c8:17:45:fb:e3:ac:73:08:14:d0:d5:
                    64:fc:bd:4c:f1:f2:4b:2a:b6:17:a3:65:ff:f1:8d:
                    2e:bd:8a:ad:06:f2:7d:0e:d7:79:01:72:e2:e0:1f:
                    ac:61:3f:28:63:67:31:ef:ce:6b:b1:e2:e5:a0:c8:
                    0b:09:5b:64:60:df:6c:3e:72:40:59:6c:45:1e:5b:
                    ea:13:11:4a:94:62:00:c0:92:33:d7:a2:0e:dd:82:
                    e4:69:d9:b4:66:f0:01:03:a7:60:a0:66:7b:e0:df:
                    7b:9e:21:14:5c:b0:48:8c:7f:88:67:32:ca:1d:89:
                    89:5d:8d:f0:78:99:2b:b9:92:92:86:1a:5c:40:b1:
                    98:60:02:40:5d:57:ef:ae:76:8e:fc:7f:56:80:38:
                    be:af:d3:34:ee:aa:5f:c4:b5:8e:e6:76:cd:2a:71:
                    74:3c:33:4d:19:7c:b7:c6:5e:16:80:a1:0c:06:a5:
                    8e:a4:e4:3f:da:8a:92:46:79:9b:0d:11:30:41:38:
                    98:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:CF:83:30:41:50:CA:96:34:9D:1A:31:33:D7:A4:90:14:FF:A9:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/e46e4db9-9c51-349d-a739-b1b2841a33f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.14.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:d1:05:95:7f:93:9c:0a:6e:12:2a:dc:ac:4d:0d:1e:91:bc:
         02:58:55:61:ee:a1:29:d5:34:7f:5d:fe:3b:13:65:ab:88:2d:
         e2:13:d5:34:f9:8d:01:5d:c9:c7:1a:ba:ef:11:db:80:1c:e5:
         86:c5:19:e7:e0:f1:40:55:9b:fb:d8:f6:ac:ae:fc:78:0d:a9:
         04:d7:77:3e:39:0d:9f:8b:33:6e:30:c9:ad:b1:b9:50:09:0c:
         79:c6:e0:e0:50:c2:cb:75:e8:6e:eb:91:b2:74:9f:66:ab:ae:
         84:48:b5:a5:e2:68:ea:0b:aa:8d:96:16:57:96:01:77:6c:26:
         7c:17:7e:af:31:45:ab:c4:8a:30:7f:36:c5:67:1b:f1:93:9e:
         b3:d3:bd:a6:a3:e5:d1:d3:57:19:8d:1d:f3:d8:44:06:8e:05:
         22:d2:93:6e:c7:1c:82:8b:da:e8:35:e2:05:ff:05:3d:2f:fe:
         7b:62:a5:2f:2d:08:28:bf:6a:84:92:a1:9b:24:9f:6a:cc:6b:
         67:43:c8:66:36:89:51:b1:41:f2:73:ba:75:6c:31:e9:a2:41:
         0a:3c:75:40:d6:9d:3e:8a:bd:e4:d8:9a:d6:09:7d:41:c1:93:
         98:02:9c:82:00:e7:14:e6:82:18:60:e4:7d:70:6b:d1:9b:1b:
         70:90:b4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:48:45 2025 by rpki-client