Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/d8a29e38-cbb0-3d29-8075-dc1fa9167ee8.roa
File:                     d8a29e38-cbb0-3d29-8075-dc1fa9167ee8.roa (raw, json)
Hash identifier:          46SXd3cAdcYW/dj+Y39lC8C41Jx67Q4HASJAofsur6g=
Subject key identifier:   17:A0:09:67:4A:74:E4:FD:E5:80:EC:41:26:21:E2:BF:86:D7:B2:6B
Certificate issuer:       /CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
Certificate serial:       010D0C9F4328584E482488FE6F99D49238467F4E
Authority key identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/d8a29e38-cbb0-3d29-8075-dc1fa9167ee8.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     18914
IP address blocks:        206.168.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:88:fe:6f:99:d4:92:38:46:7f:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=533810c1-7dab-4623-a84b-48f2db3cbb4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c0:e4:d3:76:8d:dd:f3:56:71:54:03:9c:e0:
                    fd:cd:ac:ea:61:a9:08:5b:57:3c:80:73:3f:3d:56:
                    c3:d0:34:5d:83:5f:23:b0:be:0a:2d:c0:19:21:cb:
                    fa:4b:52:fc:05:bf:90:b4:7d:6c:3d:6a:78:b8:44:
                    a2:bf:1e:3a:ae:60:84:ca:7e:1c:0b:f2:55:8d:aa:
                    e1:de:01:49:7c:4a:e0:90:ab:63:61:70:65:c8:7a:
                    7a:6f:84:0d:63:f5:ef:4f:d5:f2:31:79:be:6b:cd:
                    4b:9e:1a:c1:40:0b:40:c5:2a:c4:b5:5f:ba:8d:38:
                    76:bb:9b:44:54:07:50:43:d1:ef:fb:9a:7f:66:b9:
                    2c:af:40:2d:3b:7a:f5:71:a6:ca:d7:d3:c7:80:71:
                    61:4b:82:7d:2d:11:23:c3:b9:a5:85:b8:00:73:fc:
                    76:38:30:f9:db:a3:a4:50:51:4a:7b:c8:97:1e:d3:
                    3d:fd:4b:06:b0:e9:c0:81:a8:f6:17:98:18:48:ce:
                    f3:26:ac:93:a2:66:b3:61:00:9e:3d:d0:ac:1e:37:
                    de:27:d0:e7:fb:4a:08:07:a6:ec:3d:17:8f:c4:05:
                    f3:ce:37:db:a9:02:eb:3e:08:ec:6b:1f:a3:c2:24:
                    0b:fd:f8:a8:43:85:bf:bb:fa:91:be:45:8b:98:df:
                    b2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A0:09:67:4A:74:E4:FD:E5:80:EC:41:26:21:E2:BF:86:D7:B2:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/d8a29e38-cbb0-3d29-8075-dc1fa9167ee8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl

            X509v3 Authority Key Identifier:
                keyid:C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:54:16:02:5a:1b:d1:1d:21:0f:64:82:59:c6:eb:fe:7c:34:
         13:14:8e:d2:5e:8e:6f:88:4c:41:ab:a1:8b:b9:59:c8:c8:16:
         66:86:62:90:3b:d7:18:60:cd:b6:50:b5:88:78:7e:e9:51:a6:
         1f:53:8d:d8:1e:17:fb:e9:bb:22:7b:b9:dd:d9:35:bf:33:3e:
         55:9a:60:86:20:30:bc:51:45:67:7d:0f:6c:80:d7:77:4f:1d:
         a1:5c:9e:2e:08:be:a5:3f:4c:46:5c:84:d3:3c:ff:e9:e0:e3:
         e4:d8:4e:c8:7f:e4:74:d4:6a:55:84:bf:8d:29:8d:45:5b:9e:
         66:e1:af:b6:4d:e2:d9:64:81:cc:f7:7a:9b:20:fa:7a:33:f7:
         fa:28:a6:5d:f1:4a:c9:76:e1:1d:c2:e4:5c:5b:a8:d2:14:27:
         33:fd:7a:e2:24:a8:42:3c:54:04:97:14:d9:a4:0f:c6:1d:73:
         fe:3b:85:7a:a6:54:44:96:9c:5a:29:f0:15:62:24:17:87:50:
         b3:61:9a:c4:7b:18:26:34:1a:d9:34:65:fb:fa:6a:54:98:61:
         b5:df:53:a2:04:94:aa:bd:6f:d3:48:63:2b:d5:c0:b3:09:d7:
         57:f3:c7:dc:b9:d9:48:00:ad:d8:40:b1:01:d9:78:b7:2b:56:
         03:0a:6b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:07:40 2026 by rpki-client