Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/98d059c1-45b2-3002-92ee-3ea7a3ef58e9.roa
File:                     98d059c1-45b2-3002-92ee-3ea7a3ef58e9.roa (raw, json)
Hash identifier:          /Nkxl3xTwW6ViAFUBaWIScALbj/3fXo59M1l73B+udc=
Subject key identifier:   55:E6:C3:0E:58:F2:E3:FC:A8:6F:89:DE:F2:CF:EB:77:EF:BD:D1:93
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D47C4DB5DD42540F841529B00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/98d059c1-45b2-3002-92ee-3ea7a3ef58e9.roa
Signing time:             Wed 25 Mar 2026 01:00:32 +0000
ROA not before:           Wed 25 Mar 2026 01:00:32 +0000
ROA not after:            Tue 23 Jun 2026 01:00:32 +0000
asID:                     5065
IP address blocks:        216.132.14.0/24 maxlen: 24
                          216.132.114.0/24 maxlen: 24
                          216.132.115.0/24 maxlen: 24
                          216.132.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:47:c4:db:5d:d4:25:40:f8:41:52:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Mar 25 01:00:32 2026 GMT
            Not After : Jun 23 01:00:32 2026 GMT
        Subject: CN=caea9cc0-19fb-457d-8041-202f59c5fe43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:23:64:9a:41:53:cd:8b:4c:97:f1:82:47:78:
                    33:c6:1a:80:cd:1f:df:14:bd:50:04:3c:f2:e7:e8:
                    18:01:60:74:1e:87:b9:97:99:cf:2b:e1:fc:81:c3:
                    1e:d5:b4:16:48:44:00:07:44:b9:b0:bc:f4:5c:8d:
                    5e:1b:f1:3f:3c:70:bf:cd:d1:71:96:fa:c3:5a:6c:
                    1d:4a:21:f2:51:0c:bc:03:9c:f3:24:85:f9:ac:04:
                    32:66:79:eb:29:b7:88:1b:3c:c0:41:6c:1d:db:b2:
                    15:46:15:99:de:ed:ef:ff:92:21:ed:6d:10:17:e4:
                    ba:a2:5f:bf:84:a7:59:4d:ec:bf:a7:61:b2:1c:8c:
                    47:82:3e:1a:ac:35:41:c9:51:be:11:9e:cf:3f:64:
                    ed:91:18:ca:c4:bc:de:e1:94:2d:2b:f8:53:c4:21:
                    75:e6:5c:4f:7c:d1:62:dd:07:e8:46:d1:7c:13:c8:
                    33:fd:37:7f:35:5d:4a:2c:a4:8e:28:46:59:c5:2f:
                    55:85:cd:93:89:66:9b:7f:4d:bf:97:d5:62:9c:42:
                    50:5d:a2:0f:b9:3f:1f:e0:e5:b9:2d:c7:40:dd:c1:
                    3c:fb:0e:36:4d:dc:9a:4d:5d:9e:bf:2b:f7:93:ae:
                    9f:94:85:8b:9a:b1:c1:c1:06:c1:35:b7:a8:09:0a:
                    66:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E6:C3:0E:58:F2:E3:FC:A8:6F:89:DE:F2:CF:EB:77:EF:BD:D1:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/98d059c1-45b2-3002-92ee-3ea7a3ef58e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.132.14.0/24
                  216.132.114.0/23
                  216.132.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:68:25:ff:6a:ac:70:27:4a:3f:6d:57:27:89:34:8d:49:64:
         f2:0b:96:51:75:3d:bc:36:cd:fe:a4:bb:59:e7:1c:27:d0:9a:
         82:ce:5e:06:95:15:8b:60:64:82:28:bf:87:c4:9f:de:7a:a8:
         83:6e:52:48:21:34:11:bb:a9:1a:f3:ce:bf:0e:35:0a:ba:2c:
         55:5c:6f:3d:99:1d:55:eb:3f:40:a1:c0:d5:89:4e:51:6b:3f:
         40:32:74:af:0c:10:c0:1d:ab:dd:89:2c:eb:65:2b:f6:05:11:
         93:64:8d:a1:5e:b8:77:8c:65:e4:a4:53:12:3e:f0:eb:d2:0e:
         13:54:cd:75:c8:84:e5:8a:80:de:c2:e1:10:25:f3:51:dd:1b:
         86:5d:00:bb:6e:c1:ae:9c:e9:ef:14:de:92:6b:dc:e0:4e:55:
         95:23:b5:a7:b3:15:bb:87:bb:83:17:ff:28:8a:34:0f:00:09:
         9e:38:65:90:b8:14:04:1b:ad:19:58:cd:d2:df:5b:c6:b7:67:
         a4:cb:2b:af:df:21:bf:fc:8a:fc:48:1e:26:8f:60:72:95:9d:
         9c:a4:ff:30:89:c0:bb:39:91:50:bc:a5:5b:50:73:a0:43:b3:
         6e:f0:74:79:26:5a:cd:26:cb:75:24:6e:ba:28:60:d3:f7:29:
         1d:29:d4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:54:08 2026 by rpki-client