Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec/e8b6acee-814e-3fb7-815b-3025078610e3.roa
File:                     e8b6acee-814e-3fb7-815b-3025078610e3.roa (raw, json)
Hash identifier:          j/caSf3/rIjFbWzkGsNIN5wyeF1jT90m9cGUNnxc+7A=
Subject key identifier:   1A:D3:2E:AE:5E:0B:DD:C3:E4:6B:5B:F0:91:4B:C7:AA:E4:0E:9B:44
Certificate issuer:       /CN=b7364c96-947b-4136-b697-c8cff591a8ec
Certificate serial:       010D0C9F4328584D9E5009ABBD00E457B65E1080
Authority key identifier: 95:66:5C:73:34:CD:29:7F:6A:F8:D1:F1:9C:1F:D6:C2:43:6D:35:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec/e8b6acee-814e-3fb7-815b-3025078610e3.roa
Signing time:             Sat 25 Apr 2026 01:00:24 +0000
ROA not before:           Sat 25 Apr 2026 01:00:24 +0000
ROA not after:            Fri 24 Jul 2026 01:00:24 +0000
asID:                     16844
IP address blocks:        198.190.14.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec/b7364c96-947b-4136-b697-c8cff591a8ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec/b7364c96-947b-4136-b697-c8cff591a8ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:50:09:ab:bd:00:e4:57:b6:5e:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7364c96-947b-4136-b697-c8cff591a8ec
        Validity
            Not Before: Apr 25 01:00:24 2026 GMT
            Not After : Jul 24 01:00:24 2026 GMT
        Subject: CN=dcca8522-1b9f-4beb-be38-b21190f48f42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:08:a2:e1:db:c2:38:35:4f:cc:16:39:38:ea:
                    fa:c1:8d:dc:b7:60:35:66:53:0b:bb:4c:91:63:73:
                    d0:cf:b6:74:05:e5:4a:27:61:ec:43:d4:83:20:ef:
                    f2:cf:37:ce:55:ae:ed:26:5c:d5:77:23:83:03:dc:
                    a0:04:f2:a0:43:46:a2:dd:2f:58:44:bd:c4:7c:a7:
                    80:f2:fc:38:64:b3:30:54:b3:8e:1e:8f:e7:93:c0:
                    1d:a4:f6:0e:d0:40:c9:50:13:5d:ef:7c:33:e2:d3:
                    5e:63:82:27:1e:f7:67:6d:77:49:80:d6:e4:d8:fa:
                    ca:78:74:6c:ac:2c:c3:02:1b:c1:e0:e2:c8:4e:a9:
                    6d:32:de:29:4b:4c:57:97:aa:1d:68:11:5d:fd:66:
                    05:fe:37:71:95:f0:32:3d:f6:17:31:ba:d8:e2:e8:
                    83:47:af:89:7f:5e:1d:e7:0b:88:ec:9f:9f:32:0b:
                    c7:40:51:82:35:b9:c8:ea:26:df:d2:ff:40:b8:59:
                    63:43:b6:ab:c1:91:78:15:9c:98:b5:70:0b:85:e8:
                    42:45:df:de:ba:b0:cc:aa:b5:04:e0:46:0d:d0:a9:
                    40:ff:3f:9e:27:92:a3:c6:60:65:21:76:5c:be:0f:
                    fd:fe:58:e9:82:59:85:df:a1:5d:29:5e:f3:8c:15:
                    e8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:D3:2E:AE:5E:0B:DD:C3:E4:6B:5B:F0:91:4B:C7:AA:E4:0E:9B:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec/e8b6acee-814e-3fb7-815b-3025078610e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec/b7364c96-947b-4136-b697-c8cff591a8ec.crl

            X509v3 Authority Key Identifier:
                keyid:95:66:5C:73:34:CD:29:7F:6A:F8:D1:F1:9C:1F:D6:C2:43:6D:35:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.190.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:31:98:57:43:24:86:cf:66:3e:b2:68:70:4d:33:fc:5b:29:
         2b:9a:5a:b0:d4:38:6a:00:b1:fd:15:ab:27:d9:05:58:07:08:
         47:2b:9d:01:9b:69:01:b6:ba:f6:5b:b5:3d:8f:cf:e2:0b:57:
         bd:9c:74:66:21:c4:60:05:ba:d4:61:25:ce:64:65:2a:93:a4:
         62:e7:9f:d2:5a:6f:93:e6:8d:f6:61:48:5e:d4:5a:21:65:b2:
         1f:12:62:ef:fb:bd:ee:63:bb:b2:ea:1d:d3:c8:51:ad:db:45:
         ec:5f:f5:05:da:e0:2e:cd:21:cd:a8:6a:8b:10:c6:59:a5:96:
         4e:cf:20:83:07:2b:ce:d4:0d:0d:6d:4a:b0:54:75:f6:77:6d:
         82:90:e7:f9:6b:d8:ee:82:af:bd:3b:82:d6:f5:db:12:c3:e7:
         08:68:aa:45:de:9e:ac:f2:22:07:3d:70:f6:5c:23:26:31:16:
         a9:fe:cd:e9:e9:e3:74:6c:be:e8:f8:a3:d8:a1:86:40:e2:8f:
         68:83:d1:1f:98:b3:a0:fb:ef:ef:81:58:bf:f6:a0:13:88:ae:
         fc:c6:75:0b:4a:bc:88:0f:9b:cd:54:b3:6b:26:6b:4d:2f:da:
         be:bc:57:2d:90:a9:3a:8f:0a:07:ea:86:24:a8:2c:90:94:61:
         29:ab:46:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:35:57 2026 by rpki-client