Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/aab78b11-6bc5-30dc-bb88-ea89a8630abe.roa
File:                     aab78b11-6bc5-30dc-bb88-ea89a8630abe.roa (raw, json)
Hash identifier:          ZFg3J5ILmRdXSXOdga8HBnava/QNPx+HVELBkeIBEhg=
Subject key identifier:   63:72:2F:73:D0:78:EF:95:EE:44:EB:CD:60:C7:28:2D:9C:A9:58:05
Certificate issuer:       /CN=7019d1c7-b32a-4a65-a135-234cde3c7680
Certificate serial:       010D0C9F4328584D5F7FAB1495E0634212495D20
Authority key identifier: 22:0D:F1:6D:99:E3:03:0F:29:82:88:A7:43:95:89:6B:00:CC:4D:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/aab78b11-6bc5-30dc-bb88-ea89a8630abe.roa
Signing time:             Thu 02 Apr 2026 13:00:30 +0000
ROA not before:           Thu 02 Apr 2026 13:00:30 +0000
ROA not after:            Wed 01 Jul 2026 13:00:30 +0000
asID:                     8075
IP address blocks:        104.193.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/7019d1c7-b32a-4a65-a135-234cde3c7680.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/7019d1c7-b32a-4a65-a135-234cde3c7680.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5f:7f:ab:14:95:e0:63:42:12:49:5d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7019d1c7-b32a-4a65-a135-234cde3c7680
        Validity
            Not Before: Apr  2 13:00:30 2026 GMT
            Not After : Jul  1 13:00:30 2026 GMT
        Subject: CN=3f6d1b9e-e9ee-4a35-ab9e-62efd260276d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:98:ea:b1:63:dc:b7:74:b1:bd:b8:83:04:b0:
                    20:06:77:ad:14:e2:99:2f:cd:2f:13:b9:32:48:bc:
                    c3:db:38:cb:13:6a:45:50:dd:dc:9a:c2:a0:3c:8f:
                    78:74:53:b2:4d:30:4e:3e:68:44:c8:77:6c:97:eb:
                    18:97:f9:4f:6c:c4:ea:fc:fc:09:ed:61:4a:b4:65:
                    0c:1d:4f:e1:ff:b1:2a:9e:46:91:8d:34:37:cd:58:
                    21:8c:34:e4:22:91:f1:14:02:65:27:fe:24:77:8a:
                    29:70:0c:3f:1c:fb:94:0f:51:b9:68:aa:1d:a4:d6:
                    5f:e3:be:22:d2:62:a5:7d:14:72:8f:e6:da:6e:69:
                    63:22:5b:0e:c4:12:43:a6:a9:c2:4a:84:3a:06:16:
                    f7:62:dd:74:0d:dc:ef:a4:df:31:d8:4c:2c:ef:62:
                    9f:73:a2:5b:96:4d:4a:af:ab:21:4c:ca:3c:ce:70:
                    24:cf:2a:f1:b8:db:26:d6:55:89:a1:c3:76:c1:36:
                    59:7c:ad:74:5b:31:48:71:4d:db:48:90:63:b7:87:
                    23:b7:7b:ae:d8:2e:13:98:c9:8f:1e:5c:26:44:7a:
                    87:e2:f9:98:83:20:ad:55:92:fe:5e:85:32:e8:7b:
                    4b:c6:19:d2:47:61:f1:e1:5b:83:c6:be:ee:0d:ce:
                    ec:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:72:2F:73:D0:78:EF:95:EE:44:EB:CD:60:C7:28:2D:9C:A9:58:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/aab78b11-6bc5-30dc-bb88-ea89a8630abe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/7019d1c7-b32a-4a65-a135-234cde3c7680.crl

            X509v3 Authority Key Identifier:
                keyid:22:0D:F1:6D:99:E3:03:0F:29:82:88:A7:43:95:89:6B:00:CC:4D:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:65:65:99:84:3d:4a:b1:11:25:a8:ac:1b:86:9a:cf:98:a1:
         23:ec:2c:15:c9:47:7c:5d:01:a4:9c:ad:24:5f:89:2a:1a:5f:
         17:8e:32:7f:25:a2:c1:ee:48:0b:0a:06:e8:b5:54:55:ff:62:
         6a:0a:49:8d:2a:38:a0:ac:36:c3:61:99:ea:c9:c7:db:b2:21:
         ae:58:03:1c:4d:dd:ff:32:45:cf:70:15:ca:bb:21:06:b9:ff:
         1a:0c:60:27:82:f1:ec:3b:61:9b:97:c0:cb:7f:08:3d:c5:f1:
         41:9c:cb:b1:7b:ca:f1:12:9e:1d:aa:30:7c:92:ce:b2:d4:4c:
         82:ce:50:4e:1d:f5:e2:41:09:c6:35:81:61:b9:61:b3:e2:d6:
         16:fe:7f:ba:ae:a5:f1:4c:49:f6:2a:35:c8:53:57:a3:7b:4e:
         f7:65:e1:ed:f9:84:18:89:d9:09:13:7f:87:b1:4f:0f:f6:eb:
         8f:f6:6f:29:e2:f8:4a:9c:32:e8:db:a2:5f:00:c5:6e:59:c2:
         9b:6d:6e:ba:a3:a0:4f:41:86:3a:86:0d:b4:bf:16:d6:93:bb:
         e9:83:95:bb:96:21:37:ab:b5:6d:3c:de:4e:fa:34:b9:c6:ec:
         44:2c:20:88:9a:68:a6:24:27:e6:f4:b6:a7:52:9d:8f:ea:4f:
         02:44:1a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:18:37 2026 by rpki-client