Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/12fd8e38-37a8-3a26-ac0a-a0a95c8df899.roa
File:                     12fd8e38-37a8-3a26-ac0a-a0a95c8df899.roa (raw, json)
Hash identifier:          aYRVH9frOfHmeeof6T4eCPQuJ+sYJC77PWz4tJ8I8qQ=
Subject key identifier:   A5:47:FA:84:66:07:C7:96:EC:54:40:AF:C3:16:0B:A9:9B:55:3D:F5
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584EF01CA4637645B25271892B80
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/12fd8e38-37a8-3a26-ac0a-a0a95c8df899.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     13335
IP address blocks:        207.57.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:a4:63:76:45:b2:52:71:89:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=1d717309-347a-4840-aed0-a106dfdaf4be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:69:fc:c4:b4:08:10:e7:e0:05:ad:87:76:fd:
                    e1:92:1e:2b:5e:ff:4c:17:de:f8:dc:d5:97:78:3f:
                    42:1c:e8:7e:12:d5:53:fe:3a:1e:13:63:58:09:af:
                    19:7f:fe:01:49:6c:b3:2a:72:49:b0:7d:19:2a:80:
                    94:4e:6d:b7:23:a2:92:69:1a:10:98:9d:1d:cc:4a:
                    1e:0f:db:3a:e8:24:f2:b6:f4:c3:e4:16:2e:2a:ac:
                    31:2f:ef:52:a5:22:aa:f3:5d:96:bf:64:99:e7:0d:
                    2d:00:b5:a1:07:2e:e3:f3:86:e7:16:d5:2d:70:6e:
                    2a:14:03:25:04:2a:70:1e:89:5c:7a:a9:05:6d:9c:
                    7f:5a:24:f7:cc:2d:3b:26:5c:e8:35:a9:7b:27:29:
                    fd:a7:1c:54:7a:9d:a9:75:f4:7f:06:37:09:2b:bc:
                    16:58:f8:49:70:3e:75:15:de:e6:0e:ad:51:5a:74:
                    38:fd:65:71:b3:56:77:8c:68:1b:c8:ce:d2:04:11:
                    f2:95:af:00:c7:58:9e:1d:4c:e6:03:cd:a1:0b:6a:
                    92:21:1e:15:66:f2:7c:3c:94:7e:3a:31:37:56:f0:
                    00:ef:11:99:72:24:8f:d3:1b:99:d2:b9:87:d7:8e:
                    51:dd:25:66:48:ff:48:2d:29:82:39:c6:08:92:85:
                    70:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:47:FA:84:66:07:C7:96:EC:54:40:AF:C3:16:0B:A9:9B:55:3D:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/12fd8e38-37a8-3a26-ac0a-a0a95c8df899.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.57.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:6a:9d:3d:90:23:4b:02:f6:37:dc:f2:d2:6e:c8:22:6f:19:
         fe:75:72:03:34:b8:f2:e0:6e:3e:95:5c:73:32:7a:a6:50:c2:
         a7:d1:85:da:58:54:1c:b0:0a:8a:d1:13:9f:e6:44:c5:74:1d:
         a4:11:71:78:33:f6:1d:f5:e6:b6:49:ba:ed:41:30:38:25:ae:
         e5:87:54:32:57:82:a4:cb:fa:29:2a:e7:5c:4a:10:e5:67:aa:
         75:4b:0f:06:c1:80:2f:1f:26:80:ab:a8:ee:82:72:08:03:b8:
         0b:6c:c1:79:21:a1:fc:12:34:08:1f:f9:55:8d:d4:10:56:15:
         cd:0d:68:7b:60:fc:a2:41:85:73:f5:98:0a:33:31:2a:b7:a3:
         21:42:e0:6d:1d:8d:46:5d:2d:de:3c:55:56:6f:5c:0e:7a:c2:
         f6:64:6c:16:42:2c:e8:3e:0b:1d:72:76:69:57:c2:02:eb:8c:
         b8:56:9b:f5:59:d7:86:6a:7a:c9:1c:a9:ab:7a:af:27:01:a7:
         6c:e0:71:c3:c6:d1:88:8d:21:c5:4d:67:02:da:29:e3:18:76:
         d5:cb:4d:23:a1:f6:06:d8:55:31:0a:97:44:fd:9c:ab:fb:cd:
         1d:49:a7:08:c6:16:55:6d:ba:1e:4b:a1:d6:9e:4e:24:b4:9e:
         bf:5e:94:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:54:14 2026 by rpki-client