Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015/12ce9488-5f6c-3759-b31d-8e3c8d84b09f.roa
File:                     12ce9488-5f6c-3759-b31d-8e3c8d84b09f.roa (raw, json)
Hash identifier:          Kg5ccY3Xzt3gq6Zo8i4rXUfplSEt9qo8GaI7Ec7MryY=
Subject key identifier:   BF:50:BE:ED:98:60:E7:D0:80:DD:D3:6C:7D:4A:20:FA:D3:79:70:FC
Certificate issuer:       /CN=f229bba4-1d66-4a9f-8e40-159e94bdd015
Certificate serial:       010D0C9F4328584D4D5A50982A8EDA91F56B7330
Authority key identifier: 56:41:D8:48:AC:B9:29:79:0A:18:8C:CD:74:E2:54:9C:3D:F5:86:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015/12ce9488-5f6c-3759-b31d-8e3c8d84b09f.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     16509
IP address blocks:        206.198.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015/f229bba4-1d66-4a9f-8e40-159e94bdd015.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015/f229bba4-1d66-4a9f-8e40-159e94bdd015.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:50:98:2a:8e:da:91:f5:6b:73:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f229bba4-1d66-4a9f-8e40-159e94bdd015
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=0126ef3d-23d3-4235-a610-adb22d15c904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ac:e1:e6:1f:fd:97:42:93:ba:1c:19:ed:9e:
                    b6:f8:c2:36:49:09:e0:e0:3a:34:07:ee:fc:d3:26:
                    c7:07:be:f0:92:d6:fb:1f:ba:fe:b2:c3:f1:93:d3:
                    00:fb:62:c0:f2:1d:99:29:f7:fa:5c:c4:0a:26:e5:
                    d4:e9:ce:c9:0a:0c:55:6e:24:86:5c:2f:da:26:e1:
                    6d:ef:52:9d:8e:f7:96:08:a9:74:b8:6e:98:c7:c9:
                    dd:57:a0:1f:7e:e9:b1:77:8e:3b:63:d2:b8:ab:02:
                    04:98:10:81:8d:01:0b:e7:f3:b6:d2:f4:9f:b1:16:
                    a6:bf:6b:76:4d:15:4e:6a:bc:81:db:37:92:1e:17:
                    70:01:8e:ac:b4:94:59:af:c9:a0:01:1b:67:56:26:
                    38:d1:52:10:84:4c:96:e6:a2:b3:4f:99:cd:d8:cb:
                    fc:f3:f3:78:3e:88:91:b7:3e:ad:0b:b5:9c:09:fe:
                    58:ef:c8:62:6e:02:49:a1:53:a3:d8:e4:80:2d:3c:
                    1c:06:36:16:e6:74:40:2e:eb:43:2d:9c:98:03:b4:
                    9e:46:3a:3b:d7:80:6e:c2:cd:90:bc:5c:6a:03:15:
                    98:b1:7f:d1:5b:e0:8a:e3:f3:08:36:a3:44:0d:d7:
                    73:6d:45:b1:32:02:08:27:2c:b1:b5:4e:6a:af:9e:
                    53:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:50:BE:ED:98:60:E7:D0:80:DD:D3:6C:7D:4A:20:FA:D3:79:70:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015/12ce9488-5f6c-3759-b31d-8e3c8d84b09f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015/f229bba4-1d66-4a9f-8e40-159e94bdd015.crl

            X509v3 Authority Key Identifier:
                keyid:56:41:D8:48:AC:B9:29:79:0A:18:8C:CD:74:E2:54:9C:3D:F5:86:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.198.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:7c:6f:1c:13:be:62:80:62:15:e4:c9:b8:06:88:04:5c:38:
         de:53:94:dd:dc:a9:b0:88:1a:06:f8:4e:59:8c:f2:b8:00:b8:
         9c:1e:6d:2c:71:a0:14:9f:65:bb:73:79:7f:d2:a1:0c:84:f7:
         c6:79:bc:32:56:3a:4c:38:12:d3:a5:82:45:6f:97:d9:04:bb:
         1e:44:4b:23:41:84:8d:56:71:61:1a:fc:c6:c9:04:d2:ce:42:
         c3:fd:8e:ef:0f:e0:18:72:1c:9c:e7:14:a7:2b:43:f2:c7:9c:
         08:ba:0e:24:53:41:c6:32:a6:f5:c2:7a:fc:c4:fd:63:6b:7b:
         a1:6d:56:21:e4:a7:a2:35:72:ae:19:fe:de:96:7c:77:de:54:
         75:a5:27:85:7f:b9:1c:ef:60:6e:92:69:3c:cb:b7:63:81:a6:
         94:12:f5:b1:44:6a:01:67:f2:96:b0:ed:cb:20:dc:cf:28:e1:
         65:87:f0:d7:29:ea:69:b3:79:37:52:f8:f3:df:ad:f4:c4:ca:
         3e:2d:bd:fc:33:4d:9d:dc:01:b7:60:70:f6:b7:46:21:5d:ec:
         c1:e7:c1:c0:eb:a4:2b:16:4f:9b:aa:d5:8f:76:e3:27:2f:24:
         4e:51:68:84:74:ad:2e:57:99:bf:0b:47:97:17:96:52:71:e2:
         e9:b5:50:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:29:31 2026 by rpki-client