Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/e052215f-f71c-3bab-a7ce-03958d77d2ad.roa
File:                     e052215f-f71c-3bab-a7ce-03958d77d2ad.roa (raw, json)
Hash identifier:          grl3vEoEQxECuZIF8sxaLrfKJBhUCuf3s3rqS/by90o=
Subject key identifier:   AD:2E:0E:CA:FF:77:6C:3A:00:BE:08:56:68:38:8C:0D:B7:A9:3D:8D
Certificate issuer:       /CN=8cf12337-8eb8-43a2-a75e-2b01ceb95c39
Certificate serial:       010D0C9F4328584CD1B3E4FCFE5AA63A517EA8C0
Authority key identifier: 7C:DF:79:84:75:CE:4F:C7:0C:76:C4:5B:15:5E:91:D9:1C:9A:3E:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/e052215f-f71c-3bab-a7ce-03958d77d2ad.roa
Signing time:             Tue 10 Feb 2026 17:54:02 +0000
ROA not before:           Tue 10 Feb 2026 17:54:02 +0000
ROA not after:            Mon 11 May 2026 16:54:02 +0000
asID:                     14499
IP address blocks:        142.192.12.0/23 maxlen: 23
                          142.192.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d1:b3:e4:fc:fe:5a:a6:3a:51:7e:a8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cf12337-8eb8-43a2-a75e-2b01ceb95c39
        Validity
            Not Before: Feb 10 17:54:02 2026 GMT
            Not After : May 11 16:54:02 2026 GMT
        Subject: CN=1d499f18-e42c-4e6b-b7eb-79d8bb72ae6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6f:7c:14:49:38:52:e5:35:d2:fc:da:b4:b0:
                    8d:2d:01:ab:82:8f:50:0f:48:b9:86:b0:4a:50:61:
                    a3:18:7c:9b:35:c8:91:01:89:c1:3e:f7:2f:e2:4a:
                    40:5a:cc:90:5e:fe:89:3d:74:6d:e1:f0:45:23:67:
                    50:0d:54:14:77:42:9f:0a:db:23:96:f6:c9:c5:8b:
                    36:00:82:6d:eb:d4:ee:3b:5b:5b:4b:f3:69:8e:15:
                    49:f7:38:55:c7:a3:ec:ab:47:f1:dc:e4:dd:45:0e:
                    ae:3b:4e:2a:aa:00:35:a1:74:2a:cd:2e:31:93:80:
                    bc:61:cf:f3:01:d2:f6:7e:c9:97:88:0a:4e:81:8b:
                    90:4a:be:cb:57:12:d8:c3:cd:b6:96:d2:f7:b0:cd:
                    00:3e:41:9c:76:78:89:87:ca:16:2c:26:d3:d4:23:
                    07:c2:4e:aa:eb:7d:72:44:6a:7d:23:62:b8:00:69:
                    62:8f:14:a3:3d:60:96:78:63:50:6c:e8:e2:eb:fc:
                    31:96:ed:59:b0:34:a7:1e:ac:29:9c:c7:33:ac:3e:
                    73:f3:eb:25:e1:43:ce:3c:43:8b:f7:39:77:fe:60:
                    c1:2f:85:5a:19:dd:68:30:10:f4:8c:e5:ef:9b:cf:
                    57:ef:2d:e4:cb:04:d1:9b:00:46:a1:7a:9b:45:ab:
                    8b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:2E:0E:CA:FF:77:6C:3A:00:BE:08:56:68:38:8C:0D:B7:A9:3D:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/e052215f-f71c-3bab-a7ce-03958d77d2ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.crl

            X509v3 Authority Key Identifier:
                keyid:7C:DF:79:84:75:CE:4F:C7:0C:76:C4:5B:15:5E:91:D9:1C:9A:3E:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.192.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:7a:43:08:ec:60:db:01:e5:bb:a7:7e:aa:e0:6d:2e:7b:8b:
         39:74:d3:bc:d2:c3:fe:a4:b2:b4:fe:49:14:f1:cc:8a:df:59:
         c0:dc:94:df:51:fc:cb:bc:ec:f4:12:51:a1:7e:23:98:5f:02:
         61:ef:94:fa:ab:46:11:f6:5a:f8:89:39:a4:d0:b8:ab:f8:f8:
         d9:76:36:01:2e:43:e9:df:f1:25:ea:bf:3c:05:10:c7:67:61:
         47:f3:d7:7d:73:f4:c3:08:99:3e:ae:57:f4:73:d9:2b:96:fe:
         9d:68:31:bd:1d:2e:02:13:5a:e3:bf:71:d7:df:fa:08:1b:06:
         a3:98:a6:27:c7:f3:da:8a:b3:cd:31:a7:34:11:5f:34:95:27:
         1e:1a:9f:d0:29:5f:45:45:e8:6a:b8:18:48:9f:7b:62:e0:ff:
         d9:73:30:52:3b:17:07:39:e3:50:83:e3:c9:0f:51:b9:92:ee:
         9c:95:a3:ff:53:91:c1:93:37:f3:90:4c:a5:83:0a:72:db:b5:
         d0:59:31:ed:92:15:f1:85:b9:8e:bc:3b:e1:cc:35:4e:88:fe:
         13:47:8b:39:c6:3c:1a:59:b7:89:80:27:25:0f:d0:1f:68:72:
         1d:6b:53:f6:26:1f:2c:e7:ad:73:c2:e6:fc:bc:c5:08:ea:30:
         42:00:95:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:53:43 2026 by rpki-client