Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce/680ad6f3-7f36-3bb9-93b7-046bdf1ee048.roa
File:                     680ad6f3-7f36-3bb9-93b7-046bdf1ee048.roa (raw, json)
Hash identifier:          66TL29M79GVBgPolCaPESDUEtwL4xeFDGTTPHxJf4Pk=
Subject key identifier:   EB:FF:E8:31:EF:FB:A4:DA:9E:60:0A:BE:19:A8:99:12:3F:78:18:7C
Certificate issuer:       /CN=28a37b7d-0765-4e15-9558-c5b3800ca7ce
Certificate serial:       010D0C9F4328584CA5F71A1BC1ADB4232A183B00
Authority key identifier: 18:62:C4:BE:12:02:F0:CA:2E:56:56:18:FE:F9:14:0A:91:00:5F:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce/680ad6f3-7f36-3bb9-93b7-046bdf1ee048.roa
Signing time:             Mon 26 Jan 2026 02:00:32 +0000
ROA not before:           Mon 26 Jan 2026 02:00:32 +0000
ROA not after:            Sun 26 Apr 2026 01:00:32 +0000
asID:                     11700
IP address blocks:        199.71.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce/28a37b7d-0765-4e15-9558-c5b3800ca7ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce/28a37b7d-0765-4e15-9558-c5b3800ca7ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a5:f7:1a:1b:c1:ad:b4:23:2a:18:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28a37b7d-0765-4e15-9558-c5b3800ca7ce
        Validity
            Not Before: Jan 26 02:00:32 2026 GMT
            Not After : Apr 26 01:00:32 2026 GMT
        Subject: CN=e196c5a5-2c9e-47a8-9cd6-e4525696a54c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:bc:2f:65:82:01:10:43:95:df:0a:a5:29:fe:
                    51:37:29:e2:48:9c:f0:56:9e:f3:90:f7:40:93:01:
                    d9:5b:c3:8d:49:45:9f:58:74:b3:e2:ee:1e:b0:16:
                    3b:dc:db:30:41:2d:15:ad:c9:4e:c5:08:53:55:fe:
                    f9:c5:f4:3e:2a:92:64:d9:c7:78:06:64:26:33:81:
                    e4:56:58:76:e6:6b:97:5f:d5:11:c1:1e:22:47:44:
                    af:a5:df:8f:93:3b:5a:4d:00:24:6d:20:0e:3c:ec:
                    16:b8:e5:98:07:d2:77:a9:5b:3b:45:75:f8:21:6c:
                    cb:f3:21:51:10:4f:1e:0e:3d:e7:66:03:01:d7:26:
                    c1:e8:00:f7:04:98:5d:7e:03:eb:d3:e4:cb:d6:e8:
                    ff:4b:f5:bb:6c:42:e3:e4:8c:02:18:74:cd:a4:ea:
                    4b:8c:f0:c5:61:71:34:c7:79:3f:ff:2c:9d:bd:ca:
                    f7:4b:f7:22:d6:26:79:9c:83:45:e4:6c:c3:f9:cd:
                    30:35:5b:fa:5a:2f:ac:0d:94:66:c3:ad:c7:db:cc:
                    62:80:03:6b:ff:a0:d9:e7:1c:bf:77:4b:aa:76:43:
                    8e:84:92:5e:23:81:8f:3f:cd:c9:91:75:da:16:93:
                    0c:84:b9:eb:ce:fb:ca:ce:86:f3:8e:ce:b9:dc:8c:
                    6b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:FF:E8:31:EF:FB:A4:DA:9E:60:0A:BE:19:A8:99:12:3F:78:18:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce/680ad6f3-7f36-3bb9-93b7-046bdf1ee048.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce/28a37b7d-0765-4e15-9558-c5b3800ca7ce.crl

            X509v3 Authority Key Identifier:
                keyid:18:62:C4:BE:12:02:F0:CA:2E:56:56:18:FE:F9:14:0A:91:00:5F:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.71.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:5b:fd:59:25:68:40:ab:ca:4d:54:c6:1b:93:ed:6d:c1:94:
         8e:66:04:34:7b:da:48:a1:ae:08:87:3e:d8:21:1c:25:a7:bc:
         27:bb:f8:36:35:a9:71:94:2d:1c:93:78:be:c7:28:59:a8:27:
         b1:94:1c:d0:ac:b4:e6:59:d7:bd:1e:c4:4a:1c:ca:27:a5:f6:
         c4:b7:5e:ca:d5:48:11:41:7e:59:84:f3:e5:d7:dd:98:70:67:
         0d:c0:56:c5:18:06:c9:7e:f7:8d:86:3d:eb:40:cd:0b:af:1f:
         60:b8:02:8a:19:84:68:31:55:57:83:52:79:dc:fd:35:a5:36:
         09:b2:ae:af:73:9a:91:7a:0c:27:44:16:d1:78:ab:b6:7c:a3:
         aa:f9:04:dd:07:31:27:73:92:32:37:44:e2:12:e0:c5:c0:7c:
         6f:3f:58:47:78:4c:2a:42:d8:75:76:7c:3c:43:eb:eb:23:69:
         bd:8b:b1:89:31:df:a3:ca:c3:2f:7b:0b:88:7b:8e:8d:85:57:
         18:b8:2f:f9:24:6a:e4:85:7c:48:fe:3b:c4:cb:fb:f4:5f:68:
         b3:74:60:fe:bb:83:a1:07:2d:a7:f6:4a:32:fc:09:c2:10:c6:
         6f:c6:18:7f:6e:24:d3:c8:d5:c6:f1:95:2c:43:f1:90:6e:91:
         4f:6a:03:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:56:36 2026 by rpki-client