Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/b8d23e08-eb0d-3e57-9ffc-aa63eadf01d5.roa
File:                     b8d23e08-eb0d-3e57-9ffc-aa63eadf01d5.roa (raw, json)
Hash identifier:          pgAMZPGebkG+KZlluNxhbbQDapQ6k5Vna5a5V7iGjuE=
Subject key identifier:   F2:0C:63:24:C0:22:5F:D2:57:15:07:D0:BE:73:6F:99:34:2E:A9:53
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F4328584E059BC0369B3FE353D0046280
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/b8d23e08-eb0d-3e57-9ffc-aa63eadf01d5.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     36492
IP address blocks:        172.102.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:c0:36:9b:3f:e3:53:d0:04:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=2afd6883-6e99-48d7-a634-ea48f3b31a0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:71:47:8e:16:ca:8c:8d:5a:82:94:84:05:5d:
                    0f:81:67:da:18:3c:c6:d2:70:74:a1:90:68:ca:7e:
                    10:b6:7c:fb:b6:36:1e:5e:27:6f:31:91:16:e1:1f:
                    03:48:52:4b:c3:c0:65:c6:06:bc:34:32:4f:0d:65:
                    ad:1c:c0:a7:d1:ba:5b:26:50:1c:4b:9a:a7:da:47:
                    71:6d:cb:2a:b6:d8:a3:1a:d6:cf:30:be:b4:98:80:
                    b1:36:c7:39:19:21:43:f4:f3:b8:49:f5:96:a0:35:
                    c2:f8:c4:52:36:de:2a:7c:fa:5f:6b:1b:23:96:19:
                    f4:67:c7:60:b5:14:af:d8:dd:52:ca:b0:e4:af:8e:
                    67:69:0e:ae:d9:60:31:09:b3:83:65:dd:6b:18:f2:
                    43:96:ca:34:1c:e4:ec:41:b8:52:10:80:9b:7e:53:
                    1f:cf:ac:75:b9:f3:ab:7d:50:7c:ba:2f:f3:46:23:
                    b8:19:c0:4f:db:86:00:3d:36:8c:19:f8:69:bb:49:
                    48:6c:fe:dd:b6:7d:95:a5:ad:32:91:54:8c:e7:63:
                    78:40:6f:44:b2:0f:c6:e5:8d:65:73:58:ba:72:56:
                    83:3d:67:ee:d7:ab:4e:57:ce:ab:7c:2a:7b:bf:c2:
                    f2:fe:2e:76:96:12:94:ab:8a:8d:d8:cc:fc:8b:c1:
                    cb:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:0C:63:24:C0:22:5F:D2:57:15:07:D0:BE:73:6F:99:34:2E:A9:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/b8d23e08-eb0d-3e57-9ffc-aa63eadf01d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.102.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:35:33:b2:4e:4c:9b:18:eb:f0:62:dd:b8:41:89:18:63:9c:
         81:ef:99:0f:b7:e6:07:7f:b2:42:ba:05:2f:8c:89:c0:2d:fe:
         7f:12:19:a6:d0:c1:8b:54:a0:b0:93:06:9f:5a:0e:1e:ea:e8:
         97:a3:f8:1a:2c:1d:47:91:fc:70:ce:82:91:88:71:2e:f4:5b:
         96:66:9a:d6:42:82:3b:e1:2c:4f:9f:15:03:6f:9d:7e:64:e6:
         e9:40:de:69:3a:94:31:e4:4a:ae:51:0f:c4:5c:5c:5d:91:20:
         6f:c2:52:f8:b7:f4:99:e4:0e:96:5d:87:52:ce:38:6d:10:7a:
         3e:a8:cf:0d:b5:c8:f9:36:a4:34:77:cc:fa:a2:59:fc:27:54:
         69:17:fb:af:49:32:93:01:7a:45:0c:1c:c0:f0:93:a4:f5:26:
         93:3f:5f:ff:0f:89:f8:34:04:2a:91:27:96:05:06:8e:66:4d:
         34:e1:25:87:5f:59:28:0d:b4:ef:9f:7f:0c:7f:5a:1c:db:74:
         24:3e:31:69:e3:fd:aa:36:44:28:b5:86:10:db:ec:50:f6:c1:
         93:7d:3a:ee:88:2d:96:f6:4b:81:6d:20:03:79:01:83:48:dc:
         b1:bd:46:6a:24:83:8a:aa:5e:9e:10:7a:8b:28:11:e3:ca:ff:
         9a:50:40:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:02:22 2026 by rpki-client