Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a/258c1b4d-b1b5-37e7-b00d-dd7b1eda6175.roa
File:                     258c1b4d-b1b5-37e7-b00d-dd7b1eda6175.roa (raw, json)
Hash identifier:          02CGhu3VAbmFRp+jwGM7JtIkjX+X3HEwKj23uIGKo9g=
Subject key identifier:   A5:9F:86:31:B9:D3:C3:D8:57:0E:55:26:43:B4:A3:23:02:37:B5:9A
Certificate issuer:       /CN=c6e1ed9d-801c-41b9-aa56-1da8ff79a65a
Certificate serial:       010D0C9F4328584D571FA22FA66B56454C7BB880
Authority key identifier: 96:95:C3:C2:BB:71:AF:28:9F:BE:56:B6:8A:7F:25:C5:47:CC:AD:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a/258c1b4d-b1b5-37e7-b00d-dd7b1eda6175.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     16509
IP address blocks:        64.112.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:a2:2f:a6:6b:56:45:4c:7b:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e1ed9d-801c-41b9-aa56-1da8ff79a65a
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=aec3d48a-b503-4646-811e-4f19c2ecec5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:94:11:a5:e7:f0:07:96:fd:79:3c:85:13:b0:
                    96:4f:7a:72:af:41:1d:63:da:9c:89:b6:9b:dd:fd:
                    6b:e1:83:be:45:ff:d5:9d:2c:1c:99:08:9a:e3:24:
                    c9:6b:74:59:7e:c9:cc:91:d8:b0:d6:3c:f1:a8:84:
                    51:b7:ec:9d:3c:95:50:dd:42:6f:df:2a:9e:37:9c:
                    12:90:ef:59:3b:12:aa:2b:b0:da:52:5f:0d:56:ba:
                    4d:67:61:e8:64:79:20:d3:d5:c3:31:da:a9:ac:12:
                    ba:ee:4d:ca:1a:86:a8:53:41:78:1d:10:64:1d:ae:
                    5f:3a:dc:73:96:1d:2b:6a:75:62:79:7c:0a:94:bc:
                    2a:9c:32:7b:a8:a3:a8:5c:db:5c:a2:6a:f7:44:82:
                    10:5c:ea:38:17:72:7a:f0:b6:15:e8:01:40:01:d4:
                    64:29:4e:6e:1a:84:88:d7:7d:ac:65:e6:08:ba:75:
                    18:11:b5:41:5c:67:01:37:d3:cf:75:e4:32:8d:5a:
                    86:3b:18:4e:5e:32:73:3a:2c:99:7f:d0:35:08:01:
                    5b:8a:b6:a3:34:6d:9f:d5:a5:21:c2:2d:4d:c3:3f:
                    92:f0:dc:88:14:bd:6e:10:73:2c:54:1d:7d:5e:e1:
                    17:2b:85:e5:37:3a:5f:9e:a4:ed:6d:95:94:db:50:
                    6b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:9F:86:31:B9:D3:C3:D8:57:0E:55:26:43:B4:A3:23:02:37:B5:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a/258c1b4d-b1b5-37e7-b00d-dd7b1eda6175.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a.crl

            X509v3 Authority Key Identifier:
                keyid:96:95:C3:C2:BB:71:AF:28:9F:BE:56:B6:8A:7F:25:C5:47:CC:AD:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:ba:65:c4:d9:dc:4b:01:54:d0:d3:20:e9:b6:23:7b:6e:c3:
         3d:e5:c0:ff:9e:69:6d:1f:6d:2e:72:61:1b:53:49:fc:a6:62:
         e1:06:b5:a1:62:71:25:da:0e:25:a2:b0:5f:02:07:95:74:2a:
         07:c4:b3:4e:b0:3c:77:a9:09:b4:99:a1:ca:64:6f:c9:14:e5:
         b8:94:4f:1b:3b:39:a3:33:b9:64:c7:5f:5e:44:af:31:31:ae:
         c7:a4:73:e5:d3:b6:72:fb:69:e9:c7:86:ea:90:3b:03:b4:ab:
         9a:15:d9:62:74:42:ce:ef:76:a8:f8:d8:91:f9:60:40:92:06:
         61:fc:56:cd:c6:b7:e0:e8:ea:4e:2e:ff:86:47:f7:5e:2d:b4:
         ea:f7:ab:ad:86:74:ea:2f:b2:2b:ff:1c:03:ce:3b:41:5e:04:
         d8:79:e1:ec:c6:d9:e6:1a:e6:62:82:80:6c:1c:30:71:9e:30:
         09:ca:c9:c7:68:cb:31:a8:67:2b:0c:50:47:28:ad:54:24:0a:
         96:a1:6d:96:b4:0a:72:d1:5d:2a:53:e8:f1:72:69:aa:cd:7c:
         c7:1b:9e:a9:24:90:fc:fb:9f:01:4b:30:94:e4:2d:57:ab:06:
         f4:12:c6:d4:30:49:b2:28:90:cc:ec:89:51:56:c3:9b:12:50:
         ff:1c:cd:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:27:11 2026 by rpki-client