Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/207c5ba8-a6f4-38b5-b6a4-875e772f0e40.roa
File:                     207c5ba8-a6f4-38b5-b6a4-875e772f0e40.roa (raw, json)
Hash identifier:          IQuXqKHWY2AdB5hJR6UJjI5Tqh32J/C6Z3EvSRCIDik=
Subject key identifier:   15:4B:7C:30:6D:01:29:45:EE:71:F7:70:52:BE:7D:20:2C:31:ED:69
Certificate issuer:       /CN=c8efea04-a4c6-48d5-b955-4a5b86ccd300
Certificate serial:       010D0C9F4328584E210EEAA0A1280D8958A925C0
Authority key identifier: DB:31:77:14:CC:54:33:2B:42:56:25:1A:37:B2:65:2E:B4:1D:48:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/207c5ba8-a6f4-38b5-b6a4-875e772f0e40.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     199594
IP address blocks:        140.235.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/c8efea04-a4c6-48d5-b955-4a5b86ccd300.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/c8efea04-a4c6-48d5-b955-4a5b86ccd300.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0e:ea:a0:a1:28:0d:89:58:a9:25:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8efea04-a4c6-48d5-b955-4a5b86ccd300
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=ae03aede-9c65-4c5a-b754-0c1161602886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f6:03:57:9a:33:f1:90:a9:e8:bc:6a:2a:52:
                    9a:ae:6b:d0:50:81:23:96:cc:27:69:29:f1:4d:d5:
                    d5:91:5d:e2:86:f6:35:28:48:c1:b7:6b:23:09:88:
                    dd:77:a0:10:56:9a:47:19:90:37:e4:fc:2c:0b:7b:
                    f7:8d:86:75:90:3e:9f:65:e1:34:fd:d6:07:ca:46:
                    d7:cf:02:18:9d:f8:ef:d7:07:b5:a6:c2:c5:33:ec:
                    43:32:10:45:0f:fb:30:85:fe:02:2a:24:05:ec:04:
                    f8:ae:e7:af:09:e9:cd:30:89:3d:2e:c2:6b:b1:b6:
                    1e:45:02:d8:1b:5b:60:21:0d:c5:69:cd:96:0a:cd:
                    85:46:3b:d1:9f:59:38:c3:6c:2c:68:2d:23:32:dd:
                    d7:18:25:c4:a9:b6:0a:22:d5:f1:52:1c:58:2f:d8:
                    a8:83:c1:f4:ae:a9:be:34:56:48:0d:7a:ce:4d:24:
                    12:89:8c:37:5c:2b:ad:87:48:24:11:ae:02:c1:10:
                    26:93:fd:bd:f9:0a:c5:c8:2b:91:b3:1e:c2:c6:b0:
                    a2:4d:15:32:c0:75:3f:6c:35:dd:74:73:0f:99:cf:
                    55:f1:4c:98:11:51:d8:d8:2c:63:1b:30:04:e0:82:
                    f0:eb:f2:46:6f:f7:be:0b:6e:33:f0:4e:04:8b:65:
                    39:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:4B:7C:30:6D:01:29:45:EE:71:F7:70:52:BE:7D:20:2C:31:ED:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/207c5ba8-a6f4-38b5-b6a4-875e772f0e40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/c8efea04-a4c6-48d5-b955-4a5b86ccd300.crl

            X509v3 Authority Key Identifier:
                keyid:DB:31:77:14:CC:54:33:2B:42:56:25:1A:37:B2:65:2E:B4:1D:48:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:2f:25:8a:28:5b:75:e2:c8:d1:a4:d0:40:af:92:43:dc:02:
         c0:19:74:cc:4a:25:84:69:1d:5f:2d:ed:8f:f8:48:54:03:e2:
         44:17:44:eb:65:0f:41:c4:ca:1a:8d:f6:24:8f:f9:63:01:37:
         68:5c:3c:fb:0e:2a:31:4b:25:69:9f:45:02:1e:81:e3:e9:6b:
         fa:e7:0c:75:bb:4a:09:3c:24:bc:84:dd:b1:92:42:20:17:7b:
         4e:42:47:ba:ea:35:dc:ad:5d:69:78:2d:34:9f:3b:c1:23:a8:
         ea:c7:aa:a4:e7:9f:c1:58:c4:4d:60:80:00:7d:e3:92:92:43:
         d5:8f:7f:a2:c6:2a:51:fd:74:ae:31:df:d1:fc:98:48:16:b8:
         cb:9c:51:3b:be:ee:fa:01:b0:c5:65:e5:0f:40:be:51:fe:91:
         0e:8a:11:07:76:14:e4:c3:14:01:29:e9:81:97:e2:71:b6:4d:
         92:83:c4:5a:5e:17:c3:65:ff:05:c1:28:55:f5:e2:56:b6:57:
         12:63:34:1c:f5:70:4a:50:4f:25:c0:4a:76:f1:0d:e3:00:dc:
         dc:61:c7:65:aa:a1:3c:f3:56:73:8e:3a:5e:c2:e4:25:d3:50:
         81:70:5b:be:c9:cc:f7:cd:ae:3e:14:81:04:25:26:a8:02:55:
         31:7e:88:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:14:51 2026 by rpki-client