Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/1c7bc5a3-bd9e-3ccb-91ce-db6fe725f249.roa
File:                     1c7bc5a3-bd9e-3ccb-91ce-db6fe725f249.roa (raw, json)
Hash identifier:          UZoXwLRG6pKJWMsSvgKK8L26OWle9BC5tjyIBfcnS0o=
Subject key identifier:   A4:F8:56:C1:BA:E9:CC:3E:5C:53:A0:72:AF:8A:34:F4:06:94:DF:1B
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584D7B6A8EAF6F8F7F2C21D61500
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/1c7bc5a3-bd9e-3ccb-91ce-db6fe725f249.roa
Signing time:             Sun 12 Apr 2026 13:00:30 +0000
ROA not before:           Sun 12 Apr 2026 13:00:30 +0000
ROA not after:            Sat 11 Jul 2026 13:00:30 +0000
asID:                     11105
IP address blocks:        206.12.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7b:6a:8e:af:6f:8f:7f:2c:21:d6:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Apr 12 13:00:30 2026 GMT
            Not After : Jul 11 13:00:30 2026 GMT
        Subject: CN=7c3c7aea-1ea8-416f-b43b-f135ab2d00fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:19:8b:e9:f9:97:61:54:aa:22:4e:87:9a:8c:
                    47:77:ed:10:6a:2e:29:d4:1c:47:93:fa:e3:94:e1:
                    ee:19:c3:d2:cc:be:de:f3:a3:bb:da:d1:57:41:17:
                    de:6e:67:a2:a9:6e:91:71:e5:66:ec:90:90:db:86:
                    11:ed:7d:91:2c:16:a0:9b:ae:0c:0e:dc:a7:91:0c:
                    e0:a7:d7:38:d5:37:1b:27:e8:01:5f:be:29:b0:d9:
                    cb:5c:c2:12:95:96:d2:db:34:65:cf:d1:0d:a0:9c:
                    9e:00:47:a7:c4:ea:54:45:43:c5:c3:a7:04:6e:9d:
                    94:62:e9:20:4c:79:eb:58:55:41:06:5b:c3:a1:d6:
                    36:fb:ef:a2:68:f5:8c:07:4d:d7:58:7a:11:ba:fc:
                    b1:14:0e:21:28:5a:ff:db:24:4e:f8:47:ca:5c:fe:
                    38:ae:c1:55:76:46:45:20:84:4f:f3:a0:82:aa:c7:
                    31:4b:83:d4:10:73:15:67:61:3d:eb:f7:9f:cd:f3:
                    c8:da:8f:ee:f6:33:a8:ff:a4:f6:65:3f:fc:0d:89:
                    28:be:22:0d:af:cf:4d:ce:68:f5:fd:9d:c4:24:93:
                    dc:98:29:fc:90:da:c1:eb:0b:b8:6e:d1:36:d5:af:
                    d6:51:e1:de:bf:33:bd:ca:b0:df:4a:f8:f4:83:79:
                    64:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F8:56:C1:BA:E9:CC:3E:5C:53:A0:72:AF:8A:34:F4:06:94:DF:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/1c7bc5a3-bd9e-3ccb-91ce-db6fe725f249.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:e9:21:aa:e6:48:da:d0:26:cd:ca:98:f2:d4:6a:d6:bb:87:
         90:6b:6a:4f:ac:df:c5:74:fa:a3:4e:a5:16:e3:50:e9:55:58:
         a4:51:49:d0:cf:72:f0:9e:b9:f2:3b:2a:4d:62:41:ae:bc:9b:
         db:95:fe:83:24:81:3f:1e:7d:6d:04:ec:a8:02:d3:54:79:be:
         5f:3f:39:97:17:98:62:9f:56:67:36:48:d5:13:5d:85:50:32:
         7a:82:05:6d:4c:0f:74:07:50:6c:22:18:37:77:2d:71:35:b9:
         68:7c:0a:4c:57:6e:07:5f:6e:22:f3:38:32:61:07:4f:9b:8d:
         ae:13:ae:f1:52:74:32:82:04:af:7d:40:f2:86:e8:83:77:96:
         ea:33:4e:92:af:d3:04:97:b2:d2:4d:69:e7:35:3d:d1:13:1f:
         4c:f0:88:5b:c3:ed:9e:d4:13:be:a4:e0:14:ce:0e:58:ac:ae:
         3d:6c:36:10:2b:1a:a0:ca:66:04:31:39:62:5b:7d:fe:7c:dc:
         31:19:12:fd:8b:ea:97:bd:a4:94:13:01:cb:b5:24:fe:aa:55:
         eb:be:c1:a8:c5:32:c1:10:a3:6a:b1:0f:73:80:a4:91:d4:a4:
         85:6b:fd:6a:d6:87:c7:2c:35:38:dd:31:54:f4:78:ee:97:1a:
         80:53:d6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:03:36 2026 by rpki-client