Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/eba41c2b-e525-336c-96e4-eac49ea4d832.roa
File:                     eba41c2b-e525-336c-96e4-eac49ea4d832.roa (raw, json)
Hash identifier:          Mq/U3Gp4QxV4pQg7tFnePUmLO3wq0FBQGxPzMzscX4U=
Subject key identifier:   1A:05:2A:48:69:56:6C:E7:96:A9:06:8D:B8:FF:18:31:28:7B:F6:56
Certificate issuer:       /CN=ac717083-6970-4d32-8573-0bfa89700c9e
Certificate serial:       010D0C9F4328584D86955A3498126EFEB198A660
Authority key identifier: 20:5F:B3:EA:78:E5:E9:47:0A:C5:56:AE:EA:F5:6D:E0:3D:9E:FD:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/eba41c2b-e525-336c-96e4-eac49ea4d832.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     802
IP address blocks:        199.212.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/ac717083-6970-4d32-8573-0bfa89700c9e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/ac717083-6970-4d32-8573-0bfa89700c9e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:5a:34:98:12:6e:fe:b1:98:a6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac717083-6970-4d32-8573-0bfa89700c9e
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=afdad083-afe9-49f3-a531-f62db217115e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a3:2a:5e:ab:22:4c:7d:9b:b3:53:8b:c7:36:
                    de:71:52:33:df:67:b0:d6:98:cb:60:c4:8d:94:29:
                    35:0a:97:12:7d:ff:c8:ae:18:3d:b5:2b:11:b9:25:
                    92:b4:31:a2:54:c4:b6:4c:0e:86:f9:f4:ae:e1:4c:
                    fc:06:d7:35:e7:7c:c1:03:a8:54:38:87:e2:f5:de:
                    de:95:0a:da:cb:9b:54:33:ac:72:f1:79:dd:5e:97:
                    1c:8b:82:ab:8c:3c:c0:5a:ee:ce:b0:72:a1:62:f0:
                    cc:2b:5b:de:12:20:17:45:fa:06:ac:17:22:ea:a4:
                    cc:46:26:33:ee:10:99:34:17:14:77:21:df:7c:04:
                    c3:e2:95:b2:42:c0:e3:03:d5:aa:66:17:12:69:f9:
                    e6:75:ef:3e:ca:99:51:49:95:a8:6b:3f:20:a9:88:
                    ce:39:94:3c:d7:79:9e:5c:68:c9:f1:db:25:97:b2:
                    2f:bf:7a:f7:3d:55:bf:90:92:c8:15:20:a8:3f:0d:
                    dd:84:21:08:2c:97:be:73:c4:4a:57:9c:71:f2:d6:
                    a5:78:cf:22:83:1a:b2:da:a8:57:aa:c1:43:6c:c4:
                    dc:12:ea:16:d7:ba:41:40:37:35:89:c7:dc:9e:59:
                    14:c7:f2:66:25:04:9c:80:12:c5:ee:06:57:b1:86:
                    af:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:05:2A:48:69:56:6C:E7:96:A9:06:8D:B8:FF:18:31:28:7B:F6:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/eba41c2b-e525-336c-96e4-eac49ea4d832.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/ac717083-6970-4d32-8573-0bfa89700c9e.crl

            X509v3 Authority Key Identifier:
                keyid:20:5F:B3:EA:78:E5:E9:47:0A:C5:56:AE:EA:F5:6D:E0:3D:9E:FD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.212.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:78:9f:f7:2f:9b:b1:cd:48:ce:53:fa:55:5e:e2:ce:1a:41:
         21:3f:79:71:86:1d:0a:01:36:9c:71:84:58:6d:30:dd:b5:2f:
         7d:f4:bf:e0:5d:93:05:d2:c5:15:28:5e:8b:b5:0c:a0:ad:5d:
         5a:bd:04:41:15:40:98:70:29:78:ac:69:32:bc:b0:ea:29:96:
         99:4d:c4:0b:2c:d2:db:77:5a:ed:1a:1a:f0:18:21:4e:f1:d5:
         10:48:1b:1f:ac:d6:95:85:46:74:0f:2e:fb:6f:25:a9:07:33:
         a7:d7:22:71:af:e4:18:31:12:42:a6:19:ad:15:26:0e:8c:fc:
         2d:65:a3:ef:65:ea:c0:1a:0e:34:83:9b:7b:71:77:53:fe:bf:
         c2:b1:d1:bd:a2:9b:fb:20:d5:5a:18:76:19:09:66:e0:2e:fa:
         d1:5f:ff:6f:80:7f:c1:6c:f1:4a:0a:53:d3:9c:a7:e5:e4:e7:
         26:e6:47:4d:fa:41:5e:b8:43:65:f2:43:7e:c0:97:18:57:f8:
         d4:2a:e8:d6:ed:5f:b0:a7:2b:40:3a:1a:bc:bd:91:a3:04:38:
         5c:de:ac:52:dd:2d:bb:43:12:36:20:e9:79:ec:e0:20:d4:3b:
         99:49:10:86:53:8b:2e:68:4f:4b:71:83:cf:1b:05:f7:80:18:
         9f:b9:c0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 09:30:35 2026 by rpki-client