Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/12d8e2ee-af89-3b84-8705-f36f7f8c97b9.roa
File:                     12d8e2ee-af89-3b84-8705-f36f7f8c97b9.roa (raw, json)
Hash identifier:          RZODMl+XgJGOxDucvv8pxBZEgsRBdtLdd3QsqjaLMIU=
Subject key identifier:   81:34:B1:03:3D:E5:AC:91:D6:1A:E8:F8:CB:AE:B4:21:F6:1A:0D:24
Certificate issuer:       /CN=256d2a2e-9ac7-4d29-bd15-75874d49df66
Certificate serial:       010D0C9F4328584E0C1ECD49F9BA430E3195B2E0
Authority key identifier: E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/12d8e2ee-af89-3b84-8705-f36f7f8c97b9.roa
Signing time:             Wed 03 Jun 2026 09:00:13 +0000
ROA not before:           Wed 03 Jun 2026 09:00:13 +0000
ROA not after:            Tue 01 Sep 2026 09:00:13 +0000
asID:                     40805
IP address blocks:        208.96.176.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0c:1e:cd:49:f9:ba:43:0e:31:95:b2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=256d2a2e-9ac7-4d29-bd15-75874d49df66
        Validity
            Not Before: Jun  3 09:00:13 2026 GMT
            Not After : Sep  1 09:00:13 2026 GMT
        Subject: CN=655521f4-9643-4a0d-8ae6-dc8aa36ce935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:11:af:dc:0b:e6:64:0c:19:00:38:ba:32:25:
                    5a:8a:81:8d:08:5b:51:70:41:1d:54:6f:4e:a3:e9:
                    50:ca:88:a0:77:a1:bd:35:b3:f3:cf:7a:d4:0b:24:
                    e7:09:ac:cd:c4:59:67:fe:5b:f8:4a:1c:a9:75:5d:
                    94:80:15:7f:ff:ff:21:09:0c:26:94:52:b2:5c:5f:
                    70:af:7d:18:fa:23:51:d6:c3:0c:60:4f:b0:9c:d8:
                    cc:af:72:fa:94:84:10:d3:4f:03:5d:2e:24:11:8f:
                    72:02:2d:bd:9b:b2:0e:3b:31:49:78:29:8c:c3:57:
                    fa:19:27:3f:52:06:5a:13:09:4a:68:73:63:d1:ca:
                    81:ab:2c:c9:06:47:67:94:a0:af:a1:fd:44:71:4f:
                    64:89:60:39:43:73:7a:99:f3:83:05:fe:a2:a2:fd:
                    e8:8b:46:9f:3f:cc:0b:4f:b6:5b:00:d5:72:42:05:
                    7b:b2:9c:7e:80:48:9f:6c:55:5e:5b:e6:0c:0a:e8:
                    63:d1:12:2c:6b:aa:a9:e7:2d:f8:e4:b1:7d:17:c2:
                    05:79:82:59:ce:2a:14:27:09:03:a4:4c:c7:72:9a:
                    52:71:cf:f8:59:f8:23:53:0b:1d:86:fc:d8:9b:ef:
                    cf:93:0a:2d:9c:83:7d:bb:bb:09:8a:b0:83:7b:5d:
                    99:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:34:B1:03:3D:E5:AC:91:D6:1A:E8:F8:CB:AE:B4:21:F6:1A:0D:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/12d8e2ee-af89-3b84-8705-f36f7f8c97b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl

            X509v3 Authority Key Identifier:
                keyid:E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.96.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:97:bc:b1:bb:c2:82:14:a5:15:2e:4a:04:9a:5b:96:9e:29:
         43:9e:01:9b:9d:70:bb:84:ae:e3:be:f9:9a:82:cb:15:a5:17:
         9a:91:b0:5a:78:ef:a8:e1:76:ad:8b:e1:87:9b:d0:3c:1b:14:
         f0:a8:a7:c8:cb:71:e5:6e:dc:85:d0:6e:f8:43:b3:fb:fe:7d:
         a0:fb:1d:36:c5:75:c9:b5:5d:a2:52:d1:b9:f1:a6:1a:0f:1f:
         06:d1:67:5c:81:bc:36:a5:c5:4d:d3:9d:6c:d1:ec:59:e3:07:
         67:78:47:e5:de:07:bf:73:79:1a:4e:97:72:bd:1e:20:ad:7c:
         9b:fc:e9:06:7b:11:3f:ba:ed:53:5e:85:05:b2:24:36:d6:b3:
         66:8e:65:c1:7c:1c:04:a6:bd:1c:b4:e1:d3:07:37:b3:85:44:
         88:9b:b8:c2:96:1c:49:19:18:aa:84:6c:27:3a:44:91:19:85:
         ae:0f:eb:24:fe:07:d2:75:65:0a:dd:46:96:f8:ac:35:a5:0b:
         04:9f:4d:00:82:b3:22:ae:34:ac:25:34:34:05:80:ef:13:60:
         f0:2c:0c:55:6c:22:29:a9:db:6c:f5:0f:5d:12:63:b5:10:8c:
         93:3f:e9:7e:10:d4:a2:73:76:5e:1b:e7:8d:b4:e4:db:03:b6:
         20:3c:ad:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:01:48 2026 by rpki-client