Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1bb0f6c9-d48c-352e-8365-579ab0d5cb60.roa
File:                     1bb0f6c9-d48c-352e-8365-579ab0d5cb60.roa (raw, json)
Hash identifier:          Xy8dIYAFVWycqj8sxtoV3sS1Lxmzlkr2rcdyfjUJfMY=
Subject key identifier:   D3:67:74:AE:47:57:54:A0:04:6A:B8:41:67:28:ED:0A:36:99:85:35
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F06725AB41E9F98B01AA7C740
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1bb0f6c9-d48c-352e-8365-579ab0d5cb60.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     22394
IP address blocks:        96.12.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:5a:b4:1e:9f:98:b0:1a:a7:c7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=c4dae568-28d0-4460-8a36-534d978109d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:28:79:39:3b:fc:07:6b:6e:44:47:78:21:af:
                    79:30:bc:71:46:5b:3f:b7:c7:57:88:30:5d:38:61:
                    73:c4:29:a5:ba:7a:f5:77:7b:90:06:20:72:dd:38:
                    75:40:3d:02:aa:6c:08:79:b7:84:c3:55:ca:a6:48:
                    06:e2:a1:b0:de:5c:4e:de:5f:3d:5f:36:92:52:eb:
                    88:89:ee:a2:17:3e:51:02:2b:5f:a9:5f:78:b0:6f:
                    07:5a:5e:a5:dc:ea:ed:6b:89:d0:8b:78:8c:de:fd:
                    e1:58:3d:5d:5f:60:e9:33:4c:24:bc:5a:ac:aa:dc:
                    1e:77:60:6b:7f:2a:6d:bc:34:ba:b2:39:fb:e4:ff:
                    1c:e3:9f:a4:1a:73:8c:d3:50:f8:c8:2d:6e:0b:2d:
                    6e:4e:42:e7:c6:24:01:54:60:dc:c1:00:2b:e5:46:
                    e2:99:89:95:da:00:b6:96:3f:a7:75:11:17:01:f7:
                    3d:ca:8b:d6:59:a5:45:23:1e:80:e0:79:8f:9e:44:
                    a0:c8:68:c2:02:57:f1:d6:2c:bd:10:64:16:95:58:
                    73:4d:55:79:98:92:a8:a4:8f:22:1f:b2:81:a1:04:
                    c5:58:b2:fa:70:9b:4b:95:dc:c6:fe:a0:fd:59:97:
                    ad:7c:12:ff:7d:83:7e:d1:be:a0:c8:88:d9:12:49:
                    75:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:67:74:AE:47:57:54:A0:04:6A:B8:41:67:28:ED:0A:36:99:85:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1bb0f6c9-d48c-352e-8365-579ab0d5cb60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.12.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:9b:3a:2a:0b:d1:7c:ef:f1:ca:39:20:08:2f:33:b6:eb:0a:
         70:0a:03:51:1f:6d:63:5a:dc:4e:87:e8:3e:aa:9f:39:fd:ed:
         b4:bf:7d:b6:a1:fb:73:ff:64:b7:23:1c:8e:5a:d7:66:fe:8f:
         c7:d2:7b:f5:46:9d:03:cf:c4:64:8a:36:ed:63:84:b1:03:1e:
         8f:23:d8:fd:48:cb:7c:f4:30:cb:71:cf:f1:b8:09:eb:c9:9d:
         5c:4d:ec:db:d4:8b:10:69:c7:d7:35:15:01:ea:55:c5:f5:e6:
         eb:b1:8a:8d:57:3a:95:b4:f6:00:00:b5:80:07:15:c4:d5:7f:
         1c:9a:38:37:f7:ea:c7:0c:d7:31:91:5b:b0:dc:4b:b0:cb:0f:
         e6:b9:2b:95:6c:fd:0f:39:a9:96:6b:bc:99:27:22:42:cb:ae:
         36:b8:42:af:56:c7:20:4f:0d:11:d0:b0:e2:3b:73:74:b2:eb:
         2f:31:3e:0d:88:0f:5c:a7:19:c7:01:60:0a:6a:3a:94:70:a1:
         da:38:75:0f:ed:be:2d:dc:3b:09:3a:bf:9f:54:df:3a:d3:19:
         9d:75:9c:a8:97:76:87:ff:7f:b8:cb:f3:87:5b:24:aa:ec:1b:
         4c:08:8f:97:57:e6:47:e9:00:19:4f:2c:29:c6:ce:e0:18:ce:
         e6:d8:e2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:18:22 2026 by rpki-client