Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8ae1754b-14c8-3e21-941b-2cba670204d1.roa
File:                     8ae1754b-14c8-3e21-941b-2cba670204d1.roa (raw, json)
Hash identifier:          izG25TSHNtH8T2wxCxQrB7EF65HvmwQ+R/tj95UoYR0=
Subject key identifier:   1B:8B:FF:60:40:28:C2:60:B6:40:A4:73:72:C0:C0:55:BE:0C:0E:5D
Certificate issuer:       /CN=8dbe5e2d-b7f8-4dba-b97b-8b6164e83890
Certificate serial:       010D0C9F4328584D7EAC4A1A3374775E70067780
Authority key identifier: CC:B0:CB:3A:A6:3A:8F:FA:2A:54:EF:E8:C8:EB:5A:7D:33:60:5C:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8ae1754b-14c8-3e21-941b-2cba670204d1.roa
Signing time:             Mon 13 Apr 2026 17:00:34 +0000
ROA not before:           Mon 13 Apr 2026 17:00:34 +0000
ROA not after:            Sun 12 Jul 2026 17:00:34 +0000
asID:                     12130
IP address blocks:        192.65.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7e:ac:4a:1a:33:74:77:5e:70:06:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dbe5e2d-b7f8-4dba-b97b-8b6164e83890
        Validity
            Not Before: Apr 13 17:00:34 2026 GMT
            Not After : Jul 12 17:00:34 2026 GMT
        Subject: CN=f4ebf61c-bd6a-4f2b-9e7b-031fe0edab3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:86:5b:6a:4b:bd:bc:58:9f:9a:8f:46:08:04:
                    f9:f8:1b:1b:56:06:4f:00:b5:6e:14:d8:4e:e5:77:
                    71:9b:9d:03:dd:9b:77:fe:a6:e6:21:87:cf:a4:33:
                    c0:8c:a8:4a:49:70:58:df:58:a4:57:23:eb:89:8f:
                    ea:bc:27:61:29:35:b4:67:15:6d:cc:02:10:18:1d:
                    ff:3d:4a:95:b2:c6:24:67:0d:87:24:f5:ef:8e:c3:
                    79:c3:b8:01:24:c9:68:e2:79:ae:0e:85:d8:96:fa:
                    65:a7:87:6e:84:35:b3:ce:b4:91:b1:c4:10:9f:14:
                    09:a2:fa:0f:2f:c4:a1:9e:5d:40:db:ab:94:cc:23:
                    33:77:9a:38:82:bb:78:15:4f:dc:9e:53:80:3e:44:
                    66:10:1a:86:45:55:2f:da:8c:e6:9d:a7:c3:a0:ba:
                    41:df:59:d0:a0:e0:95:6b:87:03:bc:4b:45:f4:29:
                    d8:50:15:3a:45:79:f2:50:b9:d4:7b:2b:27:cc:65:
                    e7:05:44:2f:d6:c9:33:0a:87:15:b3:c0:50:0e:4b:
                    74:76:a5:ef:6a:98:b2:fa:37:04:4c:d6:e2:fa:61:
                    15:01:80:94:1c:2c:03:6b:6e:a7:af:a9:00:63:cd:
                    2b:3b:7c:71:98:ab:b3:d0:19:e4:40:92:5a:9d:66:
                    7c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:8B:FF:60:40:28:C2:60:B6:40:A4:73:72:C0:C0:55:BE:0C:0E:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8ae1754b-14c8-3e21-941b-2cba670204d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.crl

            X509v3 Authority Key Identifier:
                keyid:CC:B0:CB:3A:A6:3A:8F:FA:2A:54:EF:E8:C8:EB:5A:7D:33:60:5C:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.65.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:2a:be:e8:da:72:88:c8:e8:d6:ed:73:42:3d:fd:07:f8:d9:
         17:37:dd:28:15:84:87:6e:1d:3d:9d:71:fd:59:c7:a5:4e:cb:
         40:cd:06:67:e3:51:ea:cf:71:62:8a:1b:4c:12:19:27:37:ea:
         35:b2:3a:03:06:99:e2:bc:56:50:c8:60:23:6f:02:1b:0d:be:
         f9:ed:28:7a:73:c9:3b:b3:05:f2:b2:9f:63:54:97:28:55:71:
         7c:98:22:61:18:9e:48:9b:37:8a:d2:c4:bb:30:ea:1c:4e:e3:
         6c:fb:69:b6:23:6c:ca:85:b1:23:8e:cf:69:20:f0:fc:b8:e6:
         a6:10:d9:65:9a:d9:04:08:26:1c:bc:e1:9e:77:47:20:98:95:
         6e:5b:b9:c3:1d:0e:55:e4:da:70:78:49:17:43:b5:4f:d4:d6:
         9a:99:76:92:21:be:2b:15:0f:0f:32:12:83:ca:67:4b:16:80:
         e9:c2:8f:60:1d:b8:83:23:8a:2f:7f:40:43:a2:de:e1:5c:82:
         f5:52:8c:a0:14:75:31:97:21:0c:eb:80:57:17:8e:40:f8:e3:
         07:c2:a9:a0:bb:28:79:42:d6:4b:d5:9b:01:d2:9d:1c:41:f6:
         ec:24:85:69:ec:c5:3f:65:14:86:a8:07:b0:12:d6:2a:11:3a:
         32:86:fa:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:36:46 2026 by rpki-client