Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/12c8b264-052f-356f-a94d-718e65321e32.roa
File:                     12c8b264-052f-356f-a94d-718e65321e32.roa (raw, json)
Hash identifier:          DEYC56b1O5GcCXS03XbQAtzsp1/csDSHuM2ZtmCShEU=
Subject key identifier:   06:C0:09:58:A1:AE:6C:24:60:EA:2C:B5:C3:8B:03:4B:F4:87:AF:5D
Certificate issuer:       /CN=23658315-b56f-46db-89d2-184000d7f7e1
Certificate serial:       010D0C9F4328584F655D701BA88CC91B81ACA280
Authority key identifier: E5:87:CC:6D:8E:ED:D7:82:E5:1D:8D:4E:59:77:6B:36:63:34:77:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/12c8b264-052f-356f-a94d-718e65321e32.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     14007
IP address blocks:        199.101.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:70:1b:a8:8c:c9:1b:81:ac:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23658315-b56f-46db-89d2-184000d7f7e1
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=c141ae01-a089-49a7-b485-113496e947df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1e:4d:cc:1e:d1:a7:8a:33:a9:ab:48:aa:3a:
                    93:aa:37:e6:52:a9:1e:e1:25:48:3c:8b:c2:b9:e2:
                    cb:ad:38:2b:18:47:30:6a:1e:51:87:b1:95:97:93:
                    69:f7:5d:29:af:56:ef:dc:08:4f:1c:49:2c:e3:d3:
                    02:e0:77:19:4d:2e:47:1e:c3:8d:7c:36:f5:9e:e3:
                    20:77:92:25:d1:8c:84:4f:35:5c:03:dd:5c:3e:7a:
                    81:23:d3:58:1a:8e:4e:3f:6b:17:78:a6:ea:37:87:
                    19:6b:02:a3:b8:6b:fc:51:7c:c8:0d:d4:bf:a3:97:
                    1d:18:94:c2:34:8e:aa:41:7c:58:09:23:e9:ee:e0:
                    28:ca:46:8a:2c:ee:7d:84:af:d6:5a:b2:ed:8f:0c:
                    c6:b9:be:8c:7c:07:83:ca:a8:29:d8:7a:25:24:3f:
                    1d:4c:53:7c:66:16:f7:4b:bd:b2:ad:57:71:89:62:
                    64:39:cd:9e:33:c2:ed:99:61:be:46:2a:f3:d3:11:
                    2d:78:1a:5d:e6:50:4e:57:64:3e:7b:24:af:6a:06:
                    67:3b:d2:22:3c:96:66:32:b2:81:09:07:39:eb:30:
                    fe:d2:51:c3:8c:bb:68:5d:c9:ea:ed:c5:63:72:ad:
                    a5:c9:ae:ec:da:1e:bb:ca:41:9e:0b:79:c6:8a:7f:
                    db:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C0:09:58:A1:AE:6C:24:60:EA:2C:B5:C3:8B:03:4B:F4:87:AF:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/12c8b264-052f-356f-a94d-718e65321e32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.crl

            X509v3 Authority Key Identifier:
                keyid:E5:87:CC:6D:8E:ED:D7:82:E5:1D:8D:4E:59:77:6B:36:63:34:77:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:6a:33:2b:7d:f8:cb:d9:19:25:ff:de:71:15:e1:90:98:96:
         3f:bb:fd:b4:ed:1e:b1:69:ba:59:ee:60:f3:1d:e2:7b:59:6a:
         c5:08:4b:bd:95:a4:70:83:9e:7a:54:0f:85:ef:99:eb:b8:67:
         57:7d:a1:2d:9b:2f:63:72:94:8c:3b:9b:b3:bd:a9:05:35:87:
         4e:c6:e9:b3:46:1f:5d:8a:fb:41:73:ac:d2:a6:a1:c0:93:4b:
         41:58:b5:bb:84:53:01:81:eb:71:91:2e:16:8a:0d:d4:b7:f0:
         eb:20:2c:e1:e1:68:50:d5:5b:eb:84:c0:c3:6d:49:a7:8b:c8:
         aa:e3:be:e8:b6:f7:cb:20:d9:d2:c2:4c:42:68:d1:5d:b0:af:
         cf:0b:70:27:3b:56:0b:a4:58:f1:c0:47:e7:c3:75:a7:ee:b9:
         63:66:9b:c9:6c:8d:e4:0d:3a:d3:9b:1b:ff:18:6b:fc:6a:c1:
         bf:9f:d2:d2:39:4a:57:d3:4d:47:e5:7a:6f:67:d3:c6:23:59:
         e0:3a:b1:c8:02:e8:3c:12:85:d1:8a:1f:53:8c:52:be:26:ab:
         9f:53:0d:76:0a:99:6f:63:ca:e3:43:e8:f1:c6:4d:fb:db:cb:
         4b:60:8c:40:22:1d:d6:f4:25:61:ee:f8:c0:8d:20:a6:16:13:
         ca:05:42:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 22:56:01 2026 by rpki-client