Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/12bbb0d1-a80f-3635-9187-efa6ce1cafb1.roa
File:                     12bbb0d1-a80f-3635-9187-efa6ce1cafb1.roa (raw, json)
Hash identifier:          ePOByshkuAZcrsFYC4gKuGQJnJ+TT82LeChREDyhLnk=
Subject key identifier:   1D:C5:EE:2B:5A:07:B6:12:F2:A4:27:06:29:1A:DD:DA:53:57:2B:A8
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584EFCACC7E8513FA6D10592D940
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/12bbb0d1-a80f-3635-9187-efa6ce1cafb1.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     20940
IP address blocks:        2001:418:1401:70::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:c7:e8:51:3f:a6:d1:05:92:d9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=fc7c5d4b-d924-40cb-b1a0-b96ffc330d20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:be:c0:22:25:9f:ff:03:89:ba:af:75:aa:7e:
                    63:05:20:3f:3a:30:31:0e:dd:47:0a:02:c9:2b:d5:
                    24:ff:0a:b8:4c:f4:37:e8:c5:ce:b4:51:49:fc:c8:
                    7a:05:49:75:cb:dd:2a:8f:7f:20:4c:f9:fe:8f:5b:
                    ba:06:9b:a7:55:53:8e:45:23:db:09:97:09:3e:eb:
                    d7:dd:bc:27:b0:ce:45:84:71:f5:14:c3:44:bd:2f:
                    08:a7:6c:2e:c9:88:7a:a3:c8:27:3a:18:f6:3d:6f:
                    07:65:58:6c:f1:c4:e1:85:87:62:27:6d:3f:01:c1:
                    57:fd:68:b5:5d:4d:ee:00:17:e9:cf:bd:54:30:da:
                    98:0c:3c:33:0e:53:9d:07:68:f7:02:80:ba:43:23:
                    e1:4a:c5:ad:ec:d5:ee:a0:5a:24:3a:65:be:90:00:
                    2a:12:a9:57:9b:5f:15:eb:d5:81:33:a9:f4:65:6f:
                    1a:3c:29:7d:69:df:4a:cf:d5:bb:54:5f:4b:c2:51:
                    f0:93:22:01:5d:23:69:fa:f0:b7:1a:63:ac:46:71:
                    2d:3a:b1:e1:a3:24:68:2f:60:95:f9:1a:c9:ff:88:
                    77:2f:3b:2e:a1:b6:ef:1e:f6:e4:a6:82:99:81:e0:
                    91:dc:54:2b:83:6a:38:88:e1:d3:b9:1d:16:84:7e:
                    f8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:C5:EE:2B:5A:07:B6:12:F2:A4:27:06:29:1A:DD:DA:53:57:2B:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/12bbb0d1-a80f-3635-9187-efa6ce1cafb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:1401:70::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:17:bd:3d:de:e5:8a:16:e0:76:d3:bd:6f:16:f9:78:c5:24:
         3d:c6:65:d4:7f:45:42:d0:a4:8f:ad:e2:6f:2c:91:7d:0b:92:
         ec:bb:19:02:fe:79:fe:a7:a3:44:b0:36:f6:5d:27:09:ad:4c:
         71:c5:c6:50:97:56:e6:3a:60:37:39:10:e4:e7:a6:c3:8d:db:
         50:8c:fc:72:f4:e7:22:39:8b:8d:12:9b:ee:97:1f:49:38:7e:
         41:69:a9:11:5e:63:e7:b4:82:75:64:44:84:cb:db:4e:2a:a2:
         15:29:11:29:6b:62:dd:18:14:8f:72:e0:bd:28:2e:25:ea:52:
         d3:b9:b3:32:38:ca:50:a5:dc:d4:cb:92:2e:7b:62:80:64:0b:
         21:e5:c1:a5:68:9e:3b:47:1f:e4:ce:a5:23:61:9c:c1:7e:aa:
         bf:7d:a3:69:16:54:03:0e:14:62:c6:89:c2:84:c1:4e:fb:ff:
         16:d9:b0:e9:53:c2:d7:64:ed:ac:f8:4b:33:53:e8:08:2b:81:
         0c:57:bf:c2:93:d1:f8:61:b7:68:e8:ec:59:4a:37:eb:5d:ee:
         fc:4d:b1:20:31:f9:93:6c:d3:2b:e9:bf:4c:8c:73:0d:b5:e4:
         ec:5e:fa:ff:ef:be:04:00:2d:58:aa:a7:3d:92:5e:8f:f5:90:
         20:8e:b9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 19:22:14 2026 by rpki-client