Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/e052215f-f71c-3bab-a7ce-03958d77d2ad.roa
File:                     e052215f-f71c-3bab-a7ce-03958d77d2ad.roa (raw, json)
Hash identifier:          WrjPWUKQCJNq17VIbSmxsUwTFnfaElQfvNAqqWjs9y8=
Subject key identifier:   F2:62:6C:E5:B7:CA:0D:3C:86:25:BB:5E:B9:E6:A4:E0:C7:A7:C9:A2
Certificate issuer:       /CN=8cf12337-8eb8-43a2-a75e-2b01ceb95c39
Certificate serial:       010D0C9F4328584E921FA61572205F63C02DD000
Authority key identifier: 7C:DF:79:84:75:CE:4F:C7:0C:76:C4:5B:15:5E:91:D9:1C:9A:3E:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/e052215f-f71c-3bab-a7ce-03958d77d2ad.roa
Signing time:             Tue 21 Jul 2026 09:00:12 +0000
ROA not before:           Tue 21 Jul 2026 09:00:12 +0000
ROA not after:            Mon 19 Oct 2026 09:00:12 +0000
asID:                     14499
IP address blocks:        142.192.12.0/23 maxlen: 23
                          142.192.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:92:1f:a6:15:72:20:5f:63:c0:2d:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cf12337-8eb8-43a2-a75e-2b01ceb95c39
        Validity
            Not Before: Jul 21 09:00:12 2026 GMT
            Not After : Oct 19 09:00:12 2026 GMT
        Subject: CN=e9056dd4-bfce-45aa-8c85-3502376791e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:23:2f:aa:9d:4e:b5:ab:95:79:6e:f8:50:e6:
                    f7:eb:39:8c:b8:d2:4d:3f:5d:1c:24:21:79:ec:a7:
                    c9:e1:03:f8:e9:99:78:8d:c0:19:4d:3e:12:a1:8a:
                    47:2d:a5:62:a2:bb:91:40:4c:c3:50:24:fa:ad:c3:
                    bd:30:a7:71:a2:ec:38:d9:85:94:d7:9f:d9:47:9c:
                    10:9d:9d:07:64:50:84:32:06:c0:be:74:30:b9:8e:
                    c3:e4:b4:86:19:63:e4:f5:b2:ba:7b:49:aa:a9:91:
                    76:93:c1:8e:ee:03:54:54:fc:25:e0:e9:6b:47:9c:
                    02:02:26:75:7e:16:66:17:90:ed:d9:ca:49:f2:fe:
                    ef:00:35:38:6e:7d:b0:55:66:e0:ce:48:af:e7:27:
                    d1:87:53:a1:f7:57:d2:6a:1e:e3:8c:08:1f:55:0b:
                    e9:b6:3b:19:32:4f:de:45:de:1d:85:76:3c:ac:2f:
                    ef:7f:90:fe:0c:ac:57:60:97:3e:a0:7e:17:60:e6:
                    ac:e4:0d:4e:c7:b1:42:93:2d:23:05:ad:38:c5:eb:
                    e0:85:e9:81:3e:ef:ff:91:86:d7:98:1a:fd:fd:93:
                    00:66:aa:ce:aa:dd:67:45:2d:b9:09:62:c8:12:5e:
                    a9:89:38:fe:ae:d0:ae:6e:87:d9:0c:78:3f:72:26:
                    da:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:62:6C:E5:B7:CA:0D:3C:86:25:BB:5E:B9:E6:A4:E0:C7:A7:C9:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/e052215f-f71c-3bab-a7ce-03958d77d2ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.crl

            X509v3 Authority Key Identifier:
                keyid:7C:DF:79:84:75:CE:4F:C7:0C:76:C4:5B:15:5E:91:D9:1C:9A:3E:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.192.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:7b:95:49:ce:dd:7a:fd:a8:24:a7:fa:82:d8:02:e2:9b:95:
         34:32:c5:f7:ea:e6:65:c5:34:d3:51:74:44:25:8c:a9:c1:ba:
         d8:b0:33:e9:81:09:c7:4c:e3:98:2e:61:33:ba:ab:86:0f:cf:
         09:d7:2f:3a:5a:8f:1b:20:23:6e:a0:8f:53:fd:76:5d:ca:02:
         a3:c0:3c:1f:29:06:80:40:30:d2:9a:be:b4:ad:37:76:be:26:
         4b:fd:54:24:2c:56:a8:1e:1f:99:0d:93:3d:5d:94:52:04:be:
         a9:f6:d6:12:36:b6:95:27:3a:3a:0c:79:ab:60:33:75:25:82:
         0f:80:00:42:ca:75:77:bc:b7:61:79:fa:67:10:fb:a4:9e:0b:
         3a:6e:85:e4:c2:6a:e2:22:e8:80:75:e3:6c:ca:12:ec:f6:35:
         0c:f0:25:00:09:86:33:89:4c:96:2a:84:60:f6:24:e6:20:bb:
         ba:eb:b1:4e:0d:37:e8:3f:a4:fd:e9:7b:17:e5:fc:7b:e0:6b:
         e5:63:2a:7f:b6:f0:e2:f3:31:17:7e:aa:81:f8:d6:41:4d:a5:
         e6:fc:b0:97:b6:ea:07:71:f2:0d:c5:03:28:9e:d7:71:11:a3:
         29:24:5e:70:98:6b:84:6f:e8:13:71:7e:0c:5f:ec:a9:97:4b:
         df:16:f1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:00:58 2026 by rpki-client