Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f521e4a2-fbd7-4291-9be0-2ea619a18c7e/3184777e-25fd-379a-a23f-0b1444886974.roa
File:                     3184777e-25fd-379a-a23f-0b1444886974.roa (raw, json)
Hash identifier:          jkFcNhuc1XAPrgw1da3uwh7nxgpJJt8jjYP5q+rqC90=
Subject key identifier:   92:F0:C6:FF:02:C5:7D:53:FC:7E:2F:C2:9E:A4:F0:E1:07:F2:9D:08
Certificate issuer:       /CN=f521e4a2-fbd7-4291-9be0-2ea619a18c7e
Certificate serial:       010D0C9F4328584EA2DFC53C8CF01C2940664C2B
Authority key identifier: DB:95:1A:DD:34:32:85:18:8C:F4:9F:23:A5:19:6E:D5:2D:37:A3:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f521e4a2-fbd7-4291-9be0-2ea619a18c7e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f521e4a2-fbd7-4291-9be0-2ea619a18c7e/3184777e-25fd-379a-a23f-0b1444886974.roa
Signing time:             Mon 27 Jul 2026 09:00:12 +0000
ROA not before:           Mon 27 Jul 2026 09:00:12 +0000
ROA not after:            Sun 25 Oct 2026 09:00:12 +0000
asID:                     30201
IP address blocks:        170.205.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f521e4a2-fbd7-4291-9be0-2ea619a18c7e/f521e4a2-fbd7-4291-9be0-2ea619a18c7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f521e4a2-fbd7-4291-9be0-2ea619a18c7e/f521e4a2-fbd7-4291-9be0-2ea619a18c7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f521e4a2-fbd7-4291-9be0-2ea619a18c7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a2:df:c5:3c:8c:f0:1c:29:40:66:4c:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f521e4a2-fbd7-4291-9be0-2ea619a18c7e
        Validity
            Not Before: Jul 27 09:00:12 2026 GMT
            Not After : Oct 25 09:00:12 2026 GMT
        Subject: CN=1fc2a64b-512f-4adc-b87a-ce39561ff8c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a8:66:a8:f0:4b:07:5f:73:50:8c:ec:54:25:
                    ac:c4:78:58:d7:fd:34:83:f4:07:92:b3:7f:54:55:
                    45:7f:c8:e5:82:76:4d:6b:a0:6c:de:1a:57:c6:a0:
                    02:cd:b6:56:e4:36:22:12:1d:50:9f:55:36:8b:b2:
                    fa:a6:f8:1d:dd:f4:d0:12:a2:c3:30:88:52:65:06:
                    f1:79:1e:65:1c:f2:ab:f9:4b:2e:de:11:8c:2b:c1:
                    36:66:e3:57:d1:82:0c:7b:35:1d:53:c9:39:10:ea:
                    1d:c1:39:51:86:93:ca:a9:fe:af:48:2b:56:1b:fc:
                    ab:7c:d2:d7:69:1e:fc:af:b8:95:a6:f3:84:0e:2e:
                    46:99:b4:48:36:19:bb:d1:4e:3b:61:77:48:68:10:
                    03:10:39:65:63:f3:3e:0e:d3:e5:ad:01:93:fc:8a:
                    60:98:43:14:09:52:0c:e4:f8:e1:31:0e:ea:76:2e:
                    13:10:dd:75:06:85:fc:28:f0:b1:ab:3d:fc:29:ac:
                    5d:50:b0:cd:6f:42:f5:6d:3b:c5:73:d0:6e:34:0f:
                    22:0d:42:dc:f3:19:66:37:31:72:bd:39:4e:64:4d:
                    bb:5a:0f:5d:11:89:25:03:ea:8c:2a:49:3b:52:59:
                    fd:ee:bb:02:85:6e:80:9b:0c:98:27:57:fb:83:8b:
                    33:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F0:C6:FF:02:C5:7D:53:FC:7E:2F:C2:9E:A4:F0:E1:07:F2:9D:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f521e4a2-fbd7-4291-9be0-2ea619a18c7e/3184777e-25fd-379a-a23f-0b1444886974.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f521e4a2-fbd7-4291-9be0-2ea619a18c7e/f521e4a2-fbd7-4291-9be0-2ea619a18c7e.crl

            X509v3 Authority Key Identifier:
                keyid:DB:95:1A:DD:34:32:85:18:8C:F4:9F:23:A5:19:6E:D5:2D:37:A3:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f521e4a2-fbd7-4291-9be0-2ea619a18c7e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.205.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:90:04:87:8a:5f:ed:46:84:f0:39:84:81:25:ad:0a:d0:0e:
         bb:99:d3:a6:0a:ec:50:2e:41:fd:62:28:17:2d:47:72:3b:19:
         88:f0:51:42:d6:f8:9d:98:6a:ab:02:22:3e:ff:6f:63:db:55:
         4e:ef:eb:49:52:7e:8c:17:fd:4e:76:46:36:8c:10:c9:72:2d:
         17:f3:70:23:08:e4:54:57:18:31:96:a0:0b:c6:10:35:73:ad:
         24:79:f7:1c:74:ab:14:96:8d:70:51:93:d3:36:df:b1:f0:c1:
         0c:c5:0d:b9:78:d7:67:a7:b6:c8:c3:b5:3e:55:15:f0:56:93:
         ac:d5:eb:88:13:0e:0c:f7:9d:c5:cc:7d:55:c9:8c:4c:ec:2a:
         77:1d:da:e8:33:cc:39:81:96:af:7e:e0:f1:f0:4e:3a:a1:b0:
         60:5b:4f:b6:82:cb:ee:cc:fd:91:6e:d6:a1:96:b5:c5:a0:35:
         17:08:ad:62:c1:c9:71:9b:c8:1f:51:92:f6:b7:0a:eb:cf:98:
         0f:25:17:2f:ef:87:81:4b:6c:bd:05:48:82:3d:a8:76:e1:a7:
         59:55:bd:94:8d:0b:ac:b5:0c:12:82:78:23:34:11:f1:34:da:
         bf:1a:f7:b2:f5:91:60:02:91:12:f8:89:18:5e:f5:7e:35:c6:
         73:d9:bd:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:55:04 2026 by rpki-client