Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/72ea9654-6e11-38af-9a09-c95f74175c2e.roa
File:                     72ea9654-6e11-38af-9a09-c95f74175c2e.roa (raw, json)
Hash identifier:          b6IJSinw7+lwvyr4uXl3zzaiUGiXHv8ARFrMChvN0vo=
Subject key identifier:   63:DC:FD:AC:05:2E:18:A5:FD:F6:13:5B:72:39:98:82:CB:1B:E6:2E
Certificate issuer:       /CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
Certificate serial:       010D0C9F4328584EC371C5531BE3F9073BD92D00
Authority key identifier: 09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/72ea9654-6e11-38af-9a09-c95f74175c2e.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     397041
IP address blocks:        134.195.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:71:c5:53:1b:e3:f9:07:3b:d9:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=79d8e50d-1b7b-4b82-a7ca-d1daf0a031fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:03:e2:62:d7:07:a7:6d:06:df:bc:06:09:41:
                    e5:fd:e4:51:01:ec:43:5a:38:43:22:27:f7:ab:3b:
                    c9:50:43:5c:33:62:e3:e1:91:3a:75:cf:46:ab:cd:
                    84:56:22:fc:e3:c7:4b:10:b9:de:9e:ba:db:92:78:
                    01:1c:60:a4:fc:3e:29:99:bd:fc:0b:bc:02:01:75:
                    57:cc:d0:77:24:ec:76:0b:48:d4:8b:e6:c6:5e:90:
                    3c:98:25:6a:d2:6a:9b:bb:ea:e6:5e:64:b8:5d:86:
                    d1:de:d3:d9:d3:45:2e:76:33:83:91:6d:38:4f:f2:
                    5f:68:39:53:c4:1a:6d:39:a1:d4:95:5f:94:07:95:
                    ef:ee:f5:06:c0:08:fd:f4:2a:a3:af:47:9d:27:12:
                    91:92:93:e6:a2:22:38:22:b1:12:a6:d2:d7:97:37:
                    b2:1a:b1:e1:7f:72:aa:a4:1a:3a:9a:83:15:59:43:
                    f1:cf:1b:eb:ae:d6:5f:41:61:ed:45:04:b8:41:75:
                    56:22:5b:74:62:1a:16:7b:28:04:12:32:87:c2:8e:
                    c1:d3:74:ae:4c:03:af:d8:55:ca:b4:87:22:f4:8a:
                    ce:e8:23:34:29:e2:9f:46:70:c8:13:44:c6:5d:55:
                    af:0e:b7:05:b7:3e:1e:23:8a:7e:6e:20:09:b0:da:
                    65:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:DC:FD:AC:05:2E:18:A5:FD:F6:13:5B:72:39:98:82:CB:1B:E6:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/72ea9654-6e11-38af-9a09-c95f74175c2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl

            X509v3 Authority Key Identifier:
                keyid:09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:d5:2a:f3:4f:6c:27:e9:fd:4e:c2:ba:7b:38:14:da:fb:1f:
         5d:1e:62:76:e4:32:ea:f3:65:81:17:49:e7:53:fa:f7:e3:da:
         34:e4:ff:f1:55:06:b1:98:b6:ba:2f:ae:6a:6a:16:4b:be:d9:
         0a:36:35:37:30:07:de:8b:c7:a5:03:49:50:fe:01:75:73:33:
         8f:11:37:dc:12:3f:51:75:dc:81:8e:c9:13:23:82:46:b6:93:
         2e:41:35:9d:2c:af:45:34:73:f1:b0:25:38:1a:bc:3f:95:33:
         3a:58:42:2d:32:df:2e:26:c7:e7:bf:8b:ca:78:30:01:bb:c2:
         c1:60:3a:29:b3:74:8b:93:78:42:b3:47:5a:ff:65:15:4a:d5:
         34:dc:e3:34:85:d9:12:77:ed:1a:9b:56:90:08:2a:02:95:be:
         d4:2f:ad:04:84:d9:b5:3b:dc:a2:49:4d:fd:70:8f:a2:e6:ad:
         04:8d:64:1f:2e:78:c3:3b:73:4d:87:45:10:92:88:41:39:6d:
         0c:3a:e2:0e:f4:75:ff:06:a2:55:39:a9:61:91:2f:6c:1c:b6:
         80:9f:c8:e3:e2:45:91:e9:d0:14:3d:5d:0b:3b:4a:3b:33:c6:
         f6:db:9e:75:96:61:f5:ba:0c:6a:1d:91:94:17:b7:51:ab:2a:
         49:15:18:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 09:35:25 2026 by rpki-client