Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f3437cce-983d-3797-9cb0-db2556e9abfe.roa
File:                     f3437cce-983d-3797-9cb0-db2556e9abfe.roa (raw, json)
Hash identifier:          uLfSvzDrnBm1XN33zqUQnOzOFL/5Z7zjhaWcuMs3jfI=
Subject key identifier:   1A:39:BD:22:65:3A:8C:FA:9C:46:5F:13:A5:23:6E:7E:8B:F6:1D:AA
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584E95F269EE1E2AADCE9AE22E80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f3437cce-983d-3797-9cb0-db2556e9abfe.roa
Signing time:             Wed 22 Jul 2026 17:52:23 +0000
ROA not before:           Wed 22 Jul 2026 17:52:23 +0000
ROA not after:            Tue 20 Oct 2026 17:52:23 +0000
asID:                     17252
IP address blocks:        67.203.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:95:f2:69:ee:1e:2a:ad:ce:9a:e2:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul 22 17:52:23 2026 GMT
            Not After : Oct 20 17:52:23 2026 GMT
        Subject: CN=501ab652-69eb-4691-8f39-528b9a5dfd8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:13:af:ce:10:61:13:f5:06:43:2f:13:8a:92:
                    d8:bb:cc:a9:7c:cd:18:59:b2:3b:fb:d3:46:a0:95:
                    ca:16:04:0a:01:d0:a6:72:eb:a9:65:b5:e6:f7:e7:
                    b0:f3:76:ea:2a:91:9e:ea:f8:ba:dc:7f:56:ad:ac:
                    c7:96:84:f3:d9:f6:b6:e4:5c:65:ea:ee:b1:4a:b8:
                    e6:57:a5:3a:1b:f1:3c:6b:ef:3a:ce:7e:af:33:f2:
                    a0:d8:6e:d0:69:a9:7c:0a:a9:fe:5c:b2:01:8e:7e:
                    72:3a:2f:80:d1:95:a0:d8:45:04:e2:ef:45:59:38:
                    6d:f2:f7:e8:25:8b:da:dd:a9:a8:14:71:fb:6b:b5:
                    67:73:ac:d7:1b:8d:f4:f5:f2:24:b5:79:99:07:98:
                    6c:6c:61:79:65:4d:a0:93:6b:57:65:c8:ab:23:2f:
                    52:41:b6:4a:fa:6a:db:9c:19:f7:b2:aa:8f:32:db:
                    15:9a:3f:59:53:47:1c:db:d4:1a:9b:65:b6:08:6f:
                    16:fd:17:92:f1:67:26:a2:e8:5d:43:8a:1f:2d:d0:
                    ab:5b:c3:50:7b:dc:81:86:35:bf:c0:5e:41:47:f2:
                    25:ca:86:7a:59:80:d7:63:73:a5:cb:b7:b6:68:2b:
                    d3:6c:0e:0d:db:62:69:c4:6a:bd:6d:6b:d9:11:35:
                    1f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:39:BD:22:65:3A:8C:FA:9C:46:5F:13:A5:23:6E:7E:8B:F6:1D:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f3437cce-983d-3797-9cb0-db2556e9abfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.203.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:0b:20:b7:95:a1:19:94:d2:a7:42:6e:cc:de:bb:28:09:ce:
         bc:5e:24:56:af:37:23:00:87:23:0f:f4:42:de:f0:f0:fe:e9:
         7a:5c:bd:c6:cd:a2:ff:e7:73:d5:92:bf:1c:52:31:47:e4:86:
         18:2f:39:e2:02:8d:ec:dd:74:06:c3:a5:13:a5:9a:ac:58:15:
         b9:2b:6c:a8:a8:6f:af:e9:16:df:b0:c1:50:05:30:bf:8a:ff:
         5b:dd:b1:c7:0a:4a:2b:64:4a:32:2b:f3:eb:96:29:6a:bc:db:
         49:e5:03:3a:94:5e:15:3b:95:25:25:1c:e1:fd:b2:55:38:10:
         c9:45:94:a9:83:5e:00:c6:b2:f5:ab:54:6a:15:53:8f:e9:e6:
         98:ca:f0:73:8c:99:44:4a:06:63:ce:7f:3e:76:ca:5d:f2:d5:
         8f:33:68:78:2c:19:02:32:40:df:36:3b:36:78:e2:bf:21:8c:
         a6:68:9a:a6:5d:03:c9:2f:08:f1:49:4d:32:77:07:6f:aa:7e:
         20:cc:14:c8:bd:46:73:59:ba:8c:b9:08:84:ca:29:49:d2:24:
         1f:8c:e8:2c:0b:7d:be:0a:10:f2:73:01:4e:64:de:df:7a:04:
         35:62:b2:da:85:6a:2b:90:37:69:bb:43:ea:cb:c9:f1:cb:8e:
         2e:1d:18:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 12:44:27 2026 by rpki-client