Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/4323d75d-a33f-3b6a-a7e3-61efa97f8cf1.roa
File:                     4323d75d-a33f-3b6a-a7e3-61efa97f8cf1.roa (raw, json)
Hash identifier:          2vgikOEGWO9j/BpelZk+sqOwpLKa7CgPrgH4dbCVcNY=
Subject key identifier:   16:FC:06:C9:16:42:36:CB:3F:FA:DA:2C:10:3C:8A:47:A5:08:5A:A9
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F4328584EA79EB02BBAC4E9044AE81800
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/4323d75d-a33f-3b6a-a7e3-61efa97f8cf1.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36492
IP address blocks:        172.102.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9e:b0:2b:ba:c4:e9:04:4a:e8:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a26632b7-f832-4570-a038-37820457372a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:aa:3e:7c:bc:ae:0d:ca:12:49:b4:ae:df:f6:
                    93:e8:a8:25:e0:bc:23:93:95:6f:fb:a4:3f:cf:c1:
                    6a:12:01:e9:d2:ae:1a:47:d6:b6:ce:24:07:2d:05:
                    04:27:9d:ed:ff:ad:b8:6c:7f:59:2e:7d:23:94:82:
                    7a:73:7e:4e:17:46:5a:a8:c9:9c:19:7d:ff:ec:0b:
                    5b:40:93:f6:65:c1:0c:84:30:d4:f3:7f:04:2a:2c:
                    9e:cf:c5:ef:42:dd:12:c7:5e:e0:29:bf:b7:9b:18:
                    dc:8d:dc:34:4e:96:ae:68:90:82:59:33:a0:c1:ae:
                    cc:9d:41:bf:49:32:36:bc:8c:e0:73:6a:e6:da:05:
                    c9:7d:fd:63:23:71:80:cf:ba:a1:3e:5e:35:b0:00:
                    d9:12:8c:2b:2b:a4:e6:7a:75:5e:3a:f1:e3:5e:2f:
                    32:05:5e:de:96:67:d7:59:9c:86:98:b3:66:85:2f:
                    a7:90:d2:9d:2c:30:4c:0e:d0:6c:60:c8:a3:4f:c8:
                    e0:01:bb:cd:54:51:17:3b:52:7a:1a:09:df:72:59:
                    92:52:c1:04:51:ff:8f:c2:59:b7:15:46:df:16:10:
                    9a:b4:73:2f:fd:9c:cd:2b:57:d1:c1:4e:7d:9b:20:
                    c7:66:fb:ab:57:e3:ee:e1:d7:96:c2:21:34:4f:f6:
                    56:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:FC:06:C9:16:42:36:CB:3F:FA:DA:2C:10:3C:8A:47:A5:08:5A:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/4323d75d-a33f-3b6a-a7e3-61efa97f8cf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.102.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:e1:0a:85:ab:a0:e9:63:67:d7:95:6d:e6:9d:86:4f:0c:69:
         ab:c5:3a:64:12:81:3f:b5:bb:00:2c:3c:2f:84:d4:ce:10:13:
         b3:4a:39:6f:42:38:7e:80:ae:b9:1a:c8:ec:e2:b0:36:9e:73:
         e0:79:d0:79:e8:fb:ec:57:25:9e:82:fb:78:2b:fe:71:87:e5:
         28:6a:ab:0e:4d:a1:dc:8c:1f:8c:23:6d:8d:5b:70:f4:45:39:
         76:de:55:65:77:f1:c6:14:63:3a:38:d4:b7:b3:1c:79:32:40:
         9d:ec:4a:be:19:33:24:f2:a1:a3:a7:f9:75:82:bb:1f:fa:56:
         7d:ef:4a:cb:71:15:b0:3f:10:a4:d8:30:b6:30:77:29:53:04:
         d2:37:b3:ea:4f:c3:93:f3:1a:13:ba:e5:f2:32:9b:c4:b5:cc:
         23:54:e5:2f:50:37:0a:b4:8b:e3:a8:54:23:a3:01:2b:05:c6:
         66:63:7d:78:b6:2e:b3:cd:12:a3:0d:4c:f7:6c:b7:e1:90:e6:
         93:db:5a:df:50:48:55:14:90:84:9a:3d:f8:00:fb:93:da:0f:
         f7:3a:a5:46:64:2e:44:1f:0e:a7:f6:7a:fb:67:ba:2c:a9:8a:
         b2:51:f3:9c:9e:4d:a3:49:34:18:eb:54:8d:4b:05:dd:6b:3f:
         2a:da:2d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:29:48 2026 by rpki-client