Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/97addbf9-8792-382f-a146-c3d955a34f50.roa
File:                     97addbf9-8792-382f-a146-c3d955a34f50.roa (raw, json)
Hash identifier:          VHUsfhek809bC4K1exkx3aNMDS08ysIbmZ0K410Ung0=
Subject key identifier:   32:EC:86:91:18:18:99:32:A9:6C:E7:CF:67:A4:8E:3D:F3:FB:D8:B0
Certificate issuer:       /CN=7a12fcbe-b691-4ac3-b0db-8db0c27f3554
Certificate serial:       010D0C9F4328584EDC91FD007F953743351A7E40
Authority key identifier: E6:48:65:89:B5:23:1C:2F:74:04:1A:CE:F9:CC:ED:E8:23:91:B5:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/97addbf9-8792-382f-a146-c3d955a34f50.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     27419
IP address blocks:        63.246.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:91:fd:00:7f:95:37:43:35:1a:7e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a12fcbe-b691-4ac3-b0db-8db0c27f3554
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=e76b360f-a6f1-4eb8-8ec7-72017353d7b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:66:bf:87:47:da:4b:25:77:60:80:74:d8:92:
                    89:e8:96:49:56:34:be:2f:6b:0f:82:83:ac:10:f0:
                    0b:cd:b0:2c:dd:5e:13:22:ca:d1:b5:02:54:39:e6:
                    6e:2f:7e:0f:4b:ff:c2:39:65:5e:86:93:71:f6:6c:
                    fd:29:8c:51:64:33:d3:b2:cc:e5:a0:ca:13:6a:b4:
                    e3:0d:ef:27:96:2c:22:3b:91:67:d7:12:e8:3e:9e:
                    9b:63:62:8c:ca:ff:a2:6f:97:e9:6a:72:e7:6a:47:
                    43:ce:b7:8a:26:e5:c9:ae:fb:0a:b6:75:9f:79:8c:
                    97:e0:2d:c9:90:13:86:5c:70:df:3a:3b:dc:e4:7b:
                    fc:53:bb:fb:b7:00:48:51:76:44:07:34:fe:ea:4c:
                    72:22:7b:06:e2:73:4d:df:07:0b:43:24:7b:52:9e:
                    42:bc:0b:2c:e3:b9:47:82:e6:db:e0:52:cf:15:97:
                    f6:79:72:70:fd:e9:cf:90:55:92:71:7d:aa:83:23:
                    b6:b4:16:3a:93:15:82:6f:41:0d:62:43:fc:d5:d3:
                    a8:7b:0a:62:1e:ef:68:34:0b:ab:f2:ea:ab:66:77:
                    41:1e:ad:08:05:d4:e6:bf:5f:ed:88:b7:2b:02:9a:
                    2b:32:46:0d:d3:42:83:23:c6:6b:ba:4f:ce:98:28:
                    9a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:EC:86:91:18:18:99:32:A9:6C:E7:CF:67:A4:8E:3D:F3:FB:D8:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/97addbf9-8792-382f-a146-c3d955a34f50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.crl

            X509v3 Authority Key Identifier:
                keyid:E6:48:65:89:B5:23:1C:2F:74:04:1A:CE:F9:CC:ED:E8:23:91:B5:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.246.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:80:51:d5:7c:33:6a:fa:ff:07:16:23:88:e5:d4:65:29:0f:
         05:14:06:39:ce:30:d6:d9:61:bc:3c:8c:cc:b8:46:28:d4:ac:
         e2:c0:d8:91:db:8a:ac:a6:d8:12:65:72:a1:57:cd:e0:bb:b6:
         ed:e7:d2:9f:98:d4:b3:e3:5d:d6:38:64:98:3b:68:7e:06:5a:
         41:2c:e3:8f:b0:13:2a:68:9a:61:dc:b7:f9:bb:f8:9f:d1:73:
         51:62:95:12:05:e7:da:e1:da:b5:26:51:5e:71:0c:a8:fb:fa:
         00:5d:4c:29:40:02:d6:3c:5a:aa:8d:ae:e1:dc:f7:45:cc:5b:
         6a:a1:a4:d3:d5:e3:69:99:6b:18:c4:b0:88:0f:5f:77:96:18:
         66:c0:48:c6:13:0f:ae:bc:b9:e0:77:54:6b:89:34:b7:7e:fa:
         f0:46:5f:74:8a:4c:f2:c5:01:d5:5d:f0:c3:ad:2c:e6:2d:8b:
         e5:24:f1:3a:c4:bc:b6:24:10:85:7d:48:f2:4a:3b:a1:49:8f:
         64:ca:38:23:3d:bf:71:a4:ee:0b:e9:89:7e:ae:78:0b:49:27:
         52:b1:c4:0d:ca:a6:21:d0:b7:1e:a1:87:15:a7:17:52:0e:7f:
         e6:5f:a3:b7:f5:0d:d2:cf:35:99:4c:99:75:9d:30:22:1e:98:
         8d:5b:98:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:04:59 2026 by rpki-client