Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c12965f3-c52e-3ca2-82c6-dcfed468cdf6.roa
File:                     c12965f3-c52e-3ca2-82c6-dcfed468cdf6.roa (raw, json)
Hash identifier:          E4yYHUw/QU2U98VeqWmsJXdQfIkfSzfLy9MhhIiMbjA=
Subject key identifier:   4D:D0:C2:EC:DA:62:32:E0:40:B4:AF:86:4F:95:CE:EC:53:AD:35:CE
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584EC23B36312436CF45ADB9CC00
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c12965f3-c52e-3ca2-82c6-dcfed468cdf6.roa
Signing time:             Fri 07 Aug 2026 14:34:38 +0000
ROA not before:           Fri 07 Aug 2026 14:34:38 +0000
ROA not after:            Thu 05 Nov 2026 15:34:38 +0000
asID:                     395954
IP address blocks:        172.255.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:3b:36:31:24:36:cf:45:ad:b9:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug  7 14:34:38 2026 GMT
            Not After : Nov  5 15:34:38 2026 GMT
        Subject: CN=a949e63f-9d3c-4940-bec6-758e62b5c017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d3:d2:d1:4e:6f:90:db:6c:97:fe:3a:23:bb:
                    71:42:6d:4a:3a:90:cb:d6:72:1f:16:3c:cb:d6:89:
                    dc:1b:bf:55:a7:b5:1d:73:d1:af:9c:9d:9c:a2:12:
                    0c:b3:fe:86:da:de:7e:d5:be:df:c9:df:02:52:8c:
                    80:56:55:7b:37:cc:72:91:61:0c:0d:25:7c:23:db:
                    d1:24:7e:47:70:fb:48:26:b0:ba:f4:76:11:92:3e:
                    3a:ee:db:f0:e0:e5:15:bb:d3:86:67:56:6f:c6:91:
                    23:51:ab:f8:ed:e7:6a:55:cd:3d:02:43:41:88:e9:
                    46:d7:b8:94:e2:08:90:2b:9a:a8:85:30:d7:97:8a:
                    eb:64:df:41:4a:c7:5c:2c:03:5c:4f:c3:43:8b:c7:
                    e6:8e:ff:f2:f7:0d:de:c9:bc:55:4b:23:fb:a0:9b:
                    b9:bb:0c:ed:e4:bb:5e:93:54:59:15:c3:24:b4:7c:
                    3a:df:ca:a7:07:34:53:a2:6a:92:b9:54:cf:cf:ec:
                    b2:b9:53:76:8f:35:4c:a2:13:9d:82:b8:11:b0:4c:
                    2c:e6:a7:5e:6f:71:54:37:90:50:7f:d3:af:27:d3:
                    55:31:2b:9b:dc:5b:7e:90:89:df:b1:55:8b:20:a5:
                    50:d1:d6:df:63:63:87:49:5d:19:50:8b:ec:af:c1:
                    52:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D0:C2:EC:DA:62:32:E0:40:B4:AF:86:4F:95:CE:EC:53:AD:35:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c12965f3-c52e-3ca2-82c6-dcfed468cdf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.255.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:84:d2:47:92:a1:05:10:9d:43:87:2f:f9:ad:4c:4c:84:df:
         a9:45:f7:3d:60:c9:1f:ad:b4:14:c6:1f:95:31:a5:c0:ec:a5:
         43:89:7e:81:96:c8:85:6c:a5:9b:a3:71:5e:ae:2a:17:83:63:
         1b:49:dd:71:ab:45:15:b1:ab:04:91:75:a3:ce:e2:bf:5e:6b:
         19:cb:c3:44:59:23:53:6b:49:e3:a0:56:3f:a9:6e:54:40:f0:
         7e:11:8d:b5:85:d2:5a:f5:91:7d:57:c9:46:88:e4:13:f0:12:
         c2:3b:8b:e0:25:8f:02:4b:57:22:f1:8c:17:de:5a:b2:b2:e8:
         e1:70:56:bc:02:b8:2e:14:be:f9:24:9a:fb:cd:4d:ee:3c:6e:
         f4:d1:e8:b5:89:b1:86:e4:7f:13:d0:e1:d6:c5:23:2e:aa:65:
         17:b5:80:16:3c:14:b0:1d:7c:6f:14:1a:07:71:8c:0a:8f:bd:
         e9:a9:5e:a4:97:95:39:5a:41:60:1d:ff:74:34:f1:72:bf:a4:
         34:1a:6b:c6:f2:00:38:9f:d6:59:5b:3d:4d:84:7a:46:12:fb:
         6a:34:45:42:41:28:cd:a7:b2:9e:ea:63:aa:bc:e2:03:5e:93:
         0a:35:ea:70:f5:63:b8:0f:95:a8:25:1a:32:e7:ef:c2:60:68:
         46:5e:2f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:37:56 2026 by rpki-client