Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/12d8e2ee-af89-3b84-8705-f36f7f8c97b9.roa
File:                     12d8e2ee-af89-3b84-8705-f36f7f8c97b9.roa (raw, json)
Hash identifier:          GqrDfh/SgPYPv1BWNqVcO87mYFfZBel2mWxDjNN2C+0=
Subject key identifier:   AC:78:9C:91:FC:4A:95:3C:2F:CE:A2:8B:43:4B:6B:24:DF:1C:B0:F7
Certificate issuer:       /CN=256d2a2e-9ac7-4d29-bd15-75874d49df66
Certificate serial:       010D0C9F4328584B6BC747EB3105F8FAE4715600
Authority key identifier: E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/12d8e2ee-af89-3b84-8705-f36f7f8c97b9.roa
Signing time:             Sun 05 Oct 2025 13:00:40 +0000
ROA not before:           Sun 05 Oct 2025 13:00:40 +0000
ROA not after:            Sat 03 Jan 2026 14:00:40 +0000
asID:                     40805
IP address blocks:        208.96.176.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6b:c7:47:eb:31:05:f8:fa:e4:71:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=256d2a2e-9ac7-4d29-bd15-75874d49df66
        Validity
            Not Before: Oct  5 13:00:40 2025 GMT
            Not After : Jan  3 14:00:40 2026 GMT
        Subject: CN=9166fdbd-f072-4b9f-885f-896fa6a9bf38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:18:d3:41:5d:c7:7f:2f:52:ce:8a:88:cb:c2:
                    35:95:16:e9:52:0d:8a:03:1f:52:2f:bb:9e:aa:7d:
                    b9:05:37:74:cc:9a:d5:f2:76:54:6d:80:8c:65:5d:
                    d8:15:b6:b8:28:fc:5b:e1:55:2d:cb:92:36:08:de:
                    09:9d:bf:31:c4:ac:3f:60:e6:2a:95:b1:77:33:1d:
                    dc:81:98:74:95:86:ee:12:1e:5e:63:61:3f:f7:21:
                    b5:53:d1:cd:17:68:e4:49:de:6a:88:20:84:81:19:
                    bd:e4:aa:b4:d3:a7:52:0b:ee:ff:63:c3:44:c5:cb:
                    81:f5:44:22:52:f6:aa:da:37:b4:83:86:31:82:b8:
                    fa:f4:ff:ed:75:82:aa:4c:ec:a5:64:1c:56:f0:ed:
                    f2:21:4b:d7:eb:43:05:3e:1d:47:0a:9f:5a:2d:da:
                    d0:24:39:ef:f1:98:d2:d3:1a:1f:f2:13:b8:c4:4f:
                    06:b2:d4:21:1d:cd:e7:cb:04:53:7b:a7:60:f4:44:
                    22:72:61:a1:1f:ef:96:be:4e:fb:b7:b8:f5:c6:b0:
                    41:7a:0a:d7:65:97:86:c8:91:38:a4:c7:3b:dd:a9:
                    5e:9c:3e:f2:c4:57:8d:01:23:80:06:1a:69:53:0f:
                    6a:7a:54:7e:0b:11:25:cd:76:f7:cc:44:f6:d8:7c:
                    df:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:78:9C:91:FC:4A:95:3C:2F:CE:A2:8B:43:4B:6B:24:DF:1C:B0:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/12d8e2ee-af89-3b84-8705-f36f7f8c97b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl

            X509v3 Authority Key Identifier:
                keyid:E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.96.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:5f:74:f9:45:61:b8:64:74:83:8c:c6:35:db:a8:e5:b8:39:
         ee:62:3b:68:7d:36:c8:ce:34:76:6a:a1:61:c8:e0:6b:92:21:
         6a:03:af:28:d2:9e:5e:0f:43:60:a6:23:08:1e:f7:b7:f5:b5:
         af:9a:53:96:37:22:f9:c8:c0:d4:8c:64:67:e5:f6:62:ea:3f:
         c7:7d:15:b5:04:4f:69:21:4a:fd:66:e7:75:30:e4:5d:67:15:
         ba:30:e4:60:c3:d8:11:64:c6:e5:1e:36:fa:aa:23:7f:24:f8:
         e9:5f:2a:7f:fb:e5:38:2d:9a:33:af:a2:38:4a:fc:02:cd:b5:
         1a:aa:85:3e:c6:d0:1c:fb:17:34:08:9b:92:1b:0c:02:d5:28:
         0b:8e:5c:fa:4a:63:d3:83:90:ac:cd:ee:e1:fd:bf:77:5d:d0:
         9f:7f:43:e4:b3:a7:3d:84:d2:5f:5e:32:98:d3:14:7a:84:0b:
         8a:99:8c:09:cd:f7:f4:8e:a8:95:39:be:ce:69:01:b8:40:5f:
         b6:67:50:40:ca:60:3f:5c:aa:91:a7:16:13:4e:49:fc:b6:8b:
         4d:df:5d:ab:2a:f4:07:83:41:d7:03:c3:c7:ec:ea:85:8a:41:
         70:58:a3:86:40:da:d1:aa:bb:0c:1a:ba:62:88:b3:cf:12:b8:
         de:da:17:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 16:45:10 2025 by rpki-client