Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/76128ce9-79ee-3f1a-9953-cad3bfe282d8.roa
File:                     76128ce9-79ee-3f1a-9953-cad3bfe282d8.roa (raw, json)
Hash identifier:          THicmlfS0hoKoAvyiYF4DJ/Ny9JOzsUjd/By/PqLXP0=
Subject key identifier:   64:FD:B3:DF:1A:5E:6A:09:66:90:58:57:24:4E:53:56:9F:2B:F5:1F
Certificate issuer:       /CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47
Certificate serial:       010D0C9F4328584E4824856E18631D88024CB580
Authority key identifier: 3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/76128ce9-79ee-3f1a-9953-cad3bfe282d8.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     14618
IP address blocks:        157.239.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:85:6e:18:63:1d:88:02:4c:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=c70dc5e6-4e7b-40de-bab8-5bbdfcafe111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:28:15:b7:07:d5:b1:ea:45:3c:55:b8:1d:3d:
                    19:9e:a1:cb:f6:61:fb:a9:86:35:fb:d9:5d:90:d7:
                    fb:73:1c:93:22:bd:3f:d2:0d:31:6b:30:0d:5c:f4:
                    9f:85:e3:bd:42:7b:85:4f:f7:4a:2f:6a:0e:83:6b:
                    f4:0b:b5:6e:3e:33:9c:05:ad:e1:3b:6c:0d:26:88:
                    7c:53:ce:18:0f:37:c9:c7:33:e8:2d:91:eb:15:8d:
                    12:8a:8c:e7:5c:0c:3b:fb:99:f3:bf:e9:ac:e7:0d:
                    fa:7f:a4:df:50:5d:61:58:d6:1f:15:c8:3c:aa:58:
                    2d:69:76:40:fa:5e:21:2d:d7:68:16:d9:11:de:fe:
                    20:9c:70:91:4b:c2:23:7f:3c:75:6b:98:2b:de:9b:
                    01:ca:d0:cb:f9:66:4d:4b:d8:ec:3b:74:94:b5:36:
                    ac:cd:20:cc:cd:73:22:c8:32:ce:46:00:31:66:0f:
                    8e:5c:29:db:c0:ab:4c:f9:18:a3:1d:cf:2b:e9:64:
                    d0:9b:02:3d:c5:ba:a3:2d:16:70:f6:7b:ef:bd:8f:
                    4b:31:ac:80:31:ee:7d:67:67:89:88:96:f0:f4:60:
                    e6:b8:12:5f:3b:08:41:f1:f9:5d:b1:c7:fa:05:76:
                    07:c6:17:6b:85:e9:ac:1a:45:02:64:3e:a6:af:af:
                    d3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:FD:B3:DF:1A:5E:6A:09:66:90:58:57:24:4E:53:56:9F:2B:F5:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/76128ce9-79ee-3f1a-9953-cad3bfe282d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl

            X509v3 Authority Key Identifier:
                keyid:3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.239.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:0a:e4:50:c3:87:83:5e:eb:48:c0:6d:f3:e8:73:af:6f:88:
         d5:68:e1:fe:41:36:1f:78:d2:d4:4f:ec:4f:80:75:be:29:3f:
         80:d1:f2:b7:d3:9c:d2:e3:fe:1c:0a:84:44:c6:2a:5a:c2:4a:
         df:99:b0:e5:6d:46:2d:dd:38:33:c7:e9:6c:9c:6c:87:43:d9:
         6b:d4:cf:aa:46:21:75:a2:9a:4c:91:8e:b9:4b:43:39:82:6a:
         1b:ca:a9:e2:b0:1b:db:f4:8d:80:93:76:96:b7:e3:85:ca:72:
         31:98:d2:c4:98:f2:b7:ff:bd:ce:be:e0:0c:b2:9a:71:54:30:
         a5:4b:bf:a2:15:d7:fb:39:9c:1b:87:ae:40:13:53:0a:5d:a4:
         1b:f2:cc:26:2b:b8:3f:b8:fe:e9:33:a3:5b:43:32:f6:8e:41:
         c1:f6:ae:08:62:58:47:b2:14:2f:73:0a:b6:2b:ac:00:9a:38:
         26:25:e9:d4:e3:26:d2:06:8d:78:12:d8:fa:ef:5d:61:f5:3c:
         ba:17:43:3f:bd:2a:4d:a2:6a:b4:a4:3a:ee:77:6d:dd:05:a6:
         ff:aa:0e:f7:8a:d8:37:35:bb:09:f2:7c:41:5d:fe:25:99:ee:
         b0:c8:50:3c:a5:bc:4d:6c:28:7e:ed:50:18:04:9e:52:5b:51:
         22:94:8c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:20:48 2026 by rpki-client