Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/3a91da17-8b9d-39bc-9ee3-57e84e42162a.roa
File:                     3a91da17-8b9d-39bc-9ee3-57e84e42162a.roa (raw, json)
Hash identifier:          vijtrAboE/ahuqwCxwu7pbjfKVIfHaMwGtBBx+ZMZJk=
Subject key identifier:   48:B7:E2:E3:13:38:3C:F2:17:66:40:6B:A8:96:6E:2D:BC:F9:3E:C7
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F4328584B5B0745C981709BD96F6927B0
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/3a91da17-8b9d-39bc-9ee3-57e84e42162a.roa
Signing time:             Mon 29 Sep 2025 13:00:41 +0000
ROA not before:           Mon 29 Sep 2025 13:00:41 +0000
ROA not after:            Sun 28 Dec 2025 14:00:41 +0000
asID:                     12129
IP address blocks:        74.126.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:07:45:c9:81:70:9b:d9:6f:69:27:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Sep 29 13:00:41 2025 GMT
            Not After : Dec 28 14:00:41 2025 GMT
        Subject: CN=e461cd2f-a897-4b17-be77-0c64a198fb5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cd:45:0c:b3:c0:8d:75:05:51:df:97:a5:99:
                    1e:54:8e:7d:8f:ea:6c:e5:b8:50:27:f2:32:4d:d1:
                    bf:2b:c8:9b:01:db:d5:41:cf:28:3d:eb:b1:e9:74:
                    29:31:c8:90:ea:6c:44:29:28:0d:69:cb:c6:5d:e0:
                    1b:cf:18:f2:97:cb:75:13:cc:45:18:3d:3d:40:95:
                    0d:3a:d3:2e:3b:26:d2:82:0c:4e:8c:de:5f:91:b7:
                    85:14:6d:99:0d:9c:3e:c3:7b:e0:12:bc:1d:00:89:
                    e9:1d:c3:ab:7f:21:d2:c7:09:4c:2a:f9:c6:fa:dd:
                    36:ef:42:ac:f5:1d:61:c0:6b:8f:7a:e2:98:9f:8f:
                    26:de:ef:52:e5:6a:1c:8e:50:1c:72:29:83:4a:ef:
                    d1:7b:1b:1f:bf:cb:60:cd:44:46:5d:ac:56:83:37:
                    12:dd:6a:0a:f2:34:3b:69:52:2f:cd:4a:7c:51:ae:
                    96:80:69:8d:e3:09:3d:53:92:5f:a0:c0:3f:92:2c:
                    46:cc:8d:f0:3b:e2:e0:54:30:17:89:68:ea:92:17:
                    18:37:70:62:63:94:3f:86:0d:c6:39:dc:5d:5e:e0:
                    71:3b:bd:6b:f8:fe:28:35:9f:e0:ee:e2:cf:86:ef:
                    dc:05:d9:7c:0d:37:33:39:27:a7:eb:82:4a:fc:b2:
                    8e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:B7:E2:E3:13:38:3C:F2:17:66:40:6B:A8:96:6E:2D:BC:F9:3E:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/3a91da17-8b9d-39bc-9ee3-57e84e42162a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.126.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:9a:03:ac:91:8f:a2:1b:4a:9d:26:f8:19:5e:02:2e:18:44:
         cf:e8:27:bc:d2:03:3a:31:53:36:6f:0f:b9:d0:92:1b:b2:66:
         d9:a4:e4:fb:02:e0:ea:e4:71:08:81:99:22:c1:b5:ba:bb:0e:
         99:98:b9:9e:bc:0f:af:fc:70:5a:a9:4f:da:a0:bb:f6:e5:f7:
         9b:6e:1f:22:ba:37:53:50:78:7a:ce:90:91:dd:fa:b1:1d:31:
         b9:11:53:0a:7a:36:d8:60:8a:45:e7:80:f0:cf:f4:2f:a6:ff:
         0c:d0:10:96:06:3e:35:20:ad:5c:c5:a9:03:92:f7:d9:9b:9e:
         9d:79:44:e3:c6:f1:bd:71:30:98:b4:37:59:8c:d4:b5:c9:ef:
         00:0e:24:7e:88:36:b7:73:ac:0d:74:be:6e:bf:bc:ec:23:a2:
         54:de:b5:0b:65:be:99:5b:7b:65:ec:47:e8:86:1f:ea:fd:a7:
         f1:8f:1c:b2:ab:31:6a:0d:d6:aa:2f:e8:6c:be:29:c7:b8:ec:
         17:b9:e3:83:8d:c4:17:6b:78:5e:b9:b7:5a:3d:53:fe:2d:c1:
         93:7b:18:2a:4a:6c:6d:85:47:88:74:86:10:da:1b:83:06:f4:
         a4:d6:df:50:5e:42:28:31:b9:bb:fd:7d:33:88:68:a7:a8:8f:
         5a:2f:07:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 14 07:12:05 2025 by rpki-client