Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/bf146d86-1d70-3fcf-895b-a47e9c969086.roa
File:                     bf146d86-1d70-3fcf-895b-a47e9c969086.roa (raw, json)
Hash identifier:          fwc352RVh/Wrl6s7J8jEIYZZHhxqnVQZJUDe4cOd1r0=
Subject key identifier:   30:C8:DD:D5:6F:98:2F:19:6A:85:25:E9:E6:E1:DC:36:F6:A1:28:3C
Certificate issuer:       /CN=61532adb-ed7d-43ba-a66f-2a333fb9cf62
Certificate serial:       010D0C9F4328584E97B504DD83D77386B32DA500
Authority key identifier: C9:65:22:CD:0A:BC:3A:D6:00:B2:BD:17:FD:42:C2:66:C6:45:5F:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/bf146d86-1d70-3fcf-895b-a47e9c969086.roa
Signing time:             Thu 23 Jul 2026 09:00:11 +0000
ROA not before:           Thu 23 Jul 2026 09:00:11 +0000
ROA not after:            Wed 21 Oct 2026 09:00:11 +0000
asID:                     262197
IP address blocks:        65.182.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:97:b5:04:dd:83:d7:73:86:b3:2d:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61532adb-ed7d-43ba-a66f-2a333fb9cf62
        Validity
            Not Before: Jul 23 09:00:11 2026 GMT
            Not After : Oct 21 09:00:11 2026 GMT
        Subject: CN=a2a1166a-19d5-404e-933c-5d67ee794106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d8:8a:24:78:7e:4f:2f:8e:52:36:2b:9d:58:
                    63:92:7a:77:d9:69:a5:6d:cd:42:81:a0:82:a1:93:
                    0a:81:7b:44:5b:97:52:b8:e6:b6:ab:c5:6b:a5:11:
                    cc:23:00:27:2b:c8:39:55:94:ef:4c:2c:a2:0c:a8:
                    b0:ac:67:02:8b:5e:d1:25:69:79:c5:15:6f:3e:7d:
                    f0:f7:cc:64:53:8c:f3:a0:cc:a0:c8:c3:47:bf:ca:
                    a9:d4:b3:5b:10:78:59:ac:59:67:26:84:2e:6d:18:
                    f5:6d:07:eb:69:b8:cc:96:13:11:a8:eb:5e:cc:f1:
                    f7:d9:87:b1:b8:ae:ac:4c:12:1a:b2:f8:f3:4a:1a:
                    5c:b2:88:4d:7d:23:db:8f:6c:ab:61:8b:de:91:02:
                    45:b3:03:7e:3f:fd:22:38:78:3e:47:95:20:64:e3:
                    06:ec:56:b9:a1:68:d5:6e:c4:4d:25:9c:97:df:e5:
                    2d:7d:8d:54:96:f7:5d:0b:68:6d:79:33:e5:fc:0e:
                    da:5d:9e:72:ee:68:48:b3:fc:cc:fb:8f:62:35:11:
                    c1:5d:8a:e2:fc:91:a8:b9:cd:31:ad:8e:47:49:74:
                    19:b3:33:67:9b:c9:1a:6b:94:93:4c:6d:b7:9f:0d:
                    ff:c7:7a:e3:b6:9f:2d:bf:f1:b6:0f:46:23:45:5a:
                    f9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C8:DD:D5:6F:98:2F:19:6A:85:25:E9:E6:E1:DC:36:F6:A1:28:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/bf146d86-1d70-3fcf-895b-a47e9c969086.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.crl

            X509v3 Authority Key Identifier:
                keyid:C9:65:22:CD:0A:BC:3A:D6:00:B2:BD:17:FD:42:C2:66:C6:45:5F:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.182.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:29:09:8e:38:34:47:e8:5c:fb:30:89:74:e6:16:8d:81:40:
         f5:55:99:aa:53:80:c5:dc:d4:be:66:62:86:0f:9c:15:1f:af:
         1e:a4:09:bb:02:4e:09:28:e5:59:3b:e1:9c:38:76:42:67:a0:
         61:a6:d3:f1:84:3a:f0:cd:52:1e:32:89:15:13:e2:b9:d0:05:
         a1:95:98:ea:85:2b:ba:e1:ff:47:ac:05:82:60:0a:68:8d:9c:
         09:06:ad:ca:11:00:45:b6:09:d0:2a:18:05:7e:ba:c8:d4:e0:
         ad:ea:ab:23:39:43:ef:fe:2f:f9:e7:13:25:46:1e:77:63:38:
         f1:2d:64:42:86:65:08:dd:25:f8:e8:14:5b:2e:bf:90:6f:ea:
         29:9d:81:b7:c2:cc:36:0f:f5:e8:24:dc:3c:f1:a0:eb:15:44:
         3a:39:75:2d:27:82:15:f6:94:72:c1:ac:78:df:c1:44:d6:c4:
         c1:06:58:a8:fa:29:8f:66:89:f9:fb:bb:7c:9a:4a:6c:6d:2b:
         21:a9:d4:89:a9:de:40:8c:43:5d:4c:48:ad:d2:bf:c9:aa:53:
         89:b4:fb:e7:bf:70:0a:e7:5b:ef:d2:0a:8c:b3:13:8b:2b:ab:
         f6:81:72:75:a4:35:ed:09:c1:a4:5a:7a:e7:b9:84:8e:88:44:
         5b:ce:16:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:12:36 2026 by rpki-client