Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d/e3f90798-4d0b-35b9-9faf-054317f07492.roa
File:                     e3f90798-4d0b-35b9-9faf-054317f07492.roa (raw, json)
Hash identifier:          1r1ZI8ACV96+YrCfFSoO+44uaD8BHjiscph8lZOnpQw=
Subject key identifier:   07:58:AE:70:AB:99:8E:EF:B7:08:00:6F:20:0F:8D:08:32:91:00:60
Certificate issuer:       /CN=346617ca-4f52-474c-98c9-d2f2abe7bf8d
Certificate serial:       010D0C9F4328584F393631BC03BF60D411298500
Authority key identifier: 91:7D:DE:F2:23:FE:A4:86:60:27:5B:D9:11:0F:6E:26:F5:2E:A1:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d/e3f90798-4d0b-35b9-9faf-054317f07492.roa
Signing time:             Sat 19 Sep 2026 05:25:43 +0000
ROA not before:           Sat 19 Sep 2026 05:25:43 +0000
ROA not after:            Fri 18 Dec 2026 06:25:43 +0000
asID:                     29120
IP address blocks:        143.58.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d/346617ca-4f52-474c-98c9-d2f2abe7bf8d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d/346617ca-4f52-474c-98c9-d2f2abe7bf8d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:39:36:31:bc:03:bf:60:d4:11:29:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=346617ca-4f52-474c-98c9-d2f2abe7bf8d
        Validity
            Not Before: Sep 19 05:25:43 2026 GMT
            Not After : Dec 18 06:25:43 2026 GMT
        Subject: CN=0dd4fddf-1211-4c76-8c34-4dd7e0acbee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b1:f2:47:0a:45:27:ff:03:c6:ca:6c:64:3d:
                    32:ec:f9:3f:f1:60:55:49:c3:e2:dd:23:22:94:8c:
                    db:b6:1c:5c:56:d0:93:96:b6:52:02:92:5f:aa:be:
                    ad:ab:3e:9b:10:fd:75:f0:51:cf:5e:a7:b0:5b:2b:
                    fd:38:0c:a9:82:07:4c:67:d8:78:17:b4:76:ed:24:
                    d4:63:71:52:39:9f:97:14:ea:29:58:83:3a:3a:a2:
                    ba:32:29:ae:73:45:05:31:f2:ca:41:19:02:51:b5:
                    76:ed:d1:a7:70:b2:2c:7b:8c:99:b6:0d:3f:18:89:
                    23:bb:3e:69:51:9e:1f:09:c7:5e:b2:5c:01:fd:b7:
                    fa:7a:16:37:e0:02:24:e3:1c:ba:8a:ca:91:ae:98:
                    25:79:64:82:92:d8:a6:75:28:99:73:1e:ad:f5:09:
                    9f:c4:d1:15:30:76:9d:44:11:0d:e6:53:53:ad:ed:
                    43:c5:e3:0e:ce:61:39:3d:0a:84:44:ad:2f:0a:f4:
                    91:62:1a:82:46:7c:7c:46:71:4f:66:04:84:bc:75:
                    93:67:df:1c:0d:8f:5d:cb:53:bc:21:92:61:3d:66:
                    ae:c1:04:66:e3:f9:f4:8e:27:9d:45:c2:b0:0c:4b:
                    db:b1:96:3d:66:2f:3e:ea:f5:d5:af:e7:1b:71:93:
                    2d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:58:AE:70:AB:99:8E:EF:B7:08:00:6F:20:0F:8D:08:32:91:00:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d/e3f90798-4d0b-35b9-9faf-054317f07492.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d/346617ca-4f52-474c-98c9-d2f2abe7bf8d.crl

            X509v3 Authority Key Identifier:
                keyid:91:7D:DE:F2:23:FE:A4:86:60:27:5B:D9:11:0F:6E:26:F5:2E:A1:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.58.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:95:8d:be:ec:fd:cb:a1:af:19:4d:aa:f3:a1:2c:b5:39:00:
         45:4a:58:76:18:76:d9:24:31:89:67:23:03:4c:17:9c:95:cd:
         12:d2:f0:75:ed:64:12:5d:eb:54:90:1a:ec:ab:c6:b3:ef:0b:
         c9:31:0b:ac:b4:3c:e9:a5:31:7e:85:94:4c:79:7c:5a:4f:c3:
         73:8e:99:b5:30:5f:ba:a7:2b:99:8f:57:5e:ac:da:98:db:11:
         05:2c:0f:0a:09:60:5d:53:a2:db:b0:2e:25:82:30:b7:ea:ec:
         c3:52:7e:ff:6c:1e:a5:4c:2f:77:1e:f4:60:c8:e6:d5:62:47:
         b3:d9:4a:81:d3:bd:a9:dd:ce:d5:3f:be:8f:50:43:ed:b9:df:
         80:18:c9:7c:5d:8c:3b:d6:b0:94:fe:30:f5:64:cd:b8:4c:f6:
         9b:0b:c5:59:57:bb:7d:4a:57:25:0c:19:76:da:c7:e1:be:b6:
         90:c7:5c:b1:04:27:18:cc:7e:93:01:2e:57:31:92:97:23:65:
         fc:1c:b6:38:87:31:23:3a:c3:e2:fc:90:3a:83:7d:ae:da:38:
         9e:57:73:74:43:c7:86:17:fc:77:09:69:15:4f:58:e0:76:d9:
         04:45:4b:1b:b3:10:6c:25:34:45:1d:54:8f:64:21:cb:8e:72:
         76:e8:2a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:58:58 2026 by rpki-client