Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/12213f9b-00c6-35c4-84a6-0964642f7e08.roa
File:                     12213f9b-00c6-35c4-84a6-0964642f7e08.roa (raw, json)
Hash identifier:          gzmUJVFsRYwxLTIr9ZNWw0etaUXIqDRCj/mSrfyp2Q0=
Subject key identifier:   46:E8:9E:C0:C4:04:84:B6:64:80:C3:92:B2:62:AD:AD:B1:73:61:31
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584E94EA4DE0AC9CABB05A3B98E0
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/12213f9b-00c6-35c4-84a6-0964642f7e08.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     22781
IP address blocks:        216.131.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:4d:e0:ac:9c:ab:b0:5a:3b:98:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=38fdb962-a414-400b-a90b-cf4b954d69e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:39:7b:f1:23:fe:f7:a6:16:12:e5:f0:72:99:
                    59:a3:c5:7b:2b:3d:cf:11:35:f4:15:c6:ce:9e:5b:
                    71:39:13:59:d8:15:e5:43:08:32:89:a3:21:0d:50:
                    08:b3:08:e0:f5:80:30:40:b1:7e:89:42:97:4f:d6:
                    36:1d:4a:66:2a:9f:da:dd:88:1c:91:0a:cf:78:15:
                    32:d9:57:41:05:85:00:f7:69:c7:c9:53:f6:27:16:
                    55:34:7c:07:c5:14:ea:94:2c:91:43:6c:d2:ff:26:
                    7c:a8:ba:fb:64:94:3a:5c:b8:6f:5f:37:ef:87:28:
                    85:e4:a8:84:9f:6b:a4:e0:91:a2:2d:f9:dd:60:9e:
                    60:cf:4e:52:c6:fe:37:cc:c6:85:a4:91:c1:19:e6:
                    48:3c:e3:26:6b:86:66:c8:5d:d3:73:39:ad:46:b1:
                    08:3e:2f:42:1b:e2:7b:30:05:4a:56:1e:b5:95:af:
                    cc:84:3e:4b:54:a1:72:3a:76:2f:2c:cc:86:4c:79:
                    ea:bb:ac:37:21:c5:a9:5e:33:e1:4a:81:30:93:8c:
                    51:16:e8:63:23:d1:17:a1:5f:8d:77:48:61:09:a4:
                    9f:f7:c3:b3:e9:5c:23:09:22:c9:62:8b:71:bc:1f:
                    ae:d5:48:57:06:c8:e3:fe:5c:de:4f:4d:20:f8:09:
                    dd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:E8:9E:C0:C4:04:84:B6:64:80:C3:92:B2:62:AD:AD:B1:73:61:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/12213f9b-00c6-35c4-84a6-0964642f7e08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.131.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:13:76:41:b4:ff:99:0e:71:d3:9f:ca:9c:0d:27:6d:78:b4:
         37:4b:cd:37:ed:76:e5:f4:3c:d8:a7:53:63:bb:68:17:6e:eb:
         6d:d0:a1:1f:b4:7a:fb:20:60:80:49:19:f0:1b:2f:57:9a:70:
         bf:87:e5:86:b1:e7:e4:74:65:d4:31:7b:48:8a:92:84:91:20:
         42:fa:a6:58:63:2e:e8:d3:d2:d7:a0:28:47:95:6b:b0:1f:df:
         6d:db:61:08:3c:3a:96:20:4e:41:43:07:3b:e0:db:c1:84:02:
         2f:cb:c6:f0:46:b5:9f:12:4c:bf:02:37:57:2b:22:85:7a:4b:
         6d:1f:e4:93:12:8e:e6:fd:c5:ca:6e:97:a9:22:8f:c6:48:71:
         e8:4c:0c:f1:be:d7:ee:60:e7:af:0a:2f:34:7a:cb:a1:7b:0c:
         d1:b3:72:11:d3:f2:4c:ac:94:9f:29:c5:9d:28:fd:78:5c:3b:
         68:12:58:d7:fd:c6:88:23:03:a0:d4:ad:9a:19:2c:80:b3:4f:
         f5:85:fb:5b:7d:b6:e6:d7:43:70:96:0d:51:46:64:49:bf:76:
         8e:14:35:0b:56:d9:52:9c:a9:a4:9e:d9:66:cf:18:d7:30:0f:
         06:af:13:fe:01:23:11:13:ba:17:84:15:49:99:cc:7d:39:3a:
         b0:fb:64:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:20:55 2026 by rpki-client