Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/72ea9654-6e11-38af-9a09-c95f74175c2e.roa
File:                     72ea9654-6e11-38af-9a09-c95f74175c2e.roa (raw, json)
Hash identifier:          UHC1CtGXi8lwBHA5dQqygPwRWozSj7teCS/6yK6LvPE=
Subject key identifier:   7F:18:B3:92:42:C6:3E:48:79:A0:E0:83:8F:1A:AA:F3:EA:93:3D:E2
Certificate issuer:       /CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
Certificate serial:       010D0C9F4328584D40CA547184E0B8717E2DA400
Authority key identifier: 09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/72ea9654-6e11-38af-9a09-c95f74175c2e.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     397041
IP address blocks:        134.195.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:54:71:84:e0:b8:71:7e:2d:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=8ff49220-df03-4d10-93f8-e63733d349f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:71:a6:62:55:a5:3c:4f:f5:0f:b0:ae:83:1e:
                    a7:64:80:ca:87:93:35:d7:67:4b:56:71:d8:72:e5:
                    70:f3:ea:72:f3:90:fb:e5:b7:39:67:67:86:a3:0f:
                    39:a9:ce:9e:c5:16:fb:49:76:ee:9c:d5:d5:d5:45:
                    d2:f8:bd:10:a1:5b:c3:66:c9:e3:48:58:10:85:e7:
                    64:2f:a0:bc:f8:d8:9f:a9:3b:46:e4:58:3f:78:0f:
                    9c:8d:44:6e:7f:dd:f8:03:bf:d9:b4:1b:21:d0:5f:
                    4c:61:f5:c4:b3:2d:7f:17:a2:cd:1e:f1:0f:8d:c0:
                    36:ae:16:ec:6e:7b:87:e7:e8:df:ae:2d:22:1b:44:
                    ac:6c:1d:42:1f:0b:22:db:55:f4:54:c0:b4:16:97:
                    1c:d1:ff:a1:5f:4a:04:eb:74:74:07:4a:ba:14:4a:
                    f1:17:94:f2:8b:e7:5c:c7:09:4c:57:58:6d:49:bc:
                    e0:de:2a:d3:0a:6b:11:ce:9b:1c:a8:c9:2b:eb:67:
                    d5:dd:e7:05:54:7e:55:54:7d:43:a3:15:3a:5a:ec:
                    84:25:34:0a:b7:4d:8b:9c:f7:57:80:ce:bc:bf:0c:
                    c4:e1:65:be:91:68:c4:9e:92:4d:14:bd:9c:a4:2b:
                    f3:1c:de:c5:92:c3:ff:ac:ea:4f:87:a8:97:8f:fc:
                    97:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:18:B3:92:42:C6:3E:48:79:A0:E0:83:8F:1A:AA:F3:EA:93:3D:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/72ea9654-6e11-38af-9a09-c95f74175c2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl

            X509v3 Authority Key Identifier:
                keyid:09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:83:6f:44:5e:80:e0:b0:f1:02:02:e6:90:39:34:70:fa:dc:
         d3:cc:92:de:bb:df:1a:89:68:ce:18:d1:3d:64:6c:5f:60:dc:
         a2:fe:c0:7e:20:6f:0a:f2:6d:b7:19:0f:aa:1b:ed:c3:86:b9:
         f0:c5:c5:61:b5:f5:bf:4e:99:aa:2d:c9:17:09:06:44:75:31:
         a7:62:65:4e:c2:c4:b5:ad:29:88:46:b8:07:41:fa:70:fb:b0:
         61:c7:75:14:63:5f:92:9a:33:85:a5:bc:7f:86:4d:a2:76:6e:
         8f:85:87:d9:3b:d2:31:e8:57:55:82:8f:4f:3c:45:5a:71:47:
         0f:54:2c:7a:a9:8f:ed:7b:41:c6:5d:bf:1d:11:5c:f4:36:36:
         92:a8:26:75:35:1c:49:e9:fb:5d:d9:44:3f:03:fe:7d:1c:ba:
         67:b7:b7:f1:eb:7c:53:7a:e1:d3:40:6a:8c:4a:e3:f6:5e:48:
         e7:75:42:e3:87:97:a2:45:0f:75:94:dd:a7:b0:4c:4a:50:f9:
         bd:9d:42:2c:84:7f:8d:63:de:d6:1b:91:a9:fb:e1:40:74:68:
         e7:f0:1f:34:fd:66:82:d9:ec:73:46:ca:4c:67:f2:be:41:0c:
         3d:c1:f1:d6:c3:00:dd:e6:8d:95:40:29:60:63:41:2e:12:62:
         65:50:d4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:20:12 2026 by rpki-client