Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/12e4557d-aa8b-3a8e-8c88-7dbd42860d82.roa
File:                     12e4557d-aa8b-3a8e-8c88-7dbd42860d82.roa (raw, json)
Hash identifier:          yR7BbmqZSPVQdOZk0Ne59V5ZySHKeX7aB92VEIrAb5I=
Subject key identifier:   94:1C:94:B9:0A:33:03:83:50:5C:81:F4:0F:B8:81:73:84:F5:53:4F
Certificate issuer:       /CN=0f950b17-8345-41e7-bf75-5481729a0012
Certificate serial:       010D0C9F4328584D44FA223B41CC2526954B5CA0
Authority key identifier: 56:3C:2B:FC:3E:FC:B4:79:C4:82:D7:6A:DE:DE:73:30:B0:B3:B6:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/12e4557d-aa8b-3a8e-8c88-7dbd42860d82.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     32723
IP address blocks:        216.6.152.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:22:3b:41:cc:25:26:95:4b:5c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f950b17-8345-41e7-bf75-5481729a0012
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=90e00cb2-a97f-4e67-87e4-c8744677a670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c1:99:26:0d:3f:69:27:c6:b7:f3:2e:32:7a:
                    ec:1e:3e:ec:86:81:4e:2b:8a:18:ad:2a:cd:1f:6e:
                    3a:a2:81:11:32:4a:da:c4:49:e5:80:6b:03:53:fb:
                    62:7a:a4:cd:fd:d2:d6:da:1b:d9:49:10:73:76:8c:
                    8c:06:8e:67:32:57:16:6f:9a:fd:36:af:c7:f2:c4:
                    c1:f6:da:e8:29:4b:66:00:26:32:14:a9:9d:e1:21:
                    0b:73:8c:67:f5:0c:c0:a0:1f:8f:43:7b:e2:68:11:
                    2c:b5:0c:70:62:4d:96:cc:2f:cb:ba:6a:23:69:fb:
                    d9:37:eb:aa:1c:2d:e8:a7:a9:29:5e:5a:3e:af:e5:
                    ba:1b:a0:f2:49:c5:2c:ba:24:63:fa:43:0c:95:14:
                    e3:32:73:e7:94:6d:74:09:19:27:e1:92:99:7d:1d:
                    33:01:46:68:6a:62:b8:d8:5c:04:57:9b:6d:f3:c4:
                    79:3c:6b:42:19:a2:0e:34:75:4f:aa:96:49:16:b0:
                    e3:8e:10:f4:81:18:be:0e:87:e4:51:72:81:87:5a:
                    6f:41:e4:e9:67:a1:63:b9:c8:6f:69:71:a4:ec:2a:
                    40:79:90:8b:9d:f0:46:43:e1:b6:fc:f5:69:6b:b9:
                    9c:2b:fd:6c:84:76:85:29:c0:1e:e6:a6:15:7e:6e:
                    6d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:1C:94:B9:0A:33:03:83:50:5C:81:F4:0F:B8:81:73:84:F5:53:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/12e4557d-aa8b-3a8e-8c88-7dbd42860d82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.crl

            X509v3 Authority Key Identifier:
                keyid:56:3C:2B:FC:3E:FC:B4:79:C4:82:D7:6A:DE:DE:73:30:B0:B3:B6:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.6.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:d3:d1:60:e9:c6:cd:df:2a:b1:20:d4:7c:3a:22:b1:22:19:
         8a:b8:19:47:ef:a8:46:54:8d:13:d7:c2:75:68:a7:29:d1:13:
         da:1a:a1:71:07:4d:07:e9:18:6e:ea:3c:1a:61:1c:71:21:f2:
         87:4b:bb:7d:02:3d:27:20:e0:13:46:d1:24:fd:8c:ac:0a:c2:
         7f:e4:1c:8c:6d:93:fe:76:19:d6:ab:b6:32:6a:bf:09:50:9a:
         38:2a:e8:42:13:24:84:08:9c:76:cb:9f:ef:46:63:60:7b:4e:
         77:ce:6a:d9:6f:50:5a:45:f9:8f:0d:bd:58:46:81:0b:30:ee:
         89:6b:51:4d:69:18:8a:07:4f:55:77:66:59:2c:ed:24:05:a2:
         38:e1:19:89:fb:ef:cf:68:27:2c:2a:e0:4b:83:31:f2:ac:6d:
         0b:f2:e8:98:ce:54:a8:78:fe:81:ce:e0:f8:b2:79:64:19:02:
         62:4e:f1:5e:fa:fc:fe:0d:1a:03:73:c1:86:d4:4a:df:09:4a:
         15:f8:8a:42:16:2c:df:f0:3f:f6:0c:75:b1:af:52:16:a3:c0:
         ee:b5:57:6f:8d:b7:07:68:03:81:f3:f5:ff:34:b0:52:eb:dd:
         0a:63:1c:e2:77:2e:43:df:33:00:74:8b:d8:7e:51:cc:9c:6f:
         ff:d4:2f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:31:38 2026 by rpki-client