Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/f562549d-9cd5-3fb4-9413-8758db119327.roa
File:                     f562549d-9cd5-3fb4-9413-8758db119327.roa (raw, json)
Hash identifier:          QFVYdVcUFuln6wpujz58AkyGmvB4VjCIyeFd+XoGYH4=
Subject key identifier:   7E:57:91:9D:B9:B4:1B:D5:23:FB:51:E7:02:8D:B6:C9:0B:10:2C:0C
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F4328584D24E0F27465EF3F655DA2BF00
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/f562549d-9cd5-3fb4-9413-8758db119327.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     36492
IP address blocks:        172.102.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:f2:74:65:ef:3f:65:5d:a2:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=f4879c57-f4c7-419c-b34f-dd4267d7bca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:94:98:ec:76:2f:84:d6:6c:3d:38:89:db:d8:
                    dd:aa:de:de:ee:fe:0c:f4:7b:87:e4:75:25:58:75:
                    78:c1:a6:8b:05:11:25:a1:06:62:8b:9b:2a:f8:13:
                    ed:89:61:47:f6:c2:06:09:47:c1:f5:6a:ce:9b:5c:
                    d6:45:ff:e0:9c:cf:54:b1:d0:c5:e8:7c:55:38:32:
                    81:12:f0:89:8d:33:da:de:b1:1d:04:5c:1a:50:15:
                    bd:e6:22:ec:86:5b:82:e6:2a:bb:da:cd:f6:d7:e9:
                    7b:bf:9e:7e:27:9a:74:c6:4f:c5:c8:42:38:3e:c7:
                    3a:1c:61:c0:21:de:f0:51:0f:e2:4b:36:93:f4:0d:
                    29:59:95:98:4f:80:e6:11:69:d4:83:4c:72:76:95:
                    7c:b4:90:d6:65:c0:a1:41:ac:82:3d:ea:21:62:98:
                    71:c2:10:ff:c6:ff:7f:c4:52:c5:f8:f0:f0:51:38:
                    14:f4:11:eb:00:c2:4d:99:cc:0e:9d:6d:fe:3f:28:
                    03:1d:59:93:15:38:b1:20:d1:22:0a:69:cb:38:c9:
                    20:0b:de:af:db:cf:02:25:5b:2e:ad:6d:59:9a:64:
                    37:d0:04:e2:1f:56:af:0d:4c:ed:40:cf:73:af:ab:
                    3b:54:92:f3:21:30:5f:8b:7f:af:01:9e:fb:b0:8b:
                    49:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:57:91:9D:B9:B4:1B:D5:23:FB:51:E7:02:8D:B6:C9:0B:10:2C:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/f562549d-9cd5-3fb4-9413-8758db119327.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.102.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:b7:72:b9:dd:86:af:b3:e5:ae:5e:b9:78:46:31:ef:e6:62:
         9f:ed:4e:da:ba:36:44:f9:2f:88:d9:a4:f9:07:bb:18:38:5a:
         e7:b0:cc:2d:06:ab:2c:1e:6c:c3:b7:bd:e2:f8:bf:68:f8:09:
         ee:4d:f8:ff:af:0a:cc:da:39:b6:de:32:a1:4e:53:98:e1:99:
         40:28:c3:5c:68:14:81:99:bb:61:3e:70:99:bf:94:ed:36:f3:
         f0:86:cf:89:be:dc:da:3c:54:66:34:e1:a9:c2:cf:76:5e:11:
         db:f9:58:a1:fd:a5:26:27:2d:0f:c6:7e:e0:39:fb:19:7d:ea:
         e4:fc:1e:08:55:d6:6c:59:28:2a:b9:ae:65:46:2b:5b:4a:f2:
         d1:64:7f:0e:8f:3b:bb:5c:69:05:02:b1:a0:9d:c3:50:1b:e6:
         ce:0f:6d:ab:d1:98:8e:34:ef:2d:74:ac:71:75:31:44:81:82:
         28:01:43:f2:c2:6a:1d:bf:22:6d:1d:d4:fc:19:b2:eb:96:d2:
         8e:b5:03:1f:1b:df:6e:ad:c5:9e:62:82:44:e9:37:5f:3d:ba:
         2c:90:01:0c:f7:7a:9e:00:3c:1b:35:27:fc:26:17:1d:7b:95:
         86:7b:b9:17:4d:ab:c2:cf:f0:f6:81:39:3f:39:47:a9:65:1a:
         4e:1c:0a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:36:25 2026 by rpki-client