Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/bc259385-8ad7-3eae-b90e-3d9bca58b34a.roa
File:                     bc259385-8ad7-3eae-b90e-3d9bca58b34a.roa (raw, json)
Hash identifier:          krIwYTuyOTaFiomDOdnMeJXdni8S7C3tMv5xD03sw3Q=
Subject key identifier:   34:78:C8:27:66:89:A7:D5:D0:A1:48:D7:81:0C:16:81:4A:68:B4:21
Certificate issuer:       /CN=7a2be303-4525-4433-b220-b1c6b5052945
Certificate serial:       010D0C9F4328584F2957B873222CF745646B8E80
Authority key identifier: 70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/bc259385-8ad7-3eae-b90e-3d9bca58b34a.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     22843
IP address blocks:        208.56.12.0/24 maxlen: 24
                          208.56.13.0/24 maxlen: 24
                          208.56.14.0/24 maxlen: 24
                          208.56.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:b8:73:22:2c:f7:45:64:6b:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a2be303-4525-4433-b220-b1c6b5052945
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=76cbd8f2-8eed-451a-93ff-40a294540073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:24:a8:3d:fb:4d:58:7e:7f:2d:e8:ae:5f:3d:
                    08:d5:ae:53:4b:f0:c3:e7:4f:1a:4e:c6:49:62:17:
                    07:10:c8:43:5c:bb:cb:bf:ef:4e:47:b4:f8:2f:0f:
                    bf:c9:b4:e4:9d:6a:fe:02:52:6a:38:ac:3a:ff:2c:
                    57:61:08:7a:f2:60:03:65:a1:eb:d8:8a:46:1f:a9:
                    b5:e6:9b:8d:fe:e0:33:60:92:48:73:cb:2c:a5:91:
                    d8:17:cb:05:82:2a:85:55:62:e8:fb:8e:5a:2e:a5:
                    18:96:33:e7:6d:8b:54:a9:ff:7f:0f:5e:7b:34:1c:
                    0f:62:6c:28:ff:72:f1:82:09:cf:ef:74:91:de:24:
                    6c:6e:b2:a0:8f:44:ad:82:8b:8d:16:7a:a0:9d:a4:
                    c1:3f:c2:da:a0:4d:5d:30:62:6a:8a:39:f6:68:71:
                    87:72:e6:28:9a:93:1c:d7:94:8e:c3:c5:d6:a6:dc:
                    e2:10:b3:94:e9:ed:cd:01:fb:90:8d:45:1e:7d:38:
                    03:b4:42:6a:aa:ec:83:ff:73:73:80:a0:9a:90:40:
                    b4:a4:c6:01:aa:b7:48:4d:9d:0f:77:cc:8c:79:50:
                    1d:66:f1:24:6c:5f:ce:3c:32:72:40:28:ea:2a:40:
                    54:2f:0b:83:f9:83:f7:83:12:c2:b6:b0:78:90:f8:
                    12:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:78:C8:27:66:89:A7:D5:D0:A1:48:D7:81:0C:16:81:4A:68:B4:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/bc259385-8ad7-3eae-b90e-3d9bca58b34a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl

            X509v3 Authority Key Identifier:
                keyid:70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.56.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:16:a1:00:4e:66:d5:4b:da:ed:cc:c1:f5:17:bb:86:8f:70:
         93:08:6d:04:77:23:10:5a:c5:56:40:08:35:1a:c5:1b:d9:6f:
         e4:3a:46:a6:48:b8:c2:b8:13:63:0b:c8:89:8f:8b:e7:cb:a2:
         90:83:b0:47:37:df:75:5a:59:84:01:2d:c9:d7:85:ae:ee:12:
         0f:8c:5c:49:e7:14:79:df:ad:da:09:e6:ba:0f:4d:0e:da:50:
         b6:bb:02:bd:dd:7e:e6:48:4f:ab:2c:b1:75:4a:86:22:f2:d8:
         eb:83:89:a1:17:70:25:ed:b0:20:13:71:8f:88:40:2d:b8:fd:
         86:1c:ca:3d:60:aa:a2:11:68:83:cd:76:ca:52:4f:49:88:fa:
         2a:21:6f:96:f3:92:3d:d3:f2:b4:de:6e:4a:68:3e:dc:ec:de:
         e7:a2:f0:d5:88:fe:71:b5:da:f1:4b:3e:c0:a7:63:f0:0a:e2:
         f9:19:62:c9:32:c5:b0:32:9e:1a:9f:b7:ce:82:07:86:1d:3f:
         01:cd:4f:89:18:81:d7:37:32:1c:f3:27:47:0f:8d:ca:bd:0d:
         03:e0:d8:b5:59:30:76:90:bb:a9:66:ff:5f:1b:23:c6:3f:b8:
         7d:de:78:3c:f1:e7:40:27:28:96:aa:84:57:c6:86:78:76:7a:
         6c:f4:b2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:52:45 2026 by rpki-client