Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/4cc687d1-bbac-31a6-9cc3-4ba41f78e1e5.roa
File:                     4cc687d1-bbac-31a6-9cc3-4ba41f78e1e5.roa (raw, json)
Hash identifier:          DiPhUgipLUSX2kT/Hw1kz/t2pr8gwDtlOrIunz22z0A=
Subject key identifier:   0A:67:B6:FB:F8:B2:AD:32:1D:24:AE:F9:DB:F2:EA:B0:35:F1:1E:93
Certificate issuer:       /CN=1f0496a8-0ca9-45ec-820f-8e88c36e58b0
Certificate serial:       010D0C9F4328584DCDC5A60EDD950C1593D8D680
Authority key identifier: 05:D9:B2:96:82:27:BD:F9:0D:F7:EF:51:3A:A8:D0:AB:C5:A1:D5:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/4cc687d1-bbac-31a6-9cc3-4ba41f78e1e5.roa
Signing time:             Tue 12 May 2026 01:00:24 +0000
ROA not before:           Tue 12 May 2026 01:00:24 +0000
ROA not after:            Mon 10 Aug 2026 01:00:24 +0000
asID:                     394840
IP address blocks:        199.34.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cd:c5:a6:0e:dd:95:0c:15:93:d8:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f0496a8-0ca9-45ec-820f-8e88c36e58b0
        Validity
            Not Before: May 12 01:00:24 2026 GMT
            Not After : Aug 10 01:00:24 2026 GMT
        Subject: CN=6c4d2f26-7b97-4f3f-b1bf-b75772ecef5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:aa:4b:6d:6b:b4:10:b2:bb:e7:c6:b1:f9:29:
                    fd:c6:47:9f:02:e4:a5:a8:11:2b:39:1b:1a:ab:5b:
                    be:ab:86:80:9e:92:ea:f6:53:e3:56:83:6a:80:26:
                    77:8d:5b:f8:65:f1:59:1d:e1:fe:c5:5b:75:06:0a:
                    77:72:64:7a:d4:2e:11:b1:c0:d7:76:4e:3b:17:64:
                    76:20:d2:7f:3c:44:12:d0:49:f1:26:0a:30:8b:c6:
                    e2:15:d5:e1:3c:f0:0e:1b:1a:9a:29:f0:f5:f2:d5:
                    c1:60:19:66:e1:fc:8c:92:66:7b:51:a6:ee:82:7a:
                    fa:e0:c4:2c:a7:3a:33:82:c9:bf:57:29:cf:36:08:
                    a8:40:be:75:ce:60:c4:14:f9:44:3c:45:dc:d8:76:
                    ac:75:24:30:33:2a:ae:09:ac:40:28:f1:bc:45:5f:
                    a2:c2:c8:a6:92:54:03:4b:38:6b:12:1a:9f:de:38:
                    09:5b:26:0e:f2:da:36:c2:ef:63:72:7e:b8:c1:23:
                    c6:b4:c4:8b:d5:33:86:1d:c2:cc:34:ba:45:49:59:
                    bd:59:e3:fa:0d:62:65:68:5b:88:70:1f:90:29:04:
                    7d:ed:d5:a0:d3:36:0b:fa:0b:98:26:d0:34:d5:7b:
                    7e:bb:1a:f6:d9:4b:66:66:8d:cd:f6:a5:41:ed:b8:
                    a2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:67:B6:FB:F8:B2:AD:32:1D:24:AE:F9:DB:F2:EA:B0:35:F1:1E:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/4cc687d1-bbac-31a6-9cc3-4ba41f78e1e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.crl

            X509v3 Authority Key Identifier:
                keyid:05:D9:B2:96:82:27:BD:F9:0D:F7:EF:51:3A:A8:D0:AB:C5:A1:D5:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.34.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:af:b8:23:75:b0:82:d1:a6:54:e8:46:08:9a:fc:18:5e:b1:
         fd:cb:c3:c5:b2:4e:96:29:fc:13:57:a3:57:e6:c0:42:69:05:
         5e:02:b6:68:09:76:13:58:dc:8b:c4:66:d0:77:f2:85:a3:5e:
         95:2f:b2:7b:50:13:3c:6f:6e:1d:08:87:2c:36:9e:01:3a:0d:
         8e:c1:66:78:ae:03:db:51:a3:dc:de:b5:23:c5:65:cc:da:be:
         49:e8:a6:4b:f5:21:db:91:b5:0f:63:45:fa:68:58:f9:5c:8d:
         5d:7e:91:9e:e7:78:26:95:d7:af:af:d7:41:19:9d:c3:4f:e3:
         98:15:0e:6c:cb:25:c7:d6:18:8c:22:47:de:f8:8f:a2:42:48:
         1d:11:09:a1:42:bc:23:e3:d0:d6:8f:72:2d:73:12:b1:08:1c:
         5a:7d:1c:fb:15:38:24:43:c7:ff:64:09:9d:b7:2d:52:59:52:
         ae:78:bb:79:9e:df:85:5b:aa:87:7e:e8:fb:96:5c:4b:28:7c:
         35:eb:68:6e:37:40:bf:f3:9a:df:81:ce:c4:30:8e:8e:7f:92:
         51:a6:2e:0f:a6:ad:52:68:c2:73:3a:26:91:09:cb:79:c3:7b:
         bf:60:57:83:47:12:6d:a9:e5:6c:c7:32:1b:94:d6:f7:d5:bf:
         7d:a6:53:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:02:56 2026 by rpki-client