Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/bc995750-bfcc-329e-b760-035f5c206e0c.roa
File:                     bc995750-bfcc-329e-b760-035f5c206e0c.roa (raw, json)
Hash identifier:          jSZo4pF+0exLwGnczs13n1lqkCn2sXxrve3c/lhyJrc=
Subject key identifier:   63:61:37:F0:FF:15:75:66:CD:EA:6C:E8:13:FC:23:91:63:39:A5:29
Certificate issuer:       /CN=4f969783-3e35-479d-b0e7-e3dac0caf9f9
Certificate serial:       010D0C9F4328584DCF20BE8DE93ED0556C2ABB00
Authority key identifier: 6F:92:C9:1A:75:B4:6C:E7:A5:1E:A5:24:23:16:63:55:0D:03:40:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/bc995750-bfcc-329e-b760-035f5c206e0c.roa
Signing time:             Tue 12 May 2026 12:39:53 +0000
ROA not before:           Tue 12 May 2026 12:39:53 +0000
ROA not after:            Mon 10 Aug 2026 12:39:53 +0000
asID:                     21669
IP address blocks:        209.212.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:20:be:8d:e9:3e:d0:55:6c:2a:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f969783-3e35-479d-b0e7-e3dac0caf9f9
        Validity
            Not Before: May 12 12:39:53 2026 GMT
            Not After : Aug 10 12:39:53 2026 GMT
        Subject: CN=1a175b87-6d12-4529-a40a-b5f09ed4c2f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e3:98:26:98:ee:41:30:4c:e3:14:9b:4f:6c:
                    bd:96:be:94:75:30:83:f1:0a:0a:05:70:84:93:e3:
                    7d:13:19:ef:a4:ef:e7:b5:48:72:5f:6e:5a:81:fa:
                    5b:d6:7d:6b:7e:ff:b2:29:b6:69:ad:33:9a:71:0d:
                    70:c1:e8:d2:72:4f:da:c9:3a:50:f6:19:e4:47:38:
                    9d:52:ed:52:1c:bf:6f:63:58:f2:bb:e2:72:ff:a0:
                    2b:71:2c:5c:d7:24:5b:02:52:02:80:4d:2c:b6:f8:
                    ed:ab:cc:c5:5b:16:e3:56:5a:ba:31:39:2a:95:9a:
                    0c:93:1b:94:16:3e:3b:52:b1:98:9f:53:f4:27:f0:
                    64:e6:7c:b1:9a:43:90:48:60:19:22:cd:3a:d3:23:
                    29:68:80:ae:99:9f:0b:e7:6d:52:b6:a4:37:d7:5b:
                    4c:62:ac:4c:e8:06:07:88:d3:81:b7:47:6d:26:10:
                    e8:e0:45:94:82:d3:e5:39:d6:07:6a:7e:53:81:e2:
                    28:6c:d3:ca:6c:57:e7:b4:d0:d8:d1:a8:ae:db:f6:
                    30:a2:07:48:1e:ab:f8:2c:61:e4:df:34:a4:77:0f:
                    6c:11:56:bf:45:ef:60:ff:63:ae:cf:c2:78:12:44:
                    d7:0e:99:e0:bd:17:9e:82:9f:f0:75:07:9f:a7:a4:
                    8e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:61:37:F0:FF:15:75:66:CD:EA:6C:E8:13:FC:23:91:63:39:A5:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/bc995750-bfcc-329e-b760-035f5c206e0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.crl

            X509v3 Authority Key Identifier:
                keyid:6F:92:C9:1A:75:B4:6C:E7:A5:1E:A5:24:23:16:63:55:0D:03:40:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.212.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:48:88:0c:bc:06:fe:df:4f:bb:03:bf:8d:3b:35:73:14:ab:
         2d:31:2f:36:3c:58:b3:3d:7b:38:1b:6c:bc:eb:de:7f:f8:5f:
         44:af:b6:a0:ca:96:d2:da:df:d9:df:f9:1c:bf:0e:f3:3e:c7:
         00:00:42:ce:d4:ab:71:e3:f0:78:d1:0d:6a:df:8b:45:ad:c4:
         9d:31:82:0b:c2:8f:af:8b:c3:ec:70:99:8f:4c:a8:47:89:49:
         5d:c3:9c:8c:56:e6:27:6a:10:82:ed:2e:05:21:b0:19:0e:7d:
         5b:b2:bf:36:9f:a0:31:1e:1c:93:e1:09:d2:9e:6b:7e:09:0d:
         c2:56:31:cf:06:c6:41:9e:6b:0c:af:45:97:02:19:5e:9e:4c:
         15:69:24:df:cf:d5:37:69:a5:6b:52:91:b3:54:49:ce:ad:d4:
         fd:41:37:80:5f:18:aa:10:cf:e2:bd:d0:f7:e3:34:53:1a:23:
         de:2b:ea:4c:8c:7d:b0:78:44:d9:a5:76:85:c6:da:1a:3b:e1:
         e5:6d:64:d1:c1:30:e6:6a:e6:63:2a:99:00:0f:75:92:31:fb:
         25:9f:b7:ea:39:25:01:31:3f:70:f2:49:0a:20:ac:f7:43:19:
         03:6e:70:b3:e6:b3:77:b5:31:bc:63:fa:1d:e5:bf:5f:32:e4:
         31:99:bf:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:25:38 2026 by rpki-client