Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/0ea427a0-fbec-3443-bf3a-e857d1fcf4e4.roa
File:                     0ea427a0-fbec-3443-bf3a-e857d1fcf4e4.roa (raw, json)
Hash identifier:          K+EP8elQm6YAHHE7NMyacx6jxPWL9YIECaZ7WDabNPM=
Subject key identifier:   AC:5D:F2:C7:37:B6:F1:B1:A3:21:02:57:FC:18:8F:9A:17:A3:D0:81
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584B0A11645B2B03ABA3790C2500
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/0ea427a0-fbec-3443-bf3a-e857d1fcf4e4.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     400210
IP address blocks:        12.175.174.0/23 maxlen: 24
                          12.203.8.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:64:5b:2b:03:ab:a3:79:0c:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=f9187ac8-84ea-48d6-88b6-f6a70df7cc9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1a:47:3c:4a:dc:88:10:0e:5d:9d:46:27:b8:
                    51:6b:2b:58:78:79:77:30:71:7b:87:3d:4d:17:f3:
                    e9:d4:d5:6c:c4:53:f3:24:d2:55:64:d1:b5:bd:73:
                    80:69:a2:cf:12:13:5d:be:76:58:99:f5:3b:c8:6b:
                    db:eb:91:80:48:36:c1:18:36:3b:fb:ae:a8:c6:b5:
                    65:29:4e:58:7c:28:46:8d:ac:8d:5a:58:05:dc:56:
                    6e:af:ef:76:0f:8b:3d:f3:fc:f6:ea:5d:b9:2c:33:
                    bb:c4:36:18:d3:de:e9:9e:bf:fa:bf:11:51:40:a4:
                    82:19:9c:7c:1e:1a:56:cb:fc:33:c8:8f:19:96:20:
                    b0:0b:9c:b0:5d:f4:45:a1:45:d1:62:d9:a7:1f:79:
                    5b:91:ab:a5:4e:b0:be:ca:74:25:f1:72:e0:ac:56:
                    60:93:30:56:ba:ff:96:ee:47:ca:e5:e1:9e:9e:03:
                    ec:a6:d3:2e:4b:c6:67:ab:0c:cf:80:54:86:03:57:
                    fa:d7:52:7b:b6:b1:c8:33:a6:f4:12:90:ae:b6:e4:
                    6c:9a:93:08:2a:d9:34:b4:18:1b:5a:49:6e:b8:85:
                    cb:92:b3:6e:3c:97:9d:6f:6b:ee:55:d8:86:74:51:
                    5b:f7:c1:69:90:59:cc:3f:8b:47:83:26:66:88:71:
                    c5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:5D:F2:C7:37:B6:F1:B1:A3:21:02:57:FC:18:8F:9A:17:A3:D0:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/0ea427a0-fbec-3443-bf3a-e857d1fcf4e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  12.175.174.0/23
                  12.203.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:fa:43:cb:01:91:dd:ee:c7:bd:32:88:aa:1a:24:c4:b6:b9:
         6b:eb:ba:04:8c:66:ff:53:33:7d:44:92:13:fd:72:b1:78:43:
         89:77:63:36:18:9c:d3:33:07:f6:6d:a5:8d:4b:f6:04:de:8f:
         80:49:c5:20:aa:69:8d:bb:76:da:01:59:89:10:a8:39:b5:02:
         20:f6:1f:6f:6e:a6:23:5d:b6:ff:8b:ae:5c:cf:73:e8:96:89:
         10:fb:0b:f2:d5:54:80:b6:be:1a:63:9d:50:dc:fe:5a:8c:bc:
         cd:82:e5:07:4a:51:b2:16:fd:bb:28:b5:26:1c:4c:ca:fa:d8:
         d0:fe:61:00:8c:42:e5:c4:a7:9c:03:64:88:e5:57:8e:84:9a:
         ea:c4:d8:42:1b:34:13:64:3e:7d:79:51:c9:0c:66:d3:9a:56:
         30:34:42:97:c5:4c:8f:70:f2:b6:98:a4:3f:ae:6e:5e:77:ca:
         c5:92:0f:11:15:ce:1a:55:80:68:31:6b:23:46:af:7d:4d:cc:
         a0:05:04:cb:05:52:9a:d5:af:48:d6:a0:74:b5:55:5d:1a:c3:
         e5:8f:26:c1:45:ef:5c:4e:2e:6e:58:77:8a:61:6b:46:78:96:
         ae:77:d1:91:4f:a7:6e:b0:50:00:56:a7:ec:d4:5c:ba:e8:0e:
         00:26:07:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:33:08 2025 by rpki-client