Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/12e46e6f-b9b8-3b84-b6d5-27e024920045.roa
File:                     12e46e6f-b9b8-3b84-b6d5-27e024920045.roa (raw, json)
Hash identifier:          2mgixAxxjhXjOjx9GPv3uJDboo4AKipfVYX8BPtiBZw=
Subject key identifier:   0B:ED:42:C9:B2:FB:3C:2A:DE:DA:30:5A:4B:93:74:B2:2F:64:45:57
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584DAAE04C6964E00A38125BA580
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/12e46e6f-b9b8-3b84-b6d5-27e024920045.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     22249
IP address blocks:        12.20.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:4c:69:64:e0:0a:38:12:5b:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=347aa9fd-fb01-4e21-a1b2-f0a61e7bad91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9c:03:9a:df:01:07:ff:65:ab:a4:42:2a:30:
                    8f:4a:35:0c:3b:2e:dd:e0:8f:ea:76:07:38:09:b8:
                    d2:6d:09:93:55:f7:be:77:d6:b4:2e:09:8a:0e:2d:
                    09:7a:cd:c0:59:f2:e4:43:31:60:ee:23:c2:ce:d7:
                    1f:ed:e8:12:e4:71:c1:96:45:be:55:41:3f:45:c4:
                    13:af:9d:18:0a:66:45:ef:e8:7c:ff:7a:7b:a6:58:
                    2a:2d:bb:f7:aa:34:d3:f6:4e:31:0a:5d:a4:06:35:
                    b1:c0:90:48:2a:4f:97:ce:55:36:2c:c4:0c:43:df:
                    19:b8:e6:53:4b:35:35:04:a0:39:b9:7a:fb:aa:e0:
                    3e:c8:6c:36:e5:a6:7d:57:f8:da:03:8b:1b:96:26:
                    68:06:1e:85:98:ff:72:17:77:98:51:83:fc:6b:fe:
                    97:8c:32:de:10:4a:cb:33:81:75:10:d5:b0:33:f5:
                    28:20:e6:ed:c8:46:23:ce:a5:82:ec:00:49:92:ef:
                    81:c1:23:22:ab:5c:10:72:1c:b2:eb:6a:d3:94:f9:
                    b5:e8:28:bb:5a:b4:69:04:c9:ee:0b:e6:19:c0:18:
                    b6:c7:c5:58:d8:58:e4:67:14:a5:7f:f7:84:64:cf:
                    7d:c0:63:86:40:fb:18:ae:20:eb:10:ea:5e:0f:ac:
                    fe:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:ED:42:C9:B2:FB:3C:2A:DE:DA:30:5A:4B:93:74:B2:2F:64:45:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/12e46e6f-b9b8-3b84-b6d5-27e024920045.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  12.20.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:24:ae:5e:02:76:9d:ba:2f:fc:e7:d6:f9:0b:34:da:51:f1:
         4d:47:50:ae:e9:e2:c0:63:b0:f3:b3:91:63:77:cc:da:9f:0a:
         ee:97:6e:fa:b5:54:36:d8:72:0a:66:8a:c9:9d:41:f5:5b:29:
         56:73:6d:b1:18:b0:e4:bb:0e:c9:5c:cf:55:13:34:bb:69:b6:
         58:54:6e:a0:34:28:f0:a5:60:7b:a3:8e:dc:13:fa:8d:58:84:
         03:4a:5e:84:29:8f:57:de:69:35:69:01:ec:5a:50:73:06:09:
         47:70:42:59:04:a4:2f:a4:bf:17:94:5e:7c:02:6e:55:39:26:
         e0:6b:2c:4d:cb:48:08:7c:cc:a3:6e:4b:5a:ba:82:88:85:63:
         b4:ba:2b:21:8f:d0:bc:03:7e:6f:3d:ae:5c:18:89:45:83:8d:
         c8:29:80:a0:98:1e:76:6c:10:20:c5:83:11:f7:e0:d7:3e:87:
         3f:e3:bc:01:ab:f7:4f:c3:df:78:44:3b:bc:72:94:4f:82:76:
         f0:75:16:e3:dd:8d:e6:8f:63:0b:9a:4c:1a:30:f6:c2:8f:5e:
         70:30:dd:17:d4:a8:98:d6:1b:b5:2d:c4:91:a1:04:5f:88:32:
         17:49:2a:53:38:9d:25:31:a7:92:db:79:cf:3b:e3:a4:d3:d7:
         06:1f:4e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:07:09 2026 by rpki-client