Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/4297afb7-e6a0-3b07-9a00-5ad7af4b78da.roa
File:                     4297afb7-e6a0-3b07-9a00-5ad7af4b78da.roa (raw, json)
Hash identifier:          Hi7nZ1R2aDkbX/fRlYajAaYrSZvzVPSzzq43ADqY9JM=
Subject key identifier:   60:39:08:DE:B4:9A:23:79:82:F2:08:01:89:74:65:8C:55:FC:12:61
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584F497310F76E09A0BD25D06180
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/4297afb7-e6a0-3b07-9a00-5ad7af4b78da.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     2386
IP address blocks:        12.151.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:10:f7:6e:09:a0:bd:25:d0:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=5916b5cb-de29-4fb9-9689-7974e6c3c5e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e3:54:ea:99:b6:46:10:09:10:3e:af:f8:ab:
                    0d:a4:93:31:0b:75:ea:19:0b:14:2e:f5:5a:f4:e5:
                    2e:31:83:a9:9f:3e:4f:ba:4e:5b:30:54:bd:a1:f9:
                    ad:e4:95:27:36:f4:14:39:57:25:38:cd:2c:3d:95:
                    f9:32:e9:69:5d:96:25:70:1e:93:ee:0e:53:5b:74:
                    0c:96:b8:3a:af:e9:37:6d:87:cb:c8:24:9f:c8:e9:
                    7e:b4:4a:0b:02:17:8a:3b:55:b0:f4:9a:f0:ce:60:
                    39:e8:9b:5a:de:a1:bf:a2:15:8e:59:f5:94:64:33:
                    88:5f:f1:52:9d:cf:06:69:46:0c:86:96:b4:9f:31:
                    00:bc:93:be:67:e8:1e:bc:3f:d8:11:53:bd:58:9a:
                    f3:0f:27:d8:bd:db:7c:d2:76:6f:bd:eb:06:e3:5a:
                    9c:76:3f:65:70:bc:56:06:f3:d5:2b:0b:9b:30:a1:
                    73:60:6f:b5:03:8d:c8:0b:c5:9a:92:1b:62:6d:c5:
                    a8:27:f3:d4:07:2a:bd:17:04:05:48:1c:27:d4:c1:
                    c5:c9:f0:be:29:14:f4:76:6d:22:d8:27:9c:50:66:
                    b9:ae:16:69:3e:63:2d:24:41:33:da:b5:83:8a:0f:
                    99:0a:ba:01:68:6a:a0:06:91:9e:28:69:dc:56:94:
                    f1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:39:08:DE:B4:9A:23:79:82:F2:08:01:89:74:65:8C:55:FC:12:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/4297afb7-e6a0-3b07-9a00-5ad7af4b78da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  12.151.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:30:3a:18:21:5a:f0:8a:a0:6e:b9:a6:38:72:fa:57:34:f3:
         56:21:77:ac:24:ab:5e:7c:10:ea:42:6b:c4:8b:89:cb:e4:23:
         98:33:d0:57:b6:98:8e:ee:66:c9:3e:23:78:d0:ae:09:93:51:
         d5:04:b1:32:16:7f:61:51:57:10:2f:07:51:d6:3e:fe:a0:8b:
         2a:de:47:90:80:10:2e:a1:29:33:d4:44:a0:14:e7:8c:74:54:
         35:5b:b6:b0:e7:a7:d0:ee:13:1a:29:e6:87:32:96:72:0d:a8:
         29:51:9f:79:0e:45:a8:f5:8c:5e:67:cf:80:26:7c:d6:27:2c:
         88:cf:b9:bf:23:8d:9e:7a:06:34:76:5f:44:ff:92:ce:d5:e4:
         27:58:8f:fa:ee:86:59:d5:d4:5d:6d:e4:8a:f9:6a:17:7d:e9:
         85:c3:b5:04:60:19:c7:02:ba:1d:ff:f4:63:4f:8c:37:c2:99:
         fd:c9:fe:d9:7b:d0:13:3b:b7:34:18:1e:b0:2d:d9:80:7b:76:
         49:de:ed:31:9a:3c:2a:73:f0:44:f4:0a:64:69:5e:f0:95:c8:
         b9:17:5a:ed:1d:88:25:4f:3f:5c:13:1f:17:39:63:b8:98:1d:
         c5:8d:11:3b:99:fd:f0:5d:7b:a6:47:e0:b2:47:a1:72:a5:1d:
         45:8b:9c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:11:32 2026 by rpki-client