Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/53a2c680-aeb7-3d64-bb49-32c0500877c1.roa
File:                     53a2c680-aeb7-3d64-bb49-32c0500877c1.roa (raw, json)
Hash identifier:          BNVnmSspmdR8lzKQ1uL69TN20od8SZ6uj6nnCe98x1c=
Subject key identifier:   3B:52:52:C6:AF:F3:AA:6D:FC:71:D1:44:6D:CF:D7:70:3C:3B:8D:0B
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584DAAE04E16B18ED0EADEF9EAA0
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/53a2c680-aeb7-3d64-bb49-32c0500877c1.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     399761
IP address blocks:        12.35.211.0/24 maxlen: 24
                          12.42.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:4e:16:b1:8e:d0:ea:de:f9:ea:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=0c80c70c-35fd-4568-a535-ab58a9584a45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e7:6b:23:a7:d1:0e:2c:a3:10:c3:d3:dc:b4:
                    f3:16:f1:15:22:0b:04:17:9b:04:02:1b:e5:2f:c0:
                    e8:af:07:8f:b1:a7:07:53:49:17:69:3c:ef:8c:95:
                    03:48:99:bc:d9:18:a2:f8:e9:5b:17:05:11:34:42:
                    0a:84:c9:24:25:ad:60:83:7f:12:f1:8a:48:1b:a8:
                    44:7d:9c:c9:a1:81:30:05:c1:12:59:ec:d1:4c:17:
                    a8:46:ca:e6:1c:4f:41:34:87:84:ae:d7:74:a4:9c:
                    7f:f6:a7:38:9e:bf:cb:49:b2:eb:e5:fc:4f:e3:2d:
                    12:18:9d:6c:26:18:7a:3f:d4:15:94:b8:e8:98:61:
                    03:8f:65:18:85:e5:23:76:ba:70:6c:4c:40:60:f5:
                    e1:e0:a8:a9:79:60:ac:0f:5a:5c:d4:7f:6d:a3:88:
                    96:9d:db:ca:23:f6:ac:9d:c9:72:e8:7c:21:4d:8c:
                    66:a2:84:09:a4:6a:cb:3d:32:79:40:7e:c6:0c:c7:
                    db:2f:39:2e:f5:ae:2c:03:b7:8d:b1:8e:b3:aa:54:
                    1e:a2:a9:b5:7c:91:c0:eb:db:e0:6a:a9:d6:1c:21:
                    24:1a:9a:77:76:e0:f3:c0:c2:9e:95:b9:07:cb:70:
                    83:dc:00:c8:ce:e2:99:a6:cc:e8:df:dc:47:ef:1e:
                    f0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:52:52:C6:AF:F3:AA:6D:FC:71:D1:44:6D:CF:D7:70:3C:3B:8D:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/53a2c680-aeb7-3d64-bb49-32c0500877c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  12.35.211.0/24
                  12.42.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:f4:ab:85:0c:4a:d7:7d:80:3e:99:8c:35:78:b4:5c:8d:71:
         da:21:ba:1a:f1:c8:e3:02:71:c9:64:ec:67:93:29:7d:70:e5:
         06:62:41:7e:6e:d8:67:1b:66:02:e1:cd:ce:f4:d7:20:02:76:
         8e:72:d4:64:48:e4:ee:9d:99:21:2e:d5:eb:e9:23:bc:60:a5:
         4a:69:e2:bf:36:1e:01:57:db:9d:cb:06:dc:8d:6a:08:70:c9:
         c3:fa:30:dc:99:0f:c4:a8:26:1e:94:ee:02:bf:73:52:c5:3d:
         58:58:0d:d6:5a:a4:5e:ea:f1:fa:81:17:19:61:5c:75:80:c6:
         38:52:e7:4a:c0:5c:ad:64:0c:38:2a:66:19:b8:72:51:80:a1:
         e6:89:fe:eb:f3:30:62:ff:63:c0:ce:eb:96:b3:9b:52:90:ee:
         c1:e2:6e:b1:85:e4:6f:79:3b:5c:2f:b3:19:89:b6:3d:1d:4a:
         6b:04:7e:e1:93:a6:c5:8c:d8:0c:af:83:20:66:4e:75:2b:59:
         9e:06:a2:56:54:9b:88:73:cf:21:b8:74:2d:94:3d:db:40:f3:
         1d:f7:90:9d:d9:f7:40:1d:55:7d:83:6d:61:e7:18:33:c4:d4:
         18:bf:54:00:8a:7c:aa:3b:5c:70:66:57:60:3e:a3:15:37:7f:
         d7:dc:ce:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:28:45 2026 by rpki-client