Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/63f29321-bbfe-301b-a3e3-192dd739aca5.roa
File:                     63f29321-bbfe-301b-a3e3-192dd739aca5.roa (raw, json)
Hash identifier:          A86XorVSSufUkSJauY84dP3oFiLWnUr2FEmO55OPmZ4=
Subject key identifier:   65:9F:45:41:63:34:F1:FC:DA:09:55:0B:16:68:1B:49:F4:B9:27:AA
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584B0A11644715C8628B7F5E7D00
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/63f29321-bbfe-301b-a3e3-192dd739aca5.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     399240
IP address blocks:        12.42.147.0/24 maxlen: 24
                          12.188.33.0/24 maxlen: 24
                          12.215.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:64:47:15:c8:62:8b:7f:5e:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=c25e4829-a9a7-4ad7-96b8-7f0e66dce090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:99:30:6b:4e:9d:74:6d:5e:e8:28:fb:36:4f:
                    40:54:6d:13:2e:eb:aa:bc:f8:45:2a:68:1f:ce:9a:
                    70:eb:6f:aa:09:7d:ef:b2:ff:2e:a2:4e:ec:c8:2a:
                    b3:ba:5f:42:59:e1:c2:78:ed:4e:9f:9c:06:91:e5:
                    ed:cd:f1:06:69:0e:f6:11:53:88:73:fa:02:37:b8:
                    e1:21:3b:78:35:db:c3:4a:8f:d7:15:14:8f:2b:cd:
                    fc:fc:46:6c:9c:bb:37:e2:3b:b7:e7:04:47:59:2d:
                    aa:dd:7e:cb:fe:8a:39:92:6d:4d:00:cd:9e:e4:49:
                    49:14:db:82:b4:ce:05:5c:11:84:6a:80:39:ab:da:
                    44:28:b5:3a:8e:aa:c8:54:86:04:64:5d:e4:25:ef:
                    a0:a5:7a:7c:0e:cd:b6:3f:1b:a4:26:ed:a9:91:c0:
                    ff:9e:dc:37:f0:71:6e:a6:72:ba:2f:0d:7e:09:5d:
                    fd:01:8d:f5:dd:4e:99:98:93:2d:da:6f:25:c0:28:
                    ef:d7:1e:ed:3b:b6:b5:fb:d7:4a:4b:67:c8:a2:01:
                    80:f3:c6:5e:f9:94:06:00:00:7f:4a:c1:99:99:68:
                    0c:bb:c3:56:d0:3c:03:58:b1:84:6e:93:50:c5:c0:
                    0d:e7:ca:de:9d:fd:19:90:18:07:91:e8:4e:0d:31:
                    1a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:9F:45:41:63:34:F1:FC:DA:09:55:0B:16:68:1B:49:F4:B9:27:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/63f29321-bbfe-301b-a3e3-192dd739aca5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  12.42.147.0/24
                  12.188.33.0/24
                  12.215.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:b5:cd:07:14:93:bb:9b:cf:a7:b8:f3:e0:37:00:0f:d5:83:
         8f:de:9d:ad:3b:07:52:22:4f:dd:c7:55:41:c3:b8:5d:2f:29:
         d7:73:25:b3:69:90:35:d6:96:d1:d1:8c:97:88:c5:c1:ee:8e:
         f9:89:2b:c6:f7:79:f3:35:72:b5:c0:f9:6a:31:b1:70:be:95:
         c0:87:55:43:18:07:62:5f:93:4f:d8:f7:2e:b2:1a:bb:a3:c9:
         86:85:5c:de:88:80:6d:90:65:b2:a1:fa:d4:97:44:7b:99:94:
         65:04:e7:28:85:66:30:36:6d:e4:79:4b:6f:af:1c:4e:cb:d9:
         07:c8:5f:14:45:d8:a0:f3:3c:72:d7:62:e7:83:ec:0b:8b:ef:
         47:6a:4f:14:1a:da:ec:ba:bb:87:f1:34:86:4c:91:04:6b:a9:
         3f:ab:17:43:7d:d6:f3:55:fc:7c:cb:77:16:54:bf:8b:37:66:
         88:48:f5:06:69:81:82:97:ec:3d:6a:d0:3c:53:39:af:3c:49:
         59:25:43:55:4a:5d:a4:71:51:fe:b0:3c:68:6b:61:50:3e:d4:
         d7:b2:1b:c4:68:6c:ab:c5:3d:69:d3:5d:cb:9d:b4:e3:9e:4b:
         1d:10:50:64:d1:36:b2:30:61:91:20:db:41:df:cc:55:2c:00:
         25:51:6b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:01:43 2025 by rpki-client