Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/a580ddd2-3fff-3151-bac9-d463c9b57686.roa
File:                     a580ddd2-3fff-3151-bac9-d463c9b57686.roa (raw, json)
Hash identifier:          jBaDC2pp3N/WuOTlo6rMUEecTyZFjF3j1TJwuXGxabw=
Subject key identifier:   58:5C:E4:9C:CD:E5:86:05:0F:72:C7:B0:C5:16:11:ED:40:58:E6:53
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584B0A11642FC602BBC33317E940
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/a580ddd2-3fff-3151-bac9-d463c9b57686.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     32258
IP address blocks:        12.109.223.0/24 maxlen: 24
                          12.198.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:64:2f:c6:02:bb:c3:33:17:e9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=1d00ba3b-f62c-4cec-8dd4-8e46d5cb5f3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f8:53:6e:d3:6a:40:44:de:bf:8c:2a:e3:3c:
                    59:40:9a:c7:29:1d:f7:0d:1a:87:8c:37:d7:f5:22:
                    a6:b8:fa:9f:cb:3c:93:e7:71:cd:49:17:b2:56:50:
                    5e:56:01:5c:6f:cd:0d:f8:4f:1b:4a:e4:16:99:42:
                    14:ae:72:2b:7a:d7:6e:03:66:fe:02:66:86:6c:cb:
                    d7:69:94:00:0d:b1:c9:47:00:29:68:50:a9:17:91:
                    7e:32:5e:22:66:94:34:6c:d0:4f:87:cc:58:30:fd:
                    dd:08:83:cb:cf:ba:0a:b3:16:93:41:19:6a:06:bf:
                    64:d6:fd:bb:c9:de:f5:79:2b:3e:1f:82:4e:03:e3:
                    0e:a3:cc:ed:22:30:f1:6e:f6:ed:cb:bf:17:ef:4e:
                    8a:9f:f9:f0:b7:08:a0:fd:5c:cc:bb:f8:7e:bb:29:
                    0e:88:ba:3d:8d:0e:54:8b:5a:fa:e0:80:e9:73:31:
                    f7:7a:7b:95:97:a1:73:57:3a:1c:b7:8e:f1:a4:f8:
                    33:27:9c:40:21:3f:92:f9:7d:48:ee:d1:2b:35:de:
                    14:f7:52:d3:27:58:82:53:d0:70:6a:20:e4:51:e5:
                    34:45:28:f1:77:c8:ce:f7:d4:bf:92:ac:84:ba:b6:
                    52:30:4a:25:8a:fd:77:8b:48:67:17:70:4d:c5:2d:
                    11:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:5C:E4:9C:CD:E5:86:05:0F:72:C7:B0:C5:16:11:ED:40:58:E6:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/a580ddd2-3fff-3151-bac9-d463c9b57686.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  12.109.223.0/24
                  12.198.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:bc:d4:96:0f:37:4a:4a:d0:0b:72:d3:bb:df:d7:9c:9e:e4:
         60:ff:c9:43:de:15:fe:24:2a:28:79:0c:5e:d3:b7:13:32:c1:
         8e:a4:d5:34:6d:b6:7a:fc:b9:99:1f:16:54:f4:dd:93:57:da:
         8f:46:c5:66:2f:eb:16:45:0d:eb:b5:15:77:6d:9d:d1:b7:f1:
         05:69:3f:9e:39:47:79:23:00:3c:30:12:e3:2f:8e:6e:7f:30:
         57:5d:00:9c:11:8b:5a:47:79:64:a2:6e:51:03:39:4c:38:7e:
         b8:16:8f:17:d3:ef:65:5b:51:c4:99:ab:10:24:90:95:bd:1c:
         ae:92:8a:28:d3:27:25:91:a5:12:d4:1b:29:4c:37:67:38:4e:
         6f:23:6c:c6:c8:c8:fe:9e:89:8a:c6:29:6e:3a:d4:cd:cd:39:
         de:ac:93:28:65:99:2a:91:44:c9:83:23:40:f4:fc:15:00:20:
         e8:dc:c3:bf:6a:e7:33:2a:7e:28:44:c7:8e:62:97:0c:d4:fa:
         6c:89:0b:29:f9:f2:7e:72:26:3d:4e:06:cf:7f:a4:1d:87:ce:
         59:6d:3a:49:43:5d:ad:6f:63:7a:f0:4a:82:3e:0f:ad:07:89:
         dd:8e:f9:31:c5:da:dd:c8:a6:af:89:19:55:4f:9c:67:70:bb:
         e7:7d:e9:f9
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEsKEWQvxgK7wzMX6UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzE0MTg2ZGYtODdiYS00ZGQ1LWFkYmYtMWM2YzJiYmUw
NGE4MB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk
MWQwMGJhM2ItZjYyYy00Y2VjLThkZDQtOGU0NmQ1Y2I1ZjNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPhTbtNqQETev4wq4zxZQJrHKR33DRqHjDfX
9SKmuPqfyzyT53HNSReyVlBeVgFcb80N+E8bSuQWmUIUrnIretduA2b+AmaGbMvX
aZQADbHJRwApaFCpF5F+Ml4iZpQ0bNBPh8xYMP3dCIPLz7oKsxaTQRlqBr9k1v27
yd71eSs+H4JOA+MOo8ztIjDxbvbty78X706Kn/nwtwig/VzMu/h+uykOiLo9jQ5U
i1r64IDpczH3enuVl6FzVzoct47xpPgzJ5xAIT+S+X1I7tErNd4U91LTJ1iCU9Bw
aiDkUeU0RSjxd8jO99S/kqyEurZSMEoliv13i0hnF3BNxS0RVQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFFhc5JzN5YYFD3LHsMUWEe1AWOZTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zMTQx
ODZkZi04N2JhLTRkZDUtYWRiZi0xYzZjMmJiZTA0YTgvYTU4MGRkZDItM2ZmZi0z
MTUxLWJhYzktZDQ2M2M5YjU3Njg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzE0MTg2ZGYtODdiYS00ZGQ1LWFk
YmYtMWM2YzJiYmUwNGE4LzMxNDE4NmRmLTg3YmEtNGRkNS1hZGJmLTFjNmMyYmJl
MDRhOC5jcmwwHwYDVR0jBBgwFoAUUhXIm1E3DpTxq8Kvfcj2u+Hy5W8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zMTQxODZkZi04N2JhLTRkZDUtYWRiZi0xYzZj
MmJiZTA0YTguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQADG3fAwQA
DMaAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAGq81JYPN0pK0Aty07vf15ye5GD/yUPeFf4kKih5DF7TtxMy
wY6k1TRttnr8uZkfFlT03ZNX2o9GxWYv6xZFDeu1FXdtndG38QVpP545R3kjADww
EuMvjm5/MFddAJwRi1pHeWSiblEDOUw4frgWjxfT72VbUcSZqxAkkJW9HK6SiijT
JyWRpRLUGylMN2c4Tm8jbMbIyP6eiYrGKW461M3NOd6skyhlmSqRRMmDI0D0/BUA
IOjcw79q5zMqfihEx45ilwzU+myJCyn58n5yJj1OBs9/pB2HzlltOklDXa1vY3rw
SoI+D60Hid2O+THF2t3Ipq+JGVVPnGdwu+d96fk=
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:09:30 2025 by rpki-client