Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/f121c9da-cdbd-326e-b209-0e0b0ba2082a.roa
File:                     f121c9da-cdbd-326e-b209-0e0b0ba2082a.roa (raw, json)
Hash identifier:          IdXmneFG6Rlaxu5f8R2is5DZ+FU51600rYeTkCmuAN0=
Subject key identifier:   2A:A1:B4:56:04:6D:E6:20:89:51:D8:AF:E1:20:F0:82:0E:83:D7:6A
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584F2957AB4B9F2A4CD6425DD100
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/f121c9da-cdbd-326e-b209-0e0b0ba2082a.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     30572
IP address blocks:        12.220.102.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:ab:4b:9f:2a:4c:d6:42:5d:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=e430c9fd-bc6c-4acd-b29f-bcd661e8a42c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3e:46:44:5b:c6:98:40:5b:70:6a:8b:f2:8a:
                    9e:1f:a0:92:db:5e:00:92:33:c7:22:12:d9:83:fa:
                    e7:81:cd:55:4d:15:e0:63:bf:85:41:3c:17:8b:b4:
                    ee:f7:f1:38:68:35:49:ba:8d:76:8b:d9:c6:dd:32:
                    e7:c8:14:a0:c9:ab:e3:72:7a:02:ec:62:b0:44:b8:
                    c9:9c:c5:d7:00:21:cf:65:bd:21:ef:37:38:72:26:
                    62:6b:d8:c5:4c:d4:c5:56:8f:f6:ec:ce:ad:4f:0c:
                    3c:0f:36:d9:4e:92:88:2f:80:3c:21:09:6a:11:67:
                    c1:14:9f:61:b4:a8:02:8d:20:6e:9c:b4:32:22:8e:
                    36:5e:3e:71:7e:e2:52:74:66:8d:b7:5b:27:b4:56:
                    a2:fa:df:2e:19:08:d6:3f:6c:3f:18:31:6a:c0:96:
                    18:78:c5:9a:0c:c3:df:80:97:c5:72:2c:03:7d:ac:
                    8c:7e:b4:5e:00:3c:49:5c:9c:e3:c3:cc:87:2d:ec:
                    b7:a3:98:3b:10:f5:eb:a9:db:03:e5:b7:35:fe:aa:
                    29:88:6a:7d:bf:12:bd:9a:5e:89:dd:37:f1:3e:58:
                    2d:7e:9f:aa:3a:bb:69:94:5d:3c:ef:2d:b7:bc:a2:
                    28:a9:1d:b6:80:d2:d1:bc:20:26:61:4a:3a:1a:85:
                    33:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A1:B4:56:04:6D:E6:20:89:51:D8:AF:E1:20:F0:82:0E:83:D7:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/f121c9da-cdbd-326e-b209-0e0b0ba2082a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  12.220.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:c4:64:9b:e7:d0:82:bd:bb:93:9f:9d:53:e5:44:ac:c2:a9:
         5f:5d:5c:44:3d:ba:6c:15:56:00:2f:64:d4:d9:72:2b:97:f1:
         9e:f2:1f:ce:1e:ec:29:fa:56:cc:de:04:db:3b:1e:88:7a:0f:
         54:39:be:f2:0d:ba:3a:f2:71:d3:a6:c2:16:b1:26:1e:f1:85:
         bd:37:04:9f:8d:bf:7f:9d:e6:d9:f3:bc:9f:36:53:1b:a6:74:
         a8:f0:66:5a:c3:d5:cd:22:fa:8a:67:c5:58:8c:bc:79:28:1e:
         11:2b:e6:11:6b:a5:b8:46:e7:79:2f:cd:37:40:91:ff:b6:4b:
         aa:43:b1:1b:23:ad:92:d8:39:e8:aa:b4:39:61:7c:c6:3e:6b:
         c6:fd:4c:a0:44:28:ad:fc:c3:7f:60:40:af:cd:82:4d:4e:83:
         41:1b:34:82:72:19:b2:82:90:4e:a1:d1:2e:b2:8a:3e:a9:54:
         3a:53:1b:83:f2:38:cc:02:7f:5b:4c:3e:d2:dd:82:8e:a9:4f:
         51:0c:a6:6b:8e:48:d5:10:f1:6a:28:9f:b2:00:d6:23:1e:e0:
         95:df:60:02:59:a8:1a:6e:61:cd:00:34:54:6d:74:a6:eb:b9:
         78:db:04:73:ca:8f:6a:3a:28:26:71:dd:83:11:c5:44:f4:3a:
         d0:66:87:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:06:35 2026 by rpki-client