Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/f8b8abe9-1bc2-39d4-8f95-ab062ee885f1.roa
File:                     f8b8abe9-1bc2-39d4-8f95-ab062ee885f1.roa (raw, json)
Hash identifier:          eVr9vGiYchDa9+t66mJDaSHzK19gEdtRxTekDhBGDa0=
Subject key identifier:   DA:11:DC:5A:9C:2A:18:A3:14:95:AC:30:A7:7C:23:D0:45:29:E5:2B
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584D3BBECDC6BE41B1389D72B7C0
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/f8b8abe9-1bc2-39d4-8f95-ab062ee885f1.roa
Signing time:             Fri 20 Mar 2026 17:38:43 +0000
ROA not before:           Fri 20 Mar 2026 17:38:43 +0000
ROA not after:            Thu 18 Jun 2026 17:38:43 +0000
asID:                     32075
IP address blocks:        12.32.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3b:be:cd:c6:be:41:b1:38:9d:72:b7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Mar 20 17:38:43 2026 GMT
            Not After : Jun 18 17:38:43 2026 GMT
        Subject: CN=d9ce7396-da2d-499d-9bcb-df093c433b86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6c:eb:1f:86:2d:49:80:06:82:05:fc:45:a8:
                    bc:51:80:f0:2e:7d:92:f7:9c:cf:c1:39:83:d7:e3:
                    ed:5b:48:d4:63:e5:03:a4:62:e3:d7:e0:46:0f:a8:
                    ed:42:56:78:7f:d3:ab:1e:0c:f9:25:91:a2:cd:06:
                    ff:89:0d:f1:41:3d:d5:2e:3c:4f:a8:69:c4:9e:0f:
                    40:6b:3b:69:2f:c5:fc:46:45:d8:a2:c2:0a:7a:36:
                    37:45:4f:37:c2:27:67:f5:0b:c1:bd:d5:67:77:70:
                    f8:e2:d4:4b:40:dc:ff:d8:22:9e:be:43:64:cc:6b:
                    bb:10:9e:d3:43:e4:d4:eb:67:29:41:94:f6:59:89:
                    78:86:86:8f:e1:a9:21:52:87:da:31:e1:ac:b7:bb:
                    f4:35:74:8b:3a:d5:30:e1:52:87:e0:05:01:2c:fc:
                    89:fe:bb:55:1c:2d:68:92:f0:0c:ca:2b:8d:66:66:
                    1a:b9:7b:8d:47:c1:9a:ae:f1:2c:3b:50:d7:f0:0c:
                    6d:9f:4f:25:13:0f:a9:5a:f5:b6:67:26:fe:06:65:
                    2e:ae:cd:55:c9:90:bc:c8:d2:80:e2:65:ef:b0:12:
                    43:90:28:68:34:57:cd:89:8a:56:92:b4:3b:d3:a9:
                    08:9b:f1:70:1d:ce:90:6f:44:50:2f:c9:5e:f0:f2:
                    45:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:11:DC:5A:9C:2A:18:A3:14:95:AC:30:A7:7C:23:D0:45:29:E5:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/f8b8abe9-1bc2-39d4-8f95-ab062ee885f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  12.32.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:31:76:91:46:73:25:56:6d:45:0c:02:66:98:ea:22:25:2c:
         f3:60:10:19:77:a1:b9:7a:dd:0b:c0:33:f6:c5:2f:78:75:3c:
         fb:b0:e2:a2:36:bc:bc:3f:47:be:69:7a:a2:54:b7:d3:70:ef:
         7b:72:34:5b:a8:96:de:a9:55:f2:0b:50:ab:c5:19:93:8d:f5:
         36:39:80:5d:fc:54:4f:65:d4:9d:7a:dd:80:4c:19:46:44:8f:
         85:29:9a:d2:d4:4e:2d:7d:39:90:cb:e0:88:77:cc:0a:0c:db:
         a9:70:63:f9:46:d9:60:84:29:ae:93:03:52:cc:12:12:9e:f0:
         d8:67:64:6e:17:33:fe:10:66:b6:70:74:05:3b:13:27:b5:69:
         c5:f3:5b:94:6d:99:db:43:d3:88:3d:2b:8c:20:d1:6f:a0:04:
         77:86:30:62:24:3d:cd:15:c9:bc:51:5d:15:7d:62:ef:ba:8f:
         da:9f:28:73:d8:c3:a7:1c:80:a4:10:92:3b:ce:1a:51:7c:ae:
         2f:9c:f5:ea:39:71:14:d2:dc:2d:92:c0:7d:3f:6f:e2:29:cf:
         23:3b:a3:f0:f4:cd:ba:00:01:87:86:95:19:0f:d0:5a:e3:64:
         9d:84:1f:df:94:06:48:58:fc:ec:47:e9:07:7c:81:71:67:d3:
         c4:3a:19:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:49:39 2026 by rpki-client