Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/fd93f495-0e65-34e6-aa68-155176faaf1c.roa
File:                     fd93f495-0e65-34e6-aa68-155176faaf1c.roa (raw, json)
Hash identifier:          Ju3ZG+eGNN97FcGn82kMiuC/EJGbOZMuEBor3L1Dy98=
Subject key identifier:   55:24:79:E3:DD:E1:7A:19:12:D3:67:01:61:38:30:8B:8C:8E:6D:A1
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584F2D87E2F6FEBFEA2235E74580
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/fd93f495-0e65-34e6-aa68-155176faaf1c.roa
Signing time:             Tue 15 Sep 2026 01:00:12 +0000
ROA not before:           Tue 15 Sep 2026 01:00:12 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     395742
IP address blocks:        12.236.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:87:e2:f6:fe:bf:ea:22:35:e7:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Sep 15 01:00:12 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=d92d7eb2-cfdf-4127-b227-4013c5582539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:86:4f:ae:b4:60:f3:c9:a6:44:26:6b:42:2d:
                    2d:be:f6:0e:04:93:bf:05:74:24:da:93:06:29:da:
                    f2:67:cb:86:04:4c:33:9e:cc:a7:e3:cd:ad:22:b2:
                    26:9f:34:5e:a4:05:8b:6b:1e:c0:8d:98:91:0b:e6:
                    68:f2:71:c1:e9:00:50:a3:21:8b:0b:f9:bb:ca:31:
                    54:2e:df:5c:a4:fe:c8:64:65:c1:9f:04:55:87:e7:
                    82:19:a7:06:64:de:d1:d4:6a:ff:c6:0e:e8:07:a9:
                    7c:15:7a:fd:25:bd:68:0d:a4:13:da:30:79:9a:1c:
                    88:3c:26:62:7c:06:08:5f:4d:d9:60:ad:29:5e:20:
                    08:bc:14:4e:fb:95:48:bc:4d:27:55:3b:89:65:0f:
                    3d:51:ee:de:a7:99:f4:bb:62:dd:95:25:94:5a:d0:
                    c4:67:8c:1f:88:93:fa:30:a7:1e:d8:ab:cd:6c:9c:
                    7c:2d:f4:e1:78:a7:0f:7a:00:65:d3:2f:d7:70:ff:
                    54:30:3e:35:7c:91:1d:e9:85:5d:98:1c:72:fb:8d:
                    e2:4c:07:68:aa:5c:4d:96:b1:4d:9d:35:0c:7a:b2:
                    fa:e0:e1:bc:39:36:6f:e3:b3:1e:9b:66:ef:63:68:
                    f5:24:1c:ef:d7:6b:bf:16:b2:6c:0d:e0:1e:79:7e:
                    63:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:24:79:E3:DD:E1:7A:19:12:D3:67:01:61:38:30:8B:8C:8E:6D:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/fd93f495-0e65-34e6-aa68-155176faaf1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  12.236.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:d4:4a:ee:9f:19:4d:e3:ee:61:69:0a:8e:5e:05:20:ff:ca:
         0c:9b:b8:ac:aa:e0:73:cf:03:18:88:44:6b:93:cf:12:10:dc:
         4a:4a:61:14:dc:51:78:c7:03:0b:b3:42:0d:b7:48:c8:18:c8:
         fd:31:68:76:59:57:50:25:62:ff:ce:8a:59:b5:7d:f3:67:ad:
         67:b7:d0:aa:13:87:f3:db:49:a3:eb:4e:69:e3:f5:af:f3:ab:
         94:1c:0a:f8:cf:07:63:ae:62:3a:be:a9:f9:8a:56:83:4c:7b:
         65:31:34:8e:db:e7:91:d7:61:5a:62:cb:f6:db:38:4f:b5:f8:
         46:19:a6:16:05:69:1a:91:93:80:30:f4:86:13:31:66:f2:fc:
         05:9f:22:59:1c:bb:3c:c5:7f:9e:b7:66:73:7b:c8:f7:47:11:
         65:3d:a8:db:a3:48:f1:87:52:8c:5d:b5:af:e8:17:57:1f:96:
         f9:42:3a:c5:f7:d2:7a:27:87:9c:f7:3c:27:4a:e2:d7:1b:f3:
         52:0f:a7:d7:df:dd:14:6a:5b:bf:4a:6f:b3:95:04:b4:1c:4a:
         d8:fe:68:e3:a5:3b:4e:60:3b:6e:82:0d:34:de:bf:5c:0e:5b:
         e3:00:bd:a8:ab:0e:59:30:48:33:d8:2d:8a:3f:e2:0a:ea:04:
         91:6a:ab:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:57:57 2026 by rpki-client