Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/3bd90033-fbbc-3992-9297-056baac04ffb.roa
File:                     3bd90033-fbbc-3992-9297-056baac04ffb.roa (raw, json)
Hash identifier:          THlJU8E505eYZloKGfBqxWYTbvftvuJOaoOFU5iUhWY=
Subject key identifier:   B6:EE:F9:D0:2F:C3:29:C2:18:89:FB:00:0A:B6:6C:21:7B:A3:CB:FA
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584CCA41E01C2370D859290C5480
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/3bd90033-fbbc-3992-9297-056baac04ffb.roa
Signing time:             Sun 08 Feb 2026 02:00:32 +0000
ROA not before:           Sun 08 Feb 2026 02:00:32 +0000
ROA not after:            Sat 09 May 2026 01:00:32 +0000
asID:                     17117
IP address blocks:        12.17.158.0/24 maxlen: 24
                          12.129.131.0/24 maxlen: 24
                          12.162.219.0/24 maxlen: 24
                          12.179.178.0/24 maxlen: 24
                          12.184.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ca:41:e0:1c:23:70:d8:59:29:0c:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Feb  8 02:00:32 2026 GMT
            Not After : May  9 01:00:32 2026 GMT
        Subject: CN=c0080a82-b842-476e-bd0f-959705aaa94f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0c:a5:c3:e5:03:6e:15:74:55:2e:cc:5e:e9:
                    53:96:25:3e:35:ea:7c:76:4d:fa:a5:69:62:47:e5:
                    e9:85:f0:d7:5b:8e:91:52:20:01:83:51:ad:06:a3:
                    c9:79:f5:f7:e7:d9:fb:d7:b9:12:f8:91:c3:35:4b:
                    ae:6c:fd:f4:8a:4f:7f:a3:6c:bc:69:d1:4c:f2:7f:
                    bf:24:38:ac:e9:ec:b2:e3:5a:e1:85:57:cf:ff:8c:
                    ba:a7:d1:68:1f:20:46:55:07:0d:98:67:65:c9:4c:
                    1e:44:ca:31:b8:db:60:5f:43:87:94:fc:7c:76:ff:
                    22:da:8e:5f:35:c0:36:22:ed:b4:58:32:3c:ee:94:
                    b0:d4:4d:da:e0:3b:44:31:11:43:b3:17:df:21:38:
                    72:3a:b6:e9:34:06:85:ab:b6:43:f7:e7:ce:fa:10:
                    2f:67:d0:29:33:84:88:f5:d1:09:bf:f9:3f:7c:4d:
                    eb:33:93:06:ca:b2:6d:3b:c1:80:71:04:02:94:0a:
                    0b:d9:95:75:9a:2e:d9:d9:34:58:95:3b:06:1c:ae:
                    f6:f7:a4:bb:11:27:a9:44:cd:b2:09:48:76:8a:a2:
                    1b:94:80:16:03:50:48:0c:a9:ac:11:83:64:57:6b:
                    be:de:43:45:b2:6c:77:c1:3c:c6:65:80:a0:f8:15:
                    7e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:EE:F9:D0:2F:C3:29:C2:18:89:FB:00:0A:B6:6C:21:7B:A3:CB:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/3bd90033-fbbc-3992-9297-056baac04ffb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  12.17.158.0/24
                  12.129.131.0/24
                  12.162.219.0/24
                  12.179.178.0/24
                  12.184.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:2e:a4:d9:ef:e4:ec:7c:1c:3f:5d:5e:60:c0:49:46:d7:cc:
         6e:e1:b8:c7:cd:f0:f1:22:4a:4e:f5:3e:d3:d1:c5:75:3f:44:
         fb:b4:d9:fc:e2:91:e9:98:27:82:44:cd:78:c0:08:cb:18:5d:
         6f:fd:8e:e4:aa:bf:6c:60:ef:40:24:50:dc:6e:ec:c3:61:12:
         bd:a6:2a:1a:1f:95:42:8d:95:66:38:85:07:10:15:bc:1c:b4:
         a9:84:2b:ea:8d:a1:a6:63:88:90:e1:b1:ee:1d:29:06:37:13:
         91:f3:e9:3b:4a:b2:0c:67:70:01:4f:3c:cf:3c:62:19:d1:c9:
         7d:09:b5:35:22:0f:24:08:35:ac:08:93:18:7b:f1:8a:3d:88:
         a1:a2:b9:51:63:05:2d:b9:08:4e:db:8e:96:04:cb:96:3e:d9:
         2f:32:87:e1:fa:05:8a:33:b2:fb:a6:0e:c3:51:58:5c:e8:1b:
         76:58:ae:3a:4c:96:48:35:14:22:5e:63:43:d0:b0:88:29:32:
         c8:9e:9a:66:4e:d7:49:40:df:cb:6c:07:15:37:20:ed:09:6f:
         c8:85:6a:8d:70:75:2e:97:54:2a:68:78:65:b0:e1:01:41:36:
         9d:ab:77:51:93:1c:21:b6:7e:cf:4e:ef:86:5d:4c:7a:2f:86:
         cd:7e:9c:3a
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWEzKQeAcI3DYWSkMVIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzE0MTg2ZGYtODdiYS00ZGQ1LWFkYmYtMWM2YzJiYmUw
NGE4MB4XDTI2MDIwODAyMDAzMloXDTI2MDUwOTAxMDAzMlowLzEtMCsGA1UEAxMk
YzAwODBhODItYjg0Mi00NzZlLWJkMGYtOTU5NzA1YWFhOTRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAylw+UDbhV0VS7MXulTliU+Nep8dk36pWli
R+XphfDXW46RUiABg1GtBqPJefX359n717kS+JHDNUuubP30ik9/o2y8adFM8n+/
JDis6eyy41rhhVfP/4y6p9FoHyBGVQcNmGdlyUweRMoxuNtgX0OHlPx8dv8i2o5f
NcA2Iu20WDI87pSw1E3a4DtEMRFDsxffIThyOrbpNAaFq7ZD9+fO+hAvZ9ApM4SI
9dEJv/k/fE3rM5MGyrJtO8GAcQQClAoL2ZV1mi7Z2TRYlTsGHK7296S7ESepRM2y
CUh2iqIblIAWA1BIDKmsEYNkV2u+3kNFsmx3wTzGZYCg+BV+gQIDAQABo4IDbTCC
A2kwHQYDVR0OBBYEFLbu+dAvwynCGIn7AAq2bCF7o8v6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zMTQx
ODZkZi04N2JhLTRkZDUtYWRiZi0xYzZjMmJiZTA0YTgvM2JkOTAwMzMtZmJiYy0z
OTkyLTkyOTctMDU2YmFhYzA0ZmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzE0MTg2ZGYtODdiYS00ZGQ1LWFk
YmYtMWM2YzJiYmUwNGE4LzMxNDE4NmRmLTg3YmEtNGRkNS1hZGJmLTFjNmMyYmJl
MDRhOC5jcmwwHwYDVR0jBBgwFoAUUhXIm1E3DpTxq8Kvfcj2u+Hy5W8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zMTQxODZkZi04N2JhLTRkZDUtYWRiZi0xYzZj
MmJiZTA0YTguY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQADBGeAwQA
DIGDAwQADKLbAwQADLOyAwQADLgfMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAB4upNnv5Ox8HD9dXmDASUbX
zG7huMfN8PEiSk71PtPRxXU/RPu02fzikemYJ4JEzXjACMsYXW/9juSqv2xg70Ak
UNxu7MNhEr2mKhoflUKNlWY4hQcQFbwctKmEK+qNoaZjiJDhse4dKQY3E5Hz6TtK
sgxncAFPPM88YhnRyX0JtTUiDyQINawIkxh78Yo9iKGiuVFjBS25CE7bjpYEy5Y+
2S8yh+H6BYozsvumDsNRWFzoG3ZYrjpMlkg1FCJeY0PQsIgpMsiemmZO10lA38ts
BxU3IO0Jb8iFao1wdS6XVCpoeGWw4QFBNp2rd1GTHCG2fs9O74ZdTHovhs1+nDo=
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:33:09 2026 by rpki-client