Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/53a2c680-aeb7-3d64-bb49-32c0500877c1.roa
File:                     53a2c680-aeb7-3d64-bb49-32c0500877c1.roa (raw, json)
Hash identifier:          d5icbqvCUWWc5P5sDnwcS4WeSuq/WsehTL0SBmnGheU=
Subject key identifier:   50:2A:70:F8:A0:42:A2:8E:51:D7:31:78:3E:17:E0:60:CF:AD:6F:60
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584CCA421B466DD3622A50FC5940
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/53a2c680-aeb7-3d64-bb49-32c0500877c1.roa
Signing time:             Sun 08 Feb 2026 02:00:32 +0000
ROA not before:           Sun 08 Feb 2026 02:00:32 +0000
ROA not after:            Sat 09 May 2026 01:00:32 +0000
asID:                     399761
IP address blocks:        12.35.211.0/24 maxlen: 24
                          12.42.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ca:42:1b:46:6d:d3:62:2a:50:fc:59:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Feb  8 02:00:32 2026 GMT
            Not After : May  9 01:00:32 2026 GMT
        Subject: CN=b97de342-7861-43ed-8c92-c30a1b826df1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:96:28:95:03:10:cb:a8:14:fd:d7:f7:db:27:
                    95:fa:0b:63:a2:4a:84:b7:eb:f1:cf:4c:67:c5:99:
                    9c:fd:e8:51:73:a8:eb:fa:5f:1b:77:a3:48:c7:f8:
                    65:03:a9:c7:ac:e2:26:7b:9a:35:8d:8b:16:07:cf:
                    6c:15:8c:ce:04:4d:35:94:2d:42:a9:52:f1:06:6c:
                    e1:a0:b7:fd:45:75:93:fa:65:47:94:7e:e9:09:3e:
                    6c:72:79:25:60:cb:c2:94:02:4c:a2:a1:87:2e:c7:
                    46:29:1b:91:b7:26:16:04:b5:9e:48:43:41:c9:f0:
                    6d:90:d3:1b:09:05:b1:db:eb:69:ee:e9:83:5c:f9:
                    c7:81:8e:28:b2:71:65:7e:69:4c:67:a8:d9:f7:16:
                    f4:c2:69:72:60:3c:59:43:d3:fc:91:97:80:19:d2:
                    85:c1:fd:c7:c6:29:ca:fb:de:ba:a1:a0:33:23:47:
                    04:d7:a3:b3:03:37:4d:8d:17:c2:2d:0f:91:3a:13:
                    1d:17:fc:7e:e9:66:74:70:3f:e0:bf:ba:a2:fe:10:
                    ca:9e:a3:03:c9:17:a0:64:5d:aa:d4:df:df:0d:82:
                    21:6e:75:43:5a:36:1a:8c:8f:32:b1:90:2b:09:37:
                    0b:f1:74:ed:4e:99:f3:51:42:36:e5:df:2b:87:6f:
                    43:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:2A:70:F8:A0:42:A2:8E:51:D7:31:78:3E:17:E0:60:CF:AD:6F:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/53a2c680-aeb7-3d64-bb49-32c0500877c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  12.35.211.0/24
                  12.42.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:a7:00:9b:93:94:75:3e:68:c3:e6:3f:6d:a9:94:f9:bb:a7:
         ce:a7:50:f9:94:ad:6b:47:91:e1:51:22:b1:a6:78:38:df:3a:
         03:50:a5:c8:9a:4f:94:ff:6e:65:10:31:6d:02:3f:af:9f:70:
         0d:9d:33:b4:83:10:ac:c1:84:45:0c:3e:da:4c:b7:8d:b2:8c:
         5f:66:13:a4:ba:0c:88:39:55:b6:61:c3:eb:d3:5a:9f:0b:d2:
         b5:07:b0:97:a1:3d:27:ed:4f:3c:91:47:3c:ee:8c:59:56:64:
         09:98:50:8e:41:c3:d6:bd:9c:e1:74:14:c8:2f:9c:6c:c0:6c:
         d0:58:2a:b0:3e:bb:54:1b:9c:61:be:cd:77:ee:0e:09:c9:63:
         b0:70:fa:9c:57:2a:06:ca:82:21:53:ad:7b:b8:41:f4:02:76:
         fd:79:6d:2f:4e:a4:54:6c:6e:e2:07:e8:0f:f7:b4:18:10:c3:
         87:39:43:2c:3d:04:56:c0:b7:bb:48:2a:1c:f8:4c:7a:32:2e:
         e7:e6:5f:e3:60:19:e3:b6:29:4a:01:de:0d:f3:a1:7a:71:66:
         c3:5d:4a:25:ad:2b:96:64:6b:d9:c1:05:fc:ee:82:19:08:72:
         81:f2:cd:c5:a8:0a:72:98:56:7b:55:4c:7f:0d:da:24:a0:b0:
         4f:27:25:6b
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEzKQhtGbdNiKlD8WUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzE0MTg2ZGYtODdiYS00ZGQ1LWFkYmYtMWM2YzJiYmUw
NGE4MB4XDTI2MDIwODAyMDAzMloXDTI2MDUwOTAxMDAzMlowLzEtMCsGA1UEAxMk
Yjk3ZGUzNDItNzg2MS00M2VkLThjOTItYzMwYTFiODI2ZGYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5YolQMQy6gU/df32yeV+gtjokqEt+vxz0xn
xZmc/ehRc6jr+l8bd6NIx/hlA6nHrOIme5o1jYsWB89sFYzOBE01lC1CqVLxBmzh
oLf9RXWT+mVHlH7pCT5scnklYMvClAJMoqGHLsdGKRuRtyYWBLWeSENByfBtkNMb
CQWx2+tp7umDXPnHgY4osnFlfmlMZ6jZ9xb0wmlyYDxZQ9P8kZeAGdKFwf3HxinK
+966oaAzI0cE16OzAzdNjRfCLQ+ROhMdF/x+6WZ0cD/gv7qi/hDKnqMDyRegZF2q
1N/fDYIhbnVDWjYajI8ysZArCTcL8XTtTpnzUUI25d8rh29DNwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFFAqcPigQqKOUdcxeD4X4GDPrW9gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zMTQx
ODZkZi04N2JhLTRkZDUtYWRiZi0xYzZjMmJiZTA0YTgvNTNhMmM2ODAtYWViNy0z
ZDY0LWJiNDktMzJjMDUwMDg3N2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzE0MTg2ZGYtODdiYS00ZGQ1LWFk
YmYtMWM2YzJiYmUwNGE4LzMxNDE4NmRmLTg3YmEtNGRkNS1hZGJmLTFjNmMyYmJl
MDRhOC5jcmwwHwYDVR0jBBgwFoAUUhXIm1E3DpTxq8Kvfcj2u+Hy5W8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zMTQxODZkZi04N2JhLTRkZDUtYWRiZi0xYzZj
MmJiZTA0YTguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQADCPTAwQA
DCp/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBABenAJuTlHU+aMPmP22plPm7p86nUPmUrWtHkeFRIrGmeDjf
OgNQpciaT5T/bmUQMW0CP6+fcA2dM7SDEKzBhEUMPtpMt42yjF9mE6S6DIg5VbZh
w+vTWp8L0rUHsJehPSftTzyRRzzujFlWZAmYUI5Bw9a9nOF0FMgvnGzAbNBYKrA+
u1QbnGG+zXfuDgnJY7Bw+pxXKgbKgiFTrXu4QfQCdv15bS9OpFRsbuIH6A/3tBgQ
w4c5Qyw9BFbAt7tIKhz4THoyLufmX+NgGeO2KUoB3g3zoXpxZsNdSiWtK5Zka9nB
BfzughkIcoHyzcWoCnKYVntVTH8N2iSgsE8nJWs=
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:31:00 2026 by rpki-client