Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/87e3c1c7-05ca-33fd-aa17-4de8f0fc2675.roa
File:                     87e3c1c7-05ca-33fd-aa17-4de8f0fc2675.roa (raw, json)
Hash identifier:          /p+gg6ovI2wZyKJU+qwPvHbUbmtC5EugOKhT1Yu/6ak=
Subject key identifier:   8C:B6:B4:4A:FD:65:80:22:B5:3C:72:03:E3:9F:62:EC:D4:D4:15:B0
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584CB121AF2B2AF917A918CA1800
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/87e3c1c7-05ca-33fd-aa17-4de8f0fc2675.roa
Signing time:             Fri 30 Jan 2026 02:00:31 +0000
ROA not before:           Fri 30 Jan 2026 02:00:31 +0000
ROA not after:            Thu 30 Apr 2026 01:00:31 +0000
asID:                     17117
IP address blocks:        12.26.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b1:21:af:2b:2a:f9:17:a9:18:ca:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Jan 30 02:00:31 2026 GMT
            Not After : Apr 30 01:00:31 2026 GMT
        Subject: CN=898048bf-c9d5-4fb8-a541-e83f6cb00ee9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e2:60:93:40:fc:06:65:49:a4:6c:03:23:07:
                    9a:fa:d7:1e:3c:b1:97:bb:ba:b5:46:21:41:23:30:
                    c0:4c:df:b4:ee:46:6f:b7:a9:20:2f:6c:82:21:6a:
                    cf:6e:ca:d2:27:78:fe:33:a4:c9:78:1c:45:92:73:
                    db:3e:55:90:67:98:c8:4b:2b:b2:0f:d1:8f:c5:60:
                    89:27:12:36:a2:ee:74:97:4f:1c:89:75:07:a2:21:
                    bf:1a:38:29:bf:86:81:d1:dc:c6:46:2e:e3:d5:a6:
                    2a:c8:b9:3f:67:b6:43:54:25:a6:b2:be:b4:db:d8:
                    79:95:f1:cc:78:58:75:09:fd:9a:c6:f0:f5:80:a7:
                    41:43:c5:40:fe:d3:d9:06:1f:78:42:ba:67:9d:7c:
                    75:33:b3:63:c7:97:3c:2e:70:62:3f:2b:6e:f8:4a:
                    23:ba:db:09:ac:f0:06:ef:3e:c6:b6:30:b2:fc:4f:
                    b0:21:ea:b5:cc:c5:91:02:18:8d:3a:81:36:e7:46:
                    fe:f7:c4:ee:cd:84:c8:28:cd:80:b1:ee:fd:ce:8e:
                    98:b9:d4:9b:78:65:7f:e4:b8:a1:df:02:1d:73:7d:
                    46:28:0a:4e:c7:93:e6:4d:62:7a:89:63:b6:c4:82:
                    6a:85:c8:a7:de:f6:20:09:35:bb:95:61:0e:f3:09:
                    e5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B6:B4:4A:FD:65:80:22:B5:3C:72:03:E3:9F:62:EC:D4:D4:15:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/87e3c1c7-05ca-33fd-aa17-4de8f0fc2675.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  12.26.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:a5:c2:ae:55:9c:fd:21:1e:fb:f6:f0:3d:a4:6d:66:31:90:
         87:f5:c4:aa:f0:09:3d:8b:92:50:f3:ad:40:99:10:53:43:40:
         a0:54:4f:42:62:c5:b5:03:57:6d:c9:a5:10:96:a7:c2:09:55:
         f6:c7:fd:7b:9e:48:72:de:ef:ad:4c:7a:a7:df:0d:67:8f:4e:
         28:09:ba:02:51:81:55:1a:72:e1:e7:44:78:98:31:48:19:b0:
         6c:2b:cf:80:b8:4e:c8:f0:d6:3b:b5:67:94:0f:78:65:ea:d7:
         47:5a:ec:58:b1:0e:21:cc:e8:b8:f3:fd:9d:e3:a6:67:e0:0f:
         09:d5:1b:19:d6:ed:1b:03:c4:a4:56:1a:d8:96:a1:06:0a:05:
         91:e2:17:bc:d4:f6:f8:32:1a:a8:74:37:46:bb:36:f5:5f:7a:
         b2:2d:62:75:72:35:29:50:0a:7c:c1:44:37:e9:d0:1e:16:13:
         07:8a:a5:7d:a2:b6:cd:37:67:6a:9d:3e:fc:4f:f5:94:74:60:
         96:dd:73:fe:0e:28:6e:e8:6a:41:7e:62:b0:73:77:15:9e:2a:
         f2:17:43:bf:9e:53:09:ac:5a:d3:cb:d9:cc:bd:c5:eb:18:f2:
         f4:a9:fd:6f:9b:0b:fa:9b:a5:61:a9:30:f3:af:90:63:a6:c6:
         73:76:51:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:30:56 2026 by rpki-client