Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/a580ddd2-3fff-3151-bac9-d463c9b57686.roa
File:                     a580ddd2-3fff-3151-bac9-d463c9b57686.roa (raw, json)
Hash identifier:          iNgXfYGrG/CUy6H0BHTjRboCGWo1XTseo69b9LGKv3U=
Subject key identifier:   DD:93:7E:C3:35:13:4E:0E:F4:1E:01:CC:5E:11:99:86:AE:C4:7B:6D
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584CCA41ECEBDB60EDDDF59C4480
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/a580ddd2-3fff-3151-bac9-d463c9b57686.roa
Signing time:             Sun 08 Feb 2026 02:00:32 +0000
ROA not before:           Sun 08 Feb 2026 02:00:32 +0000
ROA not after:            Sat 09 May 2026 01:00:32 +0000
asID:                     32258
IP address blocks:        12.109.223.0/24 maxlen: 24
                          12.198.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ca:41:ec:eb:db:60:ed:dd:f5:9c:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Feb  8 02:00:32 2026 GMT
            Not After : May  9 01:00:32 2026 GMT
        Subject: CN=8f286476-6b02-4abc-9664-e057d1c4f058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d5:dc:50:52:32:c5:19:05:10:a6:a9:67:98:
                    6f:35:c5:54:c9:c5:9e:93:64:99:5d:f5:2b:44:c2:
                    9b:02:30:81:9e:55:a6:ea:cc:ff:12:12:22:68:1f:
                    ee:cf:22:0e:d3:bd:85:b6:31:d6:f8:04:b4:89:f7:
                    6a:97:27:5d:f8:89:3e:7a:92:c4:bd:49:da:b5:88:
                    dc:ba:7f:e1:0c:df:14:4e:3e:57:f2:18:19:41:a5:
                    b2:fc:0c:f9:a4:2e:ac:d9:db:22:8a:91:e4:5a:19:
                    09:93:61:5f:61:29:1f:b8:7e:d3:01:96:8a:6a:bc:
                    10:4e:24:73:47:e9:9e:77:41:03:f9:77:20:cf:ae:
                    03:2f:86:f5:5e:44:03:05:0b:2f:b1:71:af:4d:2a:
                    eb:ea:f3:df:df:5b:05:ec:f7:a7:57:a4:fd:87:5c:
                    43:1a:19:6a:5f:bc:dc:32:6c:fb:d4:d6:bb:e2:8f:
                    0c:93:2d:c4:06:8a:4e:47:ab:81:df:6f:28:7b:75:
                    3a:75:4f:e2:cc:44:93:20:0b:64:94:ad:98:a8:9f:
                    c8:8b:f9:c8:5d:7f:53:00:ac:b4:0e:59:45:2a:76:
                    cf:87:9a:31:5f:db:98:d8:f7:9a:2c:c3:b1:4d:df:
                    a3:ba:f7:f9:0c:09:ce:ed:3e:72:03:fa:dc:eb:cc:
                    9a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:93:7E:C3:35:13:4E:0E:F4:1E:01:CC:5E:11:99:86:AE:C4:7B:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/a580ddd2-3fff-3151-bac9-d463c9b57686.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  12.109.223.0/24
                  12.198.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:42:e4:ee:8d:42:0a:11:88:38:26:16:1d:96:bc:45:8f:12:
         9a:6a:23:0e:a3:d3:8a:5c:34:bb:3f:12:b0:b3:03:c2:82:c2:
         60:61:23:b7:3a:19:3f:61:ff:f7:c1:a7:98:33:37:40:c4:7e:
         29:e6:47:24:23:b9:97:a4:6e:6f:59:c6:3a:c0:b0:f5:01:d3:
         c3:31:3e:41:62:e9:1a:cf:9e:7d:64:4e:2c:18:4c:c3:2b:de:
         5e:e9:f3:6a:86:8d:e4:3a:08:62:e3:2c:4c:5b:77:e1:55:d2:
         0c:0b:3d:96:a6:02:a9:5c:ef:0c:d3:25:1c:f4:42:c1:6c:20:
         3c:25:5b:9d:01:da:53:26:98:01:ec:f6:47:cd:6f:73:8a:b6:
         30:ce:85:10:e3:5e:0f:d7:e1:a7:be:65:b2:1e:b6:d0:77:c0:
         04:66:31:a1:5a:8b:49:46:90:5e:b2:16:5a:12:af:72:cb:11:
         a2:68:0a:b7:49:fd:8a:20:ec:bf:52:02:1f:2e:03:ce:95:0c:
         4f:de:94:f1:72:3e:e2:a9:41:65:ad:e5:1c:17:95:0c:a9:50:
         60:a9:b0:af:b0:5b:13:3a:3e:d9:a2:3d:88:b8:7e:de:c2:31:
         a5:6c:74:b9:b6:8d:ca:0d:f0:51:b9:ec:1d:b0:6d:07:6e:44:
         cd:9f:b3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:09:11 2026 by rpki-client