Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/f8b8abe9-1bc2-39d4-8f95-ab062ee885f1.roa
File:                     f8b8abe9-1bc2-39d4-8f95-ab062ee885f1.roa (raw, json)
Hash identifier:          xPQu+kqX0e/ziZkUvO9e0VkdP0OcNfkA1TZpQrTipJQ=
Subject key identifier:   27:85:40:7E:1C:ED:66:19:41:B9:48:7E:F1:77:02:6F:E7:35:00:FD
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584F612D6C53630D552E4EEA6A00
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/f8b8abe9-1bc2-39d4-8f95-ab062ee885f1.roa
Signing time:             Sat 03 Oct 2026 13:00:13 +0000
ROA not before:           Sat 03 Oct 2026 13:00:13 +0000
ROA not after:            Fri 01 Jan 2027 14:00:13 +0000
asID:                     32075
IP address blocks:        12.32.252.0/24 maxlen: 24
                          12.236.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:61:2d:6c:53:63:0d:55:2e:4e:ea:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Oct  3 13:00:13 2026 GMT
            Not After : Jan  1 14:00:13 2027 GMT
        Subject: CN=5cf8e7aa-8d34-4643-a9a7-235dd0eca795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c1:7b:db:60:03:b4:f8:1f:ad:08:d6:4d:64:
                    72:90:cb:e9:1a:2c:0c:38:69:08:e1:e0:1e:dd:61:
                    9c:dd:7f:f0:b3:4f:6e:dc:f0:af:0a:e7:35:1b:a6:
                    91:b5:6f:5f:01:69:80:cf:8a:7e:ec:dd:e3:56:67:
                    b5:8a:0d:2b:c8:30:52:d8:5b:cd:63:3e:60:a2:8e:
                    74:87:79:8b:de:d1:31:c4:92:16:a1:8f:86:3c:24:
                    40:1e:2d:b7:dd:56:f4:26:86:85:3b:f5:47:09:17:
                    28:50:a4:c6:76:2f:b3:3f:26:9c:d0:bc:ca:e2:cd:
                    6f:4c:6c:7c:9c:df:37:a0:7b:28:fb:36:d6:60:f2:
                    98:c6:21:71:10:08:32:f4:f7:dc:71:d0:5c:71:69:
                    17:dc:81:9d:fa:d0:0d:a2:47:3c:1b:cf:f6:d2:01:
                    a3:64:a6:16:77:a5:63:5a:4c:22:b3:cd:cd:88:22:
                    5f:78:33:a9:ec:4b:f2:a3:9b:ba:2b:e7:37:97:21:
                    85:ca:40:6f:37:fd:cb:52:8c:3e:4d:d0:e8:e4:e5:
                    f7:21:74:1c:ec:9d:88:a3:a9:0f:da:b5:57:8c:bb:
                    6d:d3:61:e9:bc:bf:f2:63:41:dd:20:ed:a0:d1:53:
                    fd:49:96:8e:25:16:1c:dc:ef:fa:30:d4:27:02:bf:
                    ca:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:85:40:7E:1C:ED:66:19:41:B9:48:7E:F1:77:02:6F:E7:35:00:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/f8b8abe9-1bc2-39d4-8f95-ab062ee885f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  12.32.252.0/24
                  12.236.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:e8:fa:63:33:07:92:89:19:53:e4:08:44:80:97:93:30:43:
         b1:fb:b8:73:dc:4d:8b:81:dc:14:88:50:b7:e3:d8:22:3c:b0:
         34:30:28:62:da:8a:13:c3:07:7f:a0:c2:57:b9:28:c7:71:c0:
         04:26:e8:8d:24:b4:93:42:ee:c9:37:37:20:6c:6f:df:79:97:
         46:75:00:c2:f6:07:58:04:6f:96:07:19:56:23:ec:16:62:ba:
         2f:03:17:26:86:4b:23:7e:6a:fd:3b:c1:f1:1d:4a:8c:ce:79:
         f4:57:57:72:a5:ef:54:0c:d4:ad:82:91:c9:b5:a2:5e:e1:cd:
         ae:63:8d:38:b6:70:a1:86:37:b8:56:2b:5f:29:4c:fe:e2:63:
         de:dc:84:97:ec:6e:6a:fe:19:e3:53:b2:7b:fe:ae:0a:16:29:
         d8:5b:59:6e:53:40:03:d1:54:90:b4:c5:f8:4e:6e:28:19:e7:
         54:16:fe:ae:ec:f9:62:f8:9a:c3:78:82:b0:a9:b1:7f:e6:3b:
         f6:e6:34:0f:d3:20:02:8f:f5:10:24:7a:9e:20:bc:57:3c:84:
         18:82:04:6e:2a:94:32:2d:95:66:36:57:da:d3:64:82:41:04:
         81:c5:19:7b:b8:40:75:c5:d2:5b:df:9d:4d:94:26:c0:74:a4:
         ea:af:db:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 12:23:58 2026 by rpki-client