Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/53a2c680-aeb7-3d64-bb49-32c0500877c1.roa
File:                     53a2c680-aeb7-3d64-bb49-32c0500877c1.roa (raw, json)
Hash identifier:          RceAEX0szHwQZTuHSX4e3kQGA1mSuq1Tbu95EHrS07s=
Subject key identifier:   34:EF:4A:B3:9B:B8:4C:4D:FB:F5:12:2E:86:7A:35:01:7A:5A:9F:FF
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584B0A118E9EF858BCD14B250800
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/53a2c680-aeb7-3d64-bb49-32c0500877c1.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     399761
IP address blocks:        12.35.211.0/24 maxlen: 24
                          12.42.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:8e:9e:f8:58:bc:d1:4b:25:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=255724c1-0511-4859-9363-0a55e889a0bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:eb:18:50:ac:a6:bf:4a:bc:74:15:82:80:60:
                    17:2f:e3:78:2e:c8:18:28:64:45:fa:69:65:95:98:
                    77:de:c8:cd:8a:e5:49:00:2e:40:eb:84:a5:4d:bc:
                    4d:d0:26:13:e1:e7:70:30:b0:dd:4e:30:8d:ce:60:
                    c0:b9:5d:ed:45:87:d1:18:d6:58:cf:30:fc:07:52:
                    47:97:41:8a:29:c7:51:f9:33:d5:1c:ad:55:1d:3a:
                    2f:b5:2d:c8:8f:c1:35:13:d5:76:62:9a:a7:80:08:
                    d9:ef:d0:1d:1d:95:49:3c:5d:9d:a6:70:e3:c9:1e:
                    56:06:02:44:0e:d1:bd:44:e5:84:eb:da:f4:06:bb:
                    34:5c:9a:d9:1f:47:65:61:89:92:4d:58:96:db:cf:
                    e5:16:06:b0:34:c0:f3:73:b1:88:b8:dd:58:02:3e:
                    12:b1:8f:37:1d:60:9b:7e:6d:15:7a:2f:f6:40:9d:
                    ed:40:b8:90:84:88:6c:db:92:ec:6d:3c:fe:00:b8:
                    c6:c2:a1:f7:7a:83:da:4e:37:f2:00:83:9d:f6:5e:
                    9a:1f:48:31:77:53:9f:f8:c9:66:93:a5:ff:a8:8f:
                    d7:7e:36:02:b2:ea:2e:57:e7:44:d0:9d:02:f7:ba:
                    e3:8f:02:28:1c:3a:6a:c4:6e:77:f6:32:b3:f9:6f:
                    81:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:EF:4A:B3:9B:B8:4C:4D:FB:F5:12:2E:86:7A:35:01:7A:5A:9F:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/53a2c680-aeb7-3d64-bb49-32c0500877c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  12.35.211.0/24
                  12.42.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:f0:eb:d1:f7:9e:c9:b1:a3:c0:ff:77:e1:62:fd:62:cb:1d:
         2f:2f:88:bc:03:b9:a5:e6:de:2c:19:56:b5:25:75:33:be:3a:
         c1:76:9b:54:41:7c:fb:54:0d:0a:9c:ec:0a:6e:c1:e7:ee:88:
         97:71:31:82:cd:04:49:28:f9:a8:d4:d2:fd:e2:89:82:b8:79:
         f0:c6:83:a1:09:00:bc:9e:19:3e:7d:db:cf:48:f6:9a:4e:61:
         5f:48:60:76:6e:42:11:60:0b:58:2d:5b:d4:55:05:71:2d:18:
         0e:6a:8d:c5:c5:77:61:f4:99:63:b3:f4:b3:f0:e2:9f:b5:f0:
         fc:0e:9a:53:b7:d8:c3:19:e6:66:03:97:56:76:e3:71:6c:68:
         86:9a:88:dc:8c:b9:72:b7:a1:89:b4:b2:8a:d0:2c:fe:1f:0d:
         24:29:b3:17:75:75:95:42:14:53:79:58:e8:8f:ce:9f:b3:be:
         ba:05:4a:83:e5:e4:6d:d4:a5:98:a3:1a:6c:03:91:a7:0b:09:
         b9:e9:38:e4:d3:0c:c0:bb:41:f9:90:2e:b5:b4:ed:95:47:c1:
         f4:32:a2:25:b8:1e:c0:69:52:67:97:4e:b2:df:8c:c0:73:86:
         80:6d:c9:ac:4c:99:da:c6:81:9a:cf:21:c4:de:67:fb:d8:5b:
         b5:70:f1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 12:35:21 2025 by rpki-client