Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/7d9a67f8-c608-39d2-9cf9-75fd0f540d0e.roa
File:                     7d9a67f8-c608-39d2-9cf9-75fd0f540d0e.roa (raw, json)
Hash identifier:          XxSFDgLlJKCtvMRpZVHQSfapRbqMvJZHW7a25ChONag=
Subject key identifier:   1E:34:2C:B9:30:C6:28:1D:77:CC:55:48:01:46:56:F7:C7:AC:37:70
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584B047C06CC66AE2A6D7A743A80
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/7d9a67f8-c608-39d2-9cf9-75fd0f540d0e.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     397593
IP address blocks:        12.35.100.0/24 maxlen: 24
                          12.133.253.0/24 maxlen: 24
                          12.207.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7c:06:cc:66:ae:2a:6d:7a:74:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=852b3d82-bb5f-45bb-8c97-44248fe1d35e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0b:6c:3e:dc:5f:91:0b:9a:95:69:a1:38:e7:
                    ea:f7:f2:8d:3b:3a:61:cb:54:e4:4e:31:7c:8e:e4:
                    bd:a4:30:eb:bc:c9:0f:be:6d:5f:54:da:8e:47:c2:
                    3f:e1:08:ca:4d:a5:90:16:64:a8:34:82:96:a3:7e:
                    c5:02:f4:78:16:87:89:c9:c0:51:fc:35:28:37:2e:
                    92:1c:d8:ea:42:b1:16:1e:76:3d:a3:6c:30:54:83:
                    b0:d6:3f:47:8d:fd:42:f5:b8:03:34:7d:0f:49:ae:
                    0a:88:06:b1:51:be:d3:55:4b:b5:4d:75:8e:03:50:
                    04:63:c9:51:e1:7b:6c:e0:09:43:78:ef:45:de:42:
                    f3:ad:a6:64:eb:87:13:61:6a:d4:f9:a2:19:53:83:
                    d8:49:41:7a:a1:30:34:ca:96:fc:35:ee:de:a7:45:
                    fb:75:83:51:ce:75:77:dc:67:c2:60:cc:b9:7d:89:
                    60:3b:fb:26:3f:e5:18:db:fc:4e:79:35:38:ef:53:
                    ab:7c:80:3b:60:fd:14:0e:28:8a:96:62:b3:b8:f5:
                    a8:d9:65:59:75:f0:e4:53:b3:5a:19:ff:fc:ec:90:
                    29:57:83:33:c9:3c:a9:da:db:20:65:85:7b:61:ff:
                    54:e6:5f:0e:fd:d0:83:bb:53:3e:84:36:a0:05:f1:
                    55:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:34:2C:B9:30:C6:28:1D:77:CC:55:48:01:46:56:F7:C7:AC:37:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/7d9a67f8-c608-39d2-9cf9-75fd0f540d0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  12.35.100.0/24
                  12.133.253.0/24
                  12.207.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:36:55:c5:87:a9:e8:69:25:93:84:ed:8c:fc:06:06:8d:02:
         4a:03:21:fb:d7:a8:02:a8:2b:ca:cb:81:1e:2b:6e:a1:61:b0:
         f1:d9:5f:36:81:c9:10:19:94:b5:0f:3b:5e:b6:aa:fe:55:40:
         2b:15:00:8a:46:94:40:9b:04:8d:27:da:94:19:46:65:36:d1:
         80:06:79:af:27:f7:4f:cf:5c:f9:67:53:a0:1d:b7:93:f7:6b:
         09:da:8b:3e:c5:ff:a3:ee:54:70:16:b2:cc:0f:d6:99:04:53:
         98:01:cb:99:09:f0:40:c7:b2:4e:61:3f:d0:fc:f5:73:a3:08:
         b9:91:e8:c9:37:e0:6e:01:92:28:ec:df:b8:e1:8f:65:45:77:
         80:dc:53:6a:83:79:3a:af:a0:9c:db:53:2e:2e:92:41:8d:11:
         e2:da:54:e9:54:4d:e5:72:c4:3c:45:d7:0d:89:99:bf:b4:d7:
         7b:8b:ac:44:38:f5:eb:f4:5d:d9:06:c7:ad:2d:74:76:64:c4:
         20:c7:70:92:b4:40:46:0a:08:52:80:99:f2:a5:8f:be:4b:c2:
         0f:3f:be:0d:08:ec:b0:4c:72:f5:6b:fd:6d:2b:fe:9e:91:ed:
         5a:be:01:38:3b:ac:6e:36:18:86:72:82:04:15:f6:51:1e:c8:
         4e:f3:2a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:37:01 2025 by rpki-client