Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/d6cea54b-b225-379a-9a7a-1f1eb7a57caa.roa
File:                     d6cea54b-b225-379a-9a7a-1f1eb7a57caa.roa (raw, json)
Hash identifier:          Q8FfGaUUNh/OlaXRwcrJci0avvNELC9/k9KKnT/5sRo=
Subject key identifier:   FA:22:08:E7:F9:A8:94:D4:B6:45:EC:1C:2A:16:F5:B8:B2:87:2E:4D
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584D0A7798A043310827F3F95840
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/d6cea54b-b225-379a-9a7a-1f1eb7a57caa.roa
Signing time:             Tue 03 Mar 2026 02:00:32 +0000
ROA not before:           Tue 03 Mar 2026 02:00:32 +0000
ROA not after:            Mon 01 Jun 2026 01:00:32 +0000
asID:                     399276
IP address blocks:        12.238.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0a:77:98:a0:43:31:08:27:f3:f9:58:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Mar  3 02:00:32 2026 GMT
            Not After : Jun  1 01:00:32 2026 GMT
        Subject: CN=162e4fa1-01ba-4c26-8f8c-3284e696febd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d0:2b:54:e8:11:4d:38:52:14:5a:2a:cc:23:
                    cb:6e:39:40:ae:ae:67:ac:2a:24:fa:1a:ea:09:72:
                    d5:ab:00:6c:a3:48:e7:06:2e:91:46:3d:1a:ac:23:
                    c6:2a:79:f2:17:45:71:66:c4:8b:ec:9b:34:30:e3:
                    13:7f:b8:f5:f4:ea:da:5a:5b:ab:40:86:34:9d:99:
                    91:05:c6:c3:e1:50:41:1a:0c:43:be:fc:6b:8f:ff:
                    a2:83:60:c6:ee:a3:9e:3f:35:f7:42:fe:21:01:1c:
                    ca:5f:1c:bb:68:f4:3b:04:cb:b1:ad:06:74:96:85:
                    11:96:65:ed:ee:28:fe:e0:cb:8d:bb:57:4e:bc:a0:
                    1c:e8:e1:67:2a:85:e5:3c:83:bf:99:7e:3b:9f:64:
                    28:f5:87:80:82:6e:5c:77:0b:d9:c5:fe:fe:3d:a4:
                    29:65:71:74:a6:47:52:4e:cd:d8:e2:5c:64:3a:9f:
                    d7:63:8d:9a:d8:95:e8:1c:5c:31:b5:14:b4:45:a7:
                    fc:79:ac:dd:9e:63:a6:c0:6b:51:44:48:31:b7:95:
                    c8:34:30:75:49:19:ca:66:76:c0:9d:09:e7:a3:0e:
                    b0:da:1b:8b:4e:b4:3b:98:92:36:f3:b0:89:df:90:
                    54:79:51:62:a4:9a:c7:5a:2b:84:fb:25:ce:c3:37:
                    e7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:22:08:E7:F9:A8:94:D4:B6:45:EC:1C:2A:16:F5:B8:B2:87:2E:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/d6cea54b-b225-379a-9a7a-1f1eb7a57caa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  12.238.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:ed:4e:7e:c3:0d:93:f8:45:b7:3e:18:7f:7c:0f:fe:89:4c:
         59:20:4f:12:cd:67:23:e9:6e:c6:1b:94:a7:b1:d0:9a:c3:ce:
         48:49:f5:57:e9:73:a8:3e:8a:8f:a2:61:e0:5c:e1:44:a8:3b:
         f8:bf:41:66:cb:eb:8e:9c:10:05:e4:6f:6e:42:08:8e:be:07:
         a0:d3:e8:23:1e:51:5c:66:db:6c:65:1d:11:13:fc:1d:bc:29:
         0e:51:30:0b:d6:a9:83:66:48:db:07:b3:d5:6d:3a:51:92:b3:
         75:24:74:a4:42:06:35:d2:5f:d6:08:75:fe:eb:f5:04:53:64:
         be:31:80:49:90:05:b4:b6:0e:fc:32:8b:6b:da:c8:a0:95:56:
         cd:16:40:2e:ed:64:9d:ae:22:d8:4e:14:e0:67:0f:05:44:37:
         54:47:14:60:3d:c0:70:72:44:e5:94:c5:37:6a:41:ad:63:55:
         d0:b0:98:84:ca:30:5a:d0:9f:cd:bb:b4:07:07:21:7e:1b:13:
         c4:f3:e5:29:06:17:3d:66:7e:fe:bb:7a:03:a5:19:09:69:2c:
         a1:c5:7d:32:a5:90:8a:1a:c6:89:98:74:2e:23:23:89:1b:fc:
         e4:80:26:53:8f:39:8e:c5:46:21:f8:05:f8:7a:bc:19:33:1a:
         90:9f:db:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 10:00:34 2026 by rpki-client