Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/d6cea54b-b225-379a-9a7a-1f1eb7a57caa.roa
File:                     d6cea54b-b225-379a-9a7a-1f1eb7a57caa.roa (raw, json)
Hash identifier:          TKBrcZRCamcpip6Y12nLQ/uSWdlOZ/C7PatwlnNqlkw=
Subject key identifier:   29:5C:E6:EB:9C:25:18:A2:1B:00:51:EA:AC:25:42:8B:2A:F4:DC:2D
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584DEB15DA3C32ABE0A4BB695880
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/d6cea54b-b225-379a-9a7a-1f1eb7a57caa.roa
Signing time:             Fri 22 May 2026 13:00:31 +0000
ROA not before:           Fri 22 May 2026 13:00:31 +0000
ROA not after:            Thu 20 Aug 2026 13:00:31 +0000
asID:                     399276
IP address blocks:        12.238.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:eb:15:da:3c:32:ab:e0:a4:bb:69:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: May 22 13:00:31 2026 GMT
            Not After : Aug 20 13:00:31 2026 GMT
        Subject: CN=85cde19e-46ef-45df-964c-9230d665b304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:74:5a:db:53:12:34:2e:e7:41:af:72:6a:bb:
                    13:91:9a:7c:7c:7e:a6:cd:2b:cb:fa:32:06:89:c9:
                    2d:4b:2a:57:75:92:81:16:cd:cf:27:67:81:ff:a9:
                    c3:27:62:86:d0:5c:33:47:ff:92:48:28:ed:f9:74:
                    c2:50:2c:fb:3d:02:e1:73:6c:48:07:9b:4c:6f:93:
                    2b:81:ef:ed:6c:ef:88:56:40:7f:f8:3a:54:4e:01:
                    1d:37:5e:4f:f6:20:33:cf:f2:39:11:ac:39:1a:2d:
                    03:91:7f:ee:d4:37:0e:ee:59:41:d2:ed:a4:81:f2:
                    d4:59:1b:ce:19:64:e7:24:d0:9d:be:5b:a5:32:bf:
                    a7:2e:8b:64:26:85:bc:17:a7:23:7b:f7:a4:87:d7:
                    a0:ac:97:c8:3a:ff:1c:18:fb:cc:6b:bc:38:ac:30:
                    f7:c2:6a:0a:da:80:37:57:1a:93:22:4b:d8:94:9c:
                    f1:55:7f:95:63:c2:56:e3:69:a5:81:85:e1:d7:b4:
                    e0:cd:4a:b9:5c:61:4a:a0:0d:37:fc:b6:4b:27:bd:
                    e1:f8:3e:52:c0:01:ff:1b:8a:e3:2d:2f:60:51:c4:
                    bf:83:53:0d:ee:32:d3:f2:c2:6d:8e:a0:1f:38:f5:
                    a6:44:dc:95:39:24:d5:af:c0:d5:a8:3d:74:b6:75:
                    62:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:5C:E6:EB:9C:25:18:A2:1B:00:51:EA:AC:25:42:8B:2A:F4:DC:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/d6cea54b-b225-379a-9a7a-1f1eb7a57caa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  12.238.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:ed:c0:ae:bb:6c:5d:27:af:8b:c4:47:36:c3:44:4e:80:a0:
         a6:a3:ec:73:57:32:f2:8e:ad:8c:4b:9b:bd:f1:70:2e:74:c3:
         53:53:c8:e0:0a:89:1f:94:8d:31:d4:68:e0:9c:27:72:1d:cf:
         22:b7:b4:8a:0d:69:a6:c7:44:22:9e:66:92:da:1b:89:03:11:
         8f:a8:1c:f0:ff:42:50:49:75:51:97:72:3f:74:60:64:70:8e:
         8c:9f:c6:56:89:ee:b0:1c:6e:c3:d3:dc:12:33:36:94:65:9b:
         42:13:6a:08:72:59:ee:72:e8:4e:7b:a3:ce:34:33:84:08:1a:
         6b:3f:c7:29:d6:97:84:63:61:30:b6:56:70:a0:98:8f:d6:74:
         ba:a8:58:c5:f1:db:9d:0d:b7:71:d9:50:ea:81:ee:72:b9:95:
         b9:a7:a8:e6:aa:ae:b8:8f:2b:ca:7c:38:51:e3:e3:f5:dd:30:
         fe:f7:84:c1:77:29:06:aa:e9:47:15:9d:e5:98:d8:6a:37:a3:
         13:8c:79:28:36:a5:45:73:a7:19:26:ea:cb:1d:98:0e:71:83:
         cd:1f:4b:7a:ea:a5:93:b6:93:0f:eb:39:44:8a:6e:e2:aa:20:
         fb:8d:93:38:8c:b4:1d:6a:45:98:6e:6a:d0:1d:de:cf:81:af:
         0d:4b:34:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 20:45:39 2026 by rpki-client