Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/f8b8abe9-1bc2-39d4-8f95-ab062ee885f1.roa
File:                     f8b8abe9-1bc2-39d4-8f95-ab062ee885f1.roa (raw, json)
Hash identifier:          +S4ImzMUGq5aBJqQ9GU1x5bMpZhSxxmCxl0O9SyIlYY=
Subject key identifier:   3B:DC:94:77:70:0C:78:6D:08:87:51:B3:0D:BF:8E:EC:33:88:80:EB
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584EBDDC659ADA1BEA44CE018AB0
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/f8b8abe9-1bc2-39d4-8f95-ab062ee885f1.roa
Signing time:             Thu 06 Aug 2026 01:00:12 +0000
ROA not before:           Thu 06 Aug 2026 01:00:12 +0000
ROA not after:            Wed 04 Nov 2026 02:00:12 +0000
asID:                     32075
IP address blocks:        12.32.252.0/24 maxlen: 24
                          12.236.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bd:dc:65:9a:da:1b:ea:44:ce:01:8a:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Aug  6 01:00:12 2026 GMT
            Not After : Nov  4 02:00:12 2026 GMT
        Subject: CN=b9f22879-0d58-4176-9858-a00a434927d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b8:33:f8:97:00:f4:9c:e2:b9:f1:7a:e2:db:
                    46:90:51:3e:83:e9:6b:21:0f:84:b1:f8:e1:fb:2b:
                    f4:9e:4e:bf:ff:46:57:37:03:81:7d:9c:3a:65:f3:
                    fd:ed:63:7b:e6:6b:c3:01:d9:76:74:4e:3e:df:f2:
                    c9:e5:d9:33:21:72:4b:a0:8f:f2:51:e4:3a:80:67:
                    88:49:7d:28:77:37:50:97:02:b5:56:e5:7d:f5:62:
                    21:3c:73:ac:7d:48:98:c0:70:d8:14:d8:71:11:cd:
                    ed:ec:6e:8e:57:42:46:c0:23:67:35:66:3e:31:1f:
                    b1:66:50:83:00:f6:18:5f:ef:39:dd:31:54:72:76:
                    11:ff:bb:09:38:5c:4e:f9:da:7f:92:08:c9:bb:a8:
                    4e:ff:20:1f:d7:86:26:cd:58:5f:6b:2c:14:ef:91:
                    c7:ee:7e:77:23:a7:d0:fd:08:74:15:39:c5:60:98:
                    ea:b2:df:7b:6e:9f:fb:91:a7:86:84:4b:53:5b:ba:
                    66:82:c0:23:1d:14:23:e4:42:5e:1d:88:3b:38:49:
                    df:1b:e2:72:a5:cc:d3:0a:2f:d9:41:65:3d:e0:a7:
                    bb:b8:54:a6:e6:ea:45:c5:67:16:d3:51:d9:52:99:
                    6b:57:e6:3f:ab:6c:88:fd:7c:ac:b5:ce:c9:c2:81:
                    2e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:DC:94:77:70:0C:78:6D:08:87:51:B3:0D:BF:8E:EC:33:88:80:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/f8b8abe9-1bc2-39d4-8f95-ab062ee885f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  12.32.252.0/24
                  12.236.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:43:e9:b1:9d:37:a5:14:41:9a:b2:17:71:3c:55:1f:d9:ac:
         65:53:42:f8:d0:00:03:8c:ff:07:09:84:1c:28:60:c2:ab:08:
         ca:19:a3:f0:0c:ab:4a:8c:a1:18:24:c3:25:b8:2d:9d:a4:68:
         f4:10:b8:3d:07:a6:87:8e:37:25:2f:12:62:45:ea:ab:66:eb:
         49:56:90:0b:1b:04:92:d3:ea:61:30:81:ed:23:46:3b:31:0e:
         59:5a:0e:ea:97:0f:fa:54:40:6b:3a:1a:d6:04:dc:64:43:b6:
         35:9c:a2:1c:9d:e5:df:85:09:0d:6b:44:41:b8:70:31:b0:bf:
         19:62:35:97:1c:3f:c8:d4:e6:18:df:b4:2a:df:ef:d8:8b:b4:
         7c:5c:94:c5:e7:bf:31:16:7d:02:60:a2:16:76:7e:01:1c:3d:
         16:5b:65:af:c2:65:65:72:72:8d:5a:da:a1:f9:23:37:3b:c9:
         eb:a9:42:6e:44:68:1a:0c:91:1d:de:4e:2f:b1:f8:7d:3d:a0:
         a4:e8:18:ca:06:96:01:3c:40:f6:c0:a9:2a:14:67:e7:e6:6a:
         fa:9c:d4:be:ee:09:c3:83:03:7b:35:2d:97:86:c2:b5:af:e9:
         c3:22:07:f9:da:46:47:0c:1d:53:c2:4d:52:60:1c:1e:eb:9e:
         15:d0:fb:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:26:51 2026 by rpki-client