Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/f8b8abe9-1bc2-39d4-8f95-ab062ee885f1.roa
File:                     f8b8abe9-1bc2-39d4-8f95-ab062ee885f1.roa (raw, json)
Hash identifier:          6lCb+AooGgV6JtwoUoP73q1xHGCmuHaT3zZh/T9udn8=
Subject key identifier:   36:33:2B:41:E8:02:5D:14:D0:9E:DE:34:04:6B:2F:1F:C6:98:C4:40
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584DD2B541B9C51E8C5328700800
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/f8b8abe9-1bc2-39d4-8f95-ab062ee885f1.roa
Signing time:             Wed 13 May 2026 19:26:32 +0000
ROA not before:           Wed 13 May 2026 19:26:32 +0000
ROA not after:            Thu 18 Jun 2026 17:38:43 +0000
asID:                     32075
IP address blocks:        12.32.252.0/24 maxlen: 24
                          12.236.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d2:b5:41:b9:c5:1e:8c:53:28:70:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: May 13 19:26:32 2026 GMT
            Not After : Jun 18 17:38:43 2026 GMT
        Subject: CN=d4d0b70e-0803-47ae-b39e-97a37209da5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:12:c1:b7:7c:99:cf:0d:a6:df:a1:16:b0:0c:
                    cf:66:9c:1a:4d:20:36:64:d7:a2:19:8e:67:4b:99:
                    86:3d:10:c3:1d:91:f2:ef:77:33:1b:6f:36:1e:0d:
                    cf:7f:85:4f:c0:7e:a7:58:05:78:bf:88:a5:cb:8e:
                    b4:27:9e:d0:44:c2:8e:40:3f:f3:63:e8:02:cc:9d:
                    be:bf:85:fc:bb:7e:e7:03:a5:be:88:9d:2e:c3:0a:
                    5b:47:a6:a6:b9:fa:f9:84:96:5d:ca:4d:9a:b3:34:
                    5f:e2:08:e8:e0:79:55:41:d3:39:93:ff:4d:0f:87:
                    e7:7e:e5:68:a5:bc:7c:c4:9d:e2:8c:36:4b:7a:b9:
                    e4:cf:c3:0d:56:f6:1e:c8:3f:15:81:cf:b6:f7:cd:
                    18:c8:2e:81:41:4a:03:f1:a6:4f:77:78:19:96:b8:
                    8e:11:20:3a:71:bb:f5:97:c0:a7:25:d9:2c:6b:14:
                    02:83:b5:6e:cb:5e:ae:d2:d3:e6:82:b6:de:9b:27:
                    7f:ab:80:04:89:08:97:cf:fa:bc:f6:46:4b:bc:98:
                    c0:25:35:5d:0a:fd:74:c4:5f:fc:f7:51:16:b0:3e:
                    88:65:c2:7b:37:4b:fb:e5:3b:95:f6:fa:e3:19:17:
                    f9:c4:15:99:b6:23:1b:ae:97:da:56:c8:92:cb:eb:
                    29:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:33:2B:41:E8:02:5D:14:D0:9E:DE:34:04:6B:2F:1F:C6:98:C4:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/f8b8abe9-1bc2-39d4-8f95-ab062ee885f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  12.32.252.0/24
                  12.236.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:3b:a9:8f:c8:ab:32:1b:0d:80:21:3f:ef:18:83:e7:81:cc:
         40:61:0c:a1:1a:58:74:fc:f3:7e:d2:64:67:0b:ac:b4:c1:9c:
         41:99:24:be:a6:48:50:91:95:42:3a:53:1f:6a:03:99:f3:41:
         02:29:7b:3c:99:36:34:d8:f8:5c:29:be:b5:3b:ec:0e:ca:50:
         26:c2:3e:b6:cd:ce:e4:67:59:33:01:de:67:ae:a5:d5:da:0b:
         67:57:b6:e3:f0:ef:1a:3c:40:7b:38:9c:b7:e0:15:35:a9:6a:
         a4:c0:54:d9:b2:fd:15:d6:fe:4d:55:e6:fd:27:82:11:b2:73:
         6a:e1:4b:83:2a:cd:28:64:eb:3d:86:70:52:19:f0:15:9b:a4:
         e4:05:b3:cd:c9:db:9d:e4:7b:67:49:b5:6c:73:b8:79:74:18:
         22:33:72:ec:92:97:d3:8c:48:d2:f0:a3:28:67:83:69:c9:85:
         7a:0c:0b:82:f4:c9:ff:2d:0c:4d:7b:41:d1:24:f9:ad:b5:db:
         50:83:dd:75:a8:3b:95:af:e2:25:78:74:86:bc:ed:54:18:c1:
         95:5c:06:5a:3c:20:2d:2a:e7:22:09:51:e2:41:cc:32:dc:d1:
         01:58:cb:44:dc:fe:b0:24:90:9b:7b:5f:e3:b2:8f:bf:00:c2:
         ca:58:0b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 20:45:08 2026 by rpki-client