Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0fb3cb62-dc3c-3728-99c7-67d0d8402d70.roa
File:                     0fb3cb62-dc3c-3728-99c7-67d0d8402d70.roa (raw, json)
Hash identifier:          SrJMrM92u2X6iNzoZBq1WBPkjxmvmdMIs2trNuHk40k=
Subject key identifier:   8D:73:C2:E3:88:76:D8:16:6D:14:CF:6B:44:A8:FB:29:57:C8:48:A4
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584A3E45AC294E97398223E88EC0
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0fb3cb62-dc3c-3728-99c7-67d0d8402d70.roa
Signing time:             Thu 19 Jun 2025 13:01:02 +0000
ROA not before:           Thu 19 Jun 2025 13:01:02 +0000
ROA not after:            Wed 17 Sep 2025 13:01:02 +0000
asID:                     151397
IP address blocks:        128.1.12.0/24 maxlen: 24
                          128.1.13.0/24 maxlen: 24
                          128.1.15.0/24 maxlen: 24
                          2602:ffe4:c5f::/48 maxlen: 48
                          2602:ffe4:c60::/48 maxlen: 48
                          2602:ffe4:c61::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:45:ac:29:4e:97:39:82:23:e8:8e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Jun 19 13:01:02 2025 GMT
            Not After : Sep 17 13:01:02 2025 GMT
        Subject: CN=f4e7e686-5728-4a60-ab12-1609aaa3e7c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:67:52:62:cb:05:a9:88:4c:c1:9d:17:5b:68:
                    5d:29:c4:90:bd:e2:1d:bc:cb:ee:1f:36:2e:24:4f:
                    f1:8a:1d:72:22:d3:e6:14:b1:ec:e7:35:84:de:4c:
                    71:40:78:35:e9:dd:92:e4:74:98:aa:2f:6f:c9:8b:
                    a9:8f:f1:44:11:57:c2:11:c2:db:14:b4:2a:16:96:
                    91:aa:14:3c:46:e1:f9:f9:45:ba:af:78:e2:03:54:
                    64:87:98:56:2e:0d:81:9c:46:9b:ff:6e:a2:95:e3:
                    e6:a6:19:c9:5f:d0:ad:40:91:ba:97:4a:ab:2d:59:
                    75:21:96:0c:27:8a:84:11:8f:38:5b:29:98:ca:7a:
                    d0:bb:a4:fa:60:d3:fe:e3:b6:e9:c8:11:3d:1f:bf:
                    92:38:10:42:29:8a:f8:74:97:60:d9:76:42:08:58:
                    06:c3:e5:f1:03:1b:72:a2:61:5b:6d:05:7a:25:33:
                    a4:19:47:06:65:f6:47:16:d7:5e:c9:f1:01:fa:7e:
                    5a:b0:52:6d:3d:09:31:08:59:f7:37:1c:5c:b1:69:
                    9c:db:c1:6d:37:ff:33:5f:87:96:94:13:32:5c:60:
                    1a:9c:f5:02:d7:90:54:b5:c0:d6:3d:8d:3c:8a:df:
                    5a:2f:35:60:70:bd:68:4a:52:b9:e1:83:c3:96:02:
                    52:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:73:C2:E3:88:76:D8:16:6D:14:CF:6B:44:A8:FB:29:57:C8:48:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0fb3cb62-dc3c-3728-99c7-67d0d8402d70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.1.12.0/23
                  128.1.15.0/24
                IPv6:
                  2602:ffe4:c5f::-2602:ffe4:c61:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:3c:14:7c:6f:15:23:26:36:0a:ec:4a:35:5e:d3:52:f1:fa:
         d4:af:66:15:77:c5:da:7c:fb:9a:11:12:d4:1a:03:1b:1a:f6:
         f5:ad:6d:61:5e:51:78:09:b5:02:fc:29:0e:c4:98:db:37:c4:
         98:99:a5:64:ce:26:2e:24:ef:bb:01:3a:0b:18:83:b4:f8:b1:
         ed:17:38:5e:2c:f4:c7:ab:44:73:bc:5c:19:3d:cd:78:c4:37:
         11:e4:c5:93:b4:88:f7:5a:e6:0d:ef:98:67:07:d7:2a:57:69:
         64:aa:c2:41:e3:5f:07:35:18:e0:83:94:d8:79:cc:73:6e:ea:
         3c:a3:35:1b:11:a9:00:fc:28:79:fb:bb:e4:64:03:bb:0a:cb:
         6c:a2:52:d3:3d:e3:1e:83:8e:7f:15:11:f5:31:6a:4e:bf:0b:
         02:d0:a2:ae:8f:ef:2c:c2:f6:d9:93:70:41:db:73:0a:42:ed:
         06:3b:1e:0c:b4:99:42:5e:45:1f:5e:80:a4:70:e8:4e:a0:0e:
         ed:48:de:a3:e6:ba:6c:2f:42:ce:c3:57:8a:b7:be:29:8b:33:
         2a:5c:7d:15:b9:09:06:cd:2f:95:df:01:df:4a:18:92:09:8e:
         c0:78:7d:a3:26:03:3d:ec:60:85:63:cf:4b:9d:a8:0f:72:1b:
         43:39:db:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 00:51:17 2025 by rpki-client