Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/1ad149b7-09be-3218-9046-87f36c3e2d4a.roa
File:                     1ad149b7-09be-3218-9046-87f36c3e2d4a.roa (raw, json)
Hash identifier:          RlaLIaBreNcVp10n8GMmZE1nGvCRv3XgZxHnk+CVAVA=
Subject key identifier:   33:E4:6C:08:08:B4:D7:3F:4D:52:5B:24:9E:BA:75:75:F7:46:C1:AD
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584A2955585803191B5EF877F900
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/1ad149b7-09be-3218-9046-87f36c3e2d4a.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     6195
IP address blocks:        12.26.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:58:58:03:19:1b:5e:f8:77:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=67e4ce30-ab19-4b15-9dd1-77466d90e9ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c7:c2:39:ae:f4:17:4d:86:ab:24:dd:79:bf:
                    20:6e:e4:71:77:d3:6f:d0:2e:c8:98:c5:d5:55:2f:
                    c6:9b:d6:cf:88:34:ec:84:cc:1b:4c:b4:d9:0d:6e:
                    c1:b8:69:e1:2a:8d:5d:c1:74:0b:33:db:d8:b7:4c:
                    d2:93:f6:7d:a5:5e:4d:ac:5a:e2:e4:10:88:b6:ae:
                    e9:1b:f2:73:bf:09:ab:28:da:b2:02:9e:b9:66:32:
                    01:68:04:8a:90:97:57:17:89:3c:6c:99:6d:63:cc:
                    96:43:b2:8b:be:3d:de:1d:52:be:29:c0:2c:0f:4b:
                    ef:67:88:b0:bc:08:e0:99:57:9a:6e:08:b0:0a:02:
                    7d:9e:29:07:25:fa:60:ee:ca:fa:75:0b:d2:fd:73:
                    88:bd:ba:b4:2c:03:95:89:a1:3a:73:09:d0:94:55:
                    8e:ac:b5:ba:e3:97:11:7a:ae:af:fb:82:07:ac:c2:
                    47:e4:85:97:dc:9b:a6:e4:5b:4f:3e:63:50:94:c9:
                    68:d9:f7:a4:6f:66:9d:01:ee:e1:3c:7d:9c:26:61:
                    0b:06:4c:a5:04:c0:26:98:70:a2:01:8c:e2:d7:6d:
                    85:72:1b:e6:55:e3:ff:ce:9c:1d:f3:95:b3:57:cf:
                    1d:21:bf:8d:89:c0:c2:dc:a4:c0:1b:f2:15:a1:41:
                    d4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E4:6C:08:08:B4:D7:3F:4D:52:5B:24:9E:BA:75:75:F7:46:C1:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/1ad149b7-09be-3218-9046-87f36c3e2d4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  12.26.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:98:51:af:7b:79:7d:bd:94:01:2b:0e:a8:4e:ad:a9:fd:73:
         09:6e:32:73:7a:8b:00:29:f8:13:84:54:95:f3:75:34:fa:a2:
         14:31:b9:02:35:de:da:2b:69:48:21:6b:03:66:0e:ce:ed:1f:
         e2:1c:4a:4f:78:65:ed:97:a7:f7:03:24:6b:24:9f:6f:f5:c2:
         f0:49:da:77:ab:61:b1:ed:11:86:e9:e4:f2:b5:04:29:e3:31:
         8e:4e:2a:9c:7d:d1:10:74:d4:ff:bf:74:7a:70:fa:03:b2:94:
         d1:d5:7a:09:4d:b2:68:36:28:83:3a:4d:41:94:5c:7a:6e:44:
         d0:f0:11:5b:a2:52:7f:1d:df:54:36:13:c9:71:a6:9b:7c:63:
         aa:fe:f4:ee:de:0f:44:1e:1e:b1:6d:a6:69:77:c6:8b:26:0b:
         3f:24:4b:18:5d:63:b7:a1:af:04:b3:39:ac:5a:ee:31:4b:6d:
         68:32:50:4c:85:d8:3f:3d:04:9c:92:de:18:3e:56:1f:df:a8:
         41:67:92:30:8a:04:e0:82:20:1b:26:bb:99:67:f4:86:77:7b:
         60:3b:88:60:6a:3a:0e:5a:e0:27:8f:ec:e9:85:8c:2f:8e:18:
         93:75:aa:ab:19:35:11:ce:a4:94:0c:4b:3a:a4:b7:14:42:43:
         0d:90:5d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:46:46 2025 by rpki-client