Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/7144417e-a2bd-3e00-8db3-f91c1f110a2a.roa
File:                     7144417e-a2bd-3e00-8db3-f91c1f110a2a.roa (raw, json)
Hash identifier:          x83BqoC08rMqbEB7VwFQjTF9wJ19C8ryBcdihO8bRFk=
Subject key identifier:   F6:04:BE:F5:A0:98:7E:13:7B:29:66:D1:CE:D1:95:E1:C3:B7:B5:3A
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584A295559398ECC29CBF6002800
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/7144417e-a2bd-3e00-8db3-f91c1f110a2a.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     209242
IP address blocks:        12.221.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:59:39:8e:cc:29:cb:f6:00:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=bba5fad6-2dd6-44f4-92c3-2317323a1ee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d1:af:82:35:52:99:ca:cb:c9:f1:c3:44:9d:
                    28:74:a1:9d:36:48:1a:6c:29:c3:17:f6:9f:af:82:
                    b5:81:1c:32:77:24:77:4d:e9:23:e5:6e:9b:6f:76:
                    b2:27:e2:f7:19:d8:c1:2f:17:3a:0e:2a:05:ba:ba:
                    5a:20:95:76:a1:94:8b:8c:0d:8d:7a:9e:01:ba:41:
                    6b:3d:99:7f:31:29:c6:8c:2f:cb:fa:70:e7:0b:aa:
                    8c:96:0c:6f:dd:48:86:a7:78:a1:08:5f:55:9a:1f:
                    b4:4c:b5:db:8a:b8:08:9f:e8:d9:73:12:e8:0f:3b:
                    ee:51:c3:f6:82:12:44:1f:e3:f7:af:9c:bf:e4:5f:
                    be:54:38:51:21:85:60:58:4e:f5:e1:30:8e:2e:7e:
                    6e:07:a9:30:63:94:56:8c:4e:20:be:c1:45:be:88:
                    9a:e4:e1:17:5b:25:10:fa:06:59:83:17:fa:b6:11:
                    42:58:f7:96:e3:02:35:f2:ca:6f:d4:6c:ce:14:f5:
                    f5:a9:da:ce:8a:76:4f:e0:bd:d8:ab:f7:90:ca:e8:
                    f2:1e:0f:92:30:f2:50:7f:48:99:13:2b:45:2a:96:
                    25:a3:bb:66:27:d8:a9:d6:78:57:a7:96:5b:24:c4:
                    c7:f5:6b:f1:27:6a:77:4d:57:67:c1:42:73:b0:ac:
                    ab:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:04:BE:F5:A0:98:7E:13:7B:29:66:D1:CE:D1:95:E1:C3:B7:B5:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/7144417e-a2bd-3e00-8db3-f91c1f110a2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  12.221.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:9f:da:9c:ce:7b:24:0b:a1:bc:fa:3c:1f:6d:93:45:56:7c:
         18:bc:c6:78:e2:3d:38:77:11:5e:4c:5e:61:ab:66:1b:42:a7:
         17:b8:44:b4:a8:e8:1d:2c:a4:f8:68:50:4d:3d:6e:9c:eb:4c:
         42:52:b9:33:ff:41:2a:b1:2e:18:99:14:9f:f7:84:eb:34:65:
         57:f6:ec:c4:16:25:75:a7:07:a6:d0:c9:eb:b0:2f:af:63:13:
         b4:9c:9f:95:df:05:8c:01:08:75:86:c0:cb:cc:15:2f:42:52:
         b8:39:c4:ec:10:93:b2:6c:c7:67:a7:c5:04:4a:ab:83:7f:11:
         52:a8:fc:81:b5:15:0a:dc:9a:ee:8a:d9:e8:12:b1:4f:73:88:
         7f:23:54:f8:47:67:93:ec:bc:1c:2b:db:04:07:80:ea:ed:d6:
         15:79:7c:db:5e:0e:1f:1c:9e:de:93:23:aa:66:74:4a:a2:f2:
         92:dd:bc:90:e2:74:38:e7:73:13:06:86:35:69:83:38:e7:a5:
         3d:17:5a:ff:e6:7b:d9:2b:7e:1e:0e:b0:e6:c0:06:24:36:36:
         5f:91:f8:2c:21:a6:53:fc:54:b2:5a:85:ab:d2:67:45:9e:d7:
         b1:b6:5b:a9:54:58:76:da:f6:47:37:fa:fc:50:ed:6d:c9:62:
         83:5d:f9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 03:22:28 2025 by rpki-client