Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/7d9a67f8-c608-39d2-9cf9-75fd0f540d0e.roa
File:                     7d9a67f8-c608-39d2-9cf9-75fd0f540d0e.roa (raw, json)
Hash identifier:          K2/OyRc/bFxpN8bu1x9lJwEe/+kMQI5Q2lF+OyXKVgA=
Subject key identifier:   33:F0:40:B8:DA:BF:E7:81:61:75:9F:53:2C:B9:BD:21:5B:3F:3C:25
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584A23BFFF9CBAEACCF4D1B25900
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/7d9a67f8-c608-39d2-9cf9-75fd0f540d0e.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     397593
IP address blocks:        12.35.100.0/24 maxlen: 24
                          12.133.253.0/24 maxlen: 24
                          12.207.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:bf:ff:9c:ba:ea:cc:f4:d1:b2:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=07451194-22a9-46ca-9afb-8e51171cc3d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:84:7b:44:5d:3f:dd:ca:5d:33:cd:6d:3d:ef:
                    05:b7:dd:23:1a:ec:b1:11:21:e9:7d:b8:09:c1:c9:
                    83:a0:b0:7d:32:da:6b:86:1a:52:b0:d4:e4:16:c4:
                    08:61:b2:84:50:0f:d0:4b:ff:bc:a2:f1:25:da:45:
                    06:57:60:a6:44:80:36:97:ab:8b:b6:3e:e9:88:3b:
                    76:fa:5c:e9:de:a1:d4:1f:da:98:b4:aa:ad:d9:8d:
                    ea:dc:9f:fe:26:2c:54:81:52:80:b3:cc:c7:66:2f:
                    d9:da:4b:e8:74:34:d9:b1:9b:36:05:20:81:52:48:
                    a7:ee:17:2c:86:3c:e0:42:09:4d:5f:e9:25:73:c5:
                    0f:d3:bc:33:f7:4e:00:46:3c:78:c5:16:46:e2:34:
                    b2:41:05:f5:25:a0:8a:56:f4:34:7c:de:b2:af:4a:
                    fe:f9:cb:f9:a0:f1:b6:59:9a:51:27:12:c8:8d:aa:
                    03:1d:98:e2:2f:59:aa:f3:6b:97:2c:33:07:52:a0:
                    54:db:d8:21:ec:59:e7:48:ab:7a:6b:a2:04:e5:b9:
                    ba:7c:c5:40:1e:a9:15:0f:e7:68:d9:01:ef:9f:55:
                    03:61:03:23:69:9d:9d:66:88:05:4b:77:c0:a3:50:
                    16:db:0f:e3:31:70:a5:a3:ae:b8:5b:f4:9b:bd:57:
                    6f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F0:40:B8:DA:BF:E7:81:61:75:9F:53:2C:B9:BD:21:5B:3F:3C:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/7d9a67f8-c608-39d2-9cf9-75fd0f540d0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  12.35.100.0/24
                  12.133.253.0/24
                  12.207.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:77:60:31:92:0b:f6:6e:74:68:cb:01:94:79:9d:2a:b1:32:
         38:a8:a9:ec:28:20:a3:6d:a6:e7:84:9b:a8:d2:30:31:3c:59:
         aa:c4:f7:ff:f2:34:ce:d9:86:26:ac:0f:ff:13:11:67:f9:4b:
         e3:f1:e4:75:f5:a8:0a:e3:fc:ce:16:f2:2d:ad:86:21:d2:0b:
         81:7d:3b:ae:1d:a1:26:f6:1b:7a:67:fa:95:e5:14:87:fe:57:
         d6:a2:93:21:d3:fc:8f:a9:23:56:e4:9f:02:03:81:2f:a8:b4:
         79:a3:a1:96:a8:9b:48:0b:77:52:1a:4d:3c:8e:38:83:ad:ba:
         69:f8:7f:c6:f2:95:e9:04:9c:b3:19:e2:76:18:f7:8d:5a:a6:
         f7:47:9b:6f:be:18:28:c3:84:0e:d5:3c:55:52:b6:bb:e1:aa:
         bd:af:23:a7:83:53:77:4f:32:b4:cc:76:d9:a2:96:0c:1a:1f:
         9b:b2:45:cc:a0:92:be:f0:e4:2a:f6:78:f9:7e:27:9b:3c:3c:
         9c:74:c3:a0:c1:3b:59:60:40:29:66:fd:87:1a:d4:04:16:f9:
         80:03:81:e0:b2:34:1d:34:63:75:37:4a:f4:af:41:33:31:de:
         f8:e1:00:87:40:ad:45:a6:fe:0e:d2:db:a4:df:18:3f:6b:61:
         14:5d:ba:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 20:02:59 2025 by rpki-client