Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/8dfb8ada-15a2-3fbd-b207-440693a55a21.roa
File:                     8dfb8ada-15a2-3fbd-b207-440693a55a21.roa (raw, json)
Hash identifier:          cj3em03RkFozVVcp4mpy0izkBfTB4EVPSVEA2lRsOMo=
Subject key identifier:   55:14:07:DE:C0:53:4B:DE:A9:03:0F:DD:91:62:06:66:F6:FA:80:C1
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584A2E83D38EE098CD0E2F2471C8
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/8dfb8ada-15a2-3fbd-b207-440693a55a21.roa
Signing time:             Fri 13 Jun 2025 21:33:34 +0000
ROA not before:           Fri 13 Jun 2025 21:33:34 +0000
ROA not after:            Thu 11 Sep 2025 21:33:34 +0000
asID:                     19932
IP address blocks:        12.216.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2e:83:d3:8e:e0:98:cd:0e:2f:24:71:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Jun 13 21:33:34 2025 GMT
            Not After : Sep 11 21:33:34 2025 GMT
        Subject: CN=bf7c66bc-f482-4b42-bf9d-7bf354289296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3b:1a:67:13:10:78:cc:1f:a4:c3:47:e2:cc:
                    8e:9c:f8:f3:0a:14:c4:0d:24:70:32:62:23:88:a5:
                    14:d4:34:68:3b:69:2f:4c:05:6f:b8:df:32:90:ed:
                    fc:e8:81:e8:d0:45:1f:32:9f:ca:27:fc:cc:5a:41:
                    fa:be:bc:78:fe:2b:60:ca:17:34:11:1d:26:17:3f:
                    cd:99:91:c1:e0:8b:be:a9:60:de:c9:0f:21:ae:1b:
                    ae:09:79:5c:ed:e5:7f:b9:51:a6:42:4e:74:f7:63:
                    29:0f:f0:5b:30:de:d9:a8:92:91:45:23:ad:2d:6e:
                    64:cf:8d:95:30:a6:f7:9a:4e:3f:b1:5d:c5:de:59:
                    2b:58:94:b7:8b:94:1c:d7:2c:0f:59:fc:2d:cb:51:
                    93:b7:22:64:31:4b:c7:21:51:07:82:7b:c9:f7:f2:
                    34:80:c9:65:d8:96:75:a8:a1:e1:a3:22:6c:e1:ed:
                    1f:33:04:5b:f4:64:41:3e:b5:03:be:5e:85:0e:1c:
                    c7:8a:cc:57:ca:7e:31:ca:de:2d:89:d9:38:5d:0c:
                    ad:a9:1a:4d:50:c5:59:3f:dd:fe:37:46:75:31:43:
                    77:d1:85:2e:76:2d:ad:68:b8:2e:c3:c3:0a:fc:f3:
                    50:cd:a5:b0:d7:00:31:e7:5f:a9:44:6d:21:ca:0f:
                    74:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:14:07:DE:C0:53:4B:DE:A9:03:0F:DD:91:62:06:66:F6:FA:80:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/8dfb8ada-15a2-3fbd-b207-440693a55a21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  12.216.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:29:a5:65:32:7c:c2:4b:b3:d9:61:58:4a:33:fd:5f:0d:86:
         46:67:43:e0:2b:99:78:fd:d1:29:c2:86:40:3b:03:9c:fb:3f:
         c6:73:ba:b7:ce:25:6c:45:60:58:58:a0:d0:f0:78:2f:da:c2:
         e1:f1:c9:d1:58:3e:ce:10:49:b9:13:89:ae:66:ce:f1:e7:09:
         f0:a3:ad:4b:29:90:1f:6a:b2:04:b9:b7:9f:c0:36:98:c8:f5:
         ee:1e:3d:3b:88:59:13:9f:93:bc:6f:79:78:15:d1:f6:73:79:
         a9:1d:b7:c6:43:2f:c1:4b:9d:f0:8b:a2:69:44:7b:aa:2d:31:
         12:a2:e6:ba:6f:e4:62:4d:13:be:79:1b:50:f0:e0:6f:ae:b7:
         0e:a6:15:78:c2:d0:7b:1b:84:5a:0b:d1:40:d7:a1:3c:24:1e:
         f1:a0:a1:fa:06:cf:66:3f:17:58:21:72:90:39:56:32:94:b1:
         b5:3b:45:44:cb:b1:54:06:e1:89:51:9e:b5:ae:ba:00:e4:ad:
         e9:b6:0e:62:65:7f:7d:ea:12:7f:f7:ad:fa:85:d4:2d:7a:de:
         77:4d:0d:0c:9d:5f:22:99:e3:80:63:00:fb:5a:6b:0c:48:70:
         21:9d:e3:bd:ac:47:39:b0:a5:3d:1a:d4:28:d4:0a:36:da:da:
         68:85:5d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:19:49 2025 by rpki-client