Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/a580ddd2-3fff-3151-bac9-d463c9b57686.roa
File:                     a580ddd2-3fff-3151-bac9-d463c9b57686.roa (raw, json)
Hash identifier:          2cWWJxWGAzRjvbIpV5N+C5NJs+vOvMyWLqIBbr90u4g=
Subject key identifier:   93:87:D9:04:58:61:3F:33:05:12:10:73:B5:1F:9E:83:66:1F:0D:C7
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584A29555923E0B091229656D800
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/a580ddd2-3fff-3151-bac9-d463c9b57686.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     32258
IP address blocks:        12.109.223.0/24 maxlen: 24
                          12.198.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:59:23:e0:b0:91:22:96:56:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=ace56545-7b03-4d68-b67e-c0612da03b96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:bd:a4:dc:d0:ed:bd:d4:ef:4b:d9:e5:a9:7a:
                    e1:25:ff:b3:e4:eb:1f:f4:3b:ce:61:ec:b5:a0:10:
                    b4:f1:a4:54:8d:59:ba:4d:b2:fc:4e:24:d8:c8:ed:
                    1d:eb:dd:8f:6a:dc:61:b0:db:68:7e:8e:f6:8c:3b:
                    77:21:0b:eb:eb:4a:05:79:12:7a:3d:1a:5c:8b:57:
                    a3:9d:5f:75:d0:83:13:ef:34:07:00:60:3f:91:9f:
                    d0:7a:5a:52:73:34:25:dc:1d:64:69:87:83:26:03:
                    65:3d:14:00:45:f3:64:34:55:4d:9e:12:7b:48:c0:
                    5d:b6:92:c0:69:af:5a:10:70:b4:1d:0e:d7:70:d3:
                    bd:9d:68:8a:4c:eb:52:1c:dc:13:c2:e2:68:83:b0:
                    ab:a5:df:e8:6c:2e:6f:ad:6a:f6:4e:52:cf:a9:0a:
                    1b:f6:5e:08:7f:8a:a0:ad:29:4d:d3:54:51:c6:91:
                    27:dc:76:c7:51:06:9a:d5:1e:c2:58:5c:f6:2b:24:
                    e1:e2:22:ef:e0:b2:00:ab:3f:4a:bb:fd:d9:40:d4:
                    97:6a:e0:75:f7:3a:f6:05:31:0a:f2:0b:f7:66:2f:
                    32:f9:06:aa:f7:90:98:d7:14:a5:47:82:58:e6:08:
                    cf:46:d3:b0:e4:1b:12:2e:d3:a0:63:55:1b:31:40:
                    f2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:87:D9:04:58:61:3F:33:05:12:10:73:B5:1F:9E:83:66:1F:0D:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/a580ddd2-3fff-3151-bac9-d463c9b57686.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  12.109.223.0/24
                  12.198.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:a8:d2:b1:cb:22:99:29:cf:b9:60:95:9b:e6:64:93:b1:7b:
         52:b7:ab:fc:70:58:06:5e:45:c8:f2:90:ec:2a:ba:b2:eb:60:
         a3:79:97:c9:4a:b3:52:df:c8:b7:86:f2:5f:1e:13:cd:bc:4c:
         62:31:79:3c:92:18:d7:b4:7c:ee:78:38:94:6d:12:80:e0:88:
         23:f1:70:b5:4b:f6:ad:8d:5e:84:e5:d9:b7:64:f5:84:42:2a:
         cd:91:bf:94:c3:25:e7:05:65:05:72:15:f0:ac:10:51:72:61:
         dd:82:aa:64:53:6f:04:45:83:f9:23:f5:a2:4d:a6:1b:97:25:
         7d:04:b0:22:eb:5a:af:eb:78:ff:28:9c:b5:58:ff:bc:91:f2:
         78:e6:da:99:14:9b:29:16:aa:52:f7:df:9d:bd:b1:a0:f2:01:
         f2:af:a3:0e:6c:a9:66:60:98:01:7b:66:8a:ba:8b:8c:f6:1f:
         eb:fc:31:a1:c3:2f:17:26:29:dd:18:76:28:8a:e2:7f:6f:c5:
         e6:ba:16:b6:8c:e8:08:ae:79:f8:da:c8:ec:a5:72:99:55:c8:
         4d:ae:9c:3b:d0:bd:c1:c1:0a:b6:1e:ef:c4:a5:e5:86:60:d2:
         85:ad:fd:92:97:52:59:12:8e:84:e1:81:0e:8a:18:91:e3:74:
         cc:90:51:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:16:31 2025 by rpki-client