Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/bbbc0d96-5143-39c1-9b59-92e305a562e3.roa
File:                     bbbc0d96-5143-39c1-9b59-92e305a562e3.roa (raw, json)
Hash identifier:          TFQ+oyHjvcukNBmiVNk2xwuw3L9HjuREHBX0V6+qzeE=
Subject key identifier:   41:2F:65:37:F0:A5:BB:0D:A3:C0:34:F3:49:6B:94:82:97:29:5A:BF
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584D38A1F650A4D0DBEE630C18C0
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/bbbc0d96-5143-39c1-9b59-92e305a562e3.roa
Signing time:             Thu 19 Mar 2026 14:53:11 +0000
ROA not before:           Thu 19 Mar 2026 14:53:11 +0000
ROA not after:            Wed 17 Jun 2026 14:53:11 +0000
asID:                     63335
IP address blocks:        12.46.122.0/24 maxlen: 24
                          12.154.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:a1:f6:50:a4:d0:db:ee:63:0c:18:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Mar 19 14:53:11 2026 GMT
            Not After : Jun 17 14:53:11 2026 GMT
        Subject: CN=22cbda47-c54a-4f15-8acc-fd425a643a91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:99:09:7a:dd:92:2a:f6:66:e1:96:94:b9:37:
                    5b:e8:60:ba:2e:43:83:5f:dc:5a:5c:9b:07:02:dd:
                    b1:77:7d:71:1e:3f:3f:84:4f:79:0c:03:5f:eb:85:
                    06:8d:ea:5e:e0:23:a9:b6:85:b5:e8:21:df:ee:0b:
                    0a:cd:66:dd:79:2d:b9:4e:08:44:d4:71:36:85:93:
                    ca:dd:96:8f:54:5f:7e:b0:48:8f:7a:a5:9b:88:df:
                    1b:1b:ab:c6:09:1b:b7:18:d7:f2:ab:87:97:3d:9c:
                    77:0a:f0:83:a3:6f:6d:9a:70:c5:7b:0d:28:1d:54:
                    c9:67:55:2f:35:c0:3f:25:e5:3b:ad:a0:14:40:b9:
                    af:d1:65:d5:01:17:64:c3:f6:31:a5:fc:f6:7b:fc:
                    37:93:9d:1b:85:c1:87:56:c1:dc:0c:dc:e2:fa:a5:
                    90:c5:0e:b1:43:d8:38:a8:23:a9:ef:77:2c:de:93:
                    78:fd:1a:8e:72:55:04:cb:5f:f0:f6:7b:b0:00:df:
                    34:95:a8:b4:1f:e3:a9:7b:98:79:e2:58:4b:d0:09:
                    41:bc:24:99:78:8e:65:06:f5:98:5c:a8:41:6f:67:
                    6e:a0:95:2c:ad:83:64:59:95:96:55:ee:60:38:11:
                    01:0c:00:6b:5f:56:a2:66:ba:a6:90:6f:f4:a7:1b:
                    67:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:2F:65:37:F0:A5:BB:0D:A3:C0:34:F3:49:6B:94:82:97:29:5A:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/bbbc0d96-5143-39c1-9b59-92e305a562e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  12.46.122.0/24
                  12.154.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:4d:14:d3:68:9b:55:e9:50:b8:7e:02:24:26:38:90:aa:87:
         76:f0:c6:38:ce:e6:40:96:f2:c5:2c:07:78:2d:e3:1c:97:d2:
         f0:4b:82:ef:2b:d2:e5:be:77:05:58:43:4e:e2:e0:78:71:29:
         27:c1:39:87:4d:93:03:e1:32:0c:d2:8e:47:f0:2a:52:ed:dd:
         2e:9b:a7:e3:ea:29:eb:db:c5:01:3c:99:e4:bf:1b:be:21:97:
         bc:69:fa:a1:06:6e:7d:25:b9:78:8b:ee:f3:0a:7d:da:fc:de:
         bf:bf:67:ed:f6:fa:df:ba:b9:f3:1a:f8:45:40:d5:f6:00:9e:
         19:f3:70:80:a2:58:09:25:9b:6f:85:06:4c:64:52:d5:02:0e:
         44:8c:7a:8c:3e:4d:e1:f0:71:ff:8b:22:cc:68:cc:73:67:e0:
         1c:9a:1a:7b:84:1d:4d:e4:87:c4:a8:d2:e0:a1:22:f9:90:60:
         e8:1e:56:77:8d:1c:0b:5b:cf:a6:47:57:d0:a0:b0:7c:37:8f:
         f0:55:0a:32:b1:73:8f:71:33:56:9f:df:80:11:18:c8:23:d8:
         ba:c7:d6:37:c2:7d:89:5d:4d:60:02:68:43:32:15:e6:e1:6b:
         76:da:2e:da:16:a4:90:e5:5a:f3:3b:23:71:8e:4a:e8:4a:38:
         0d:3c:3a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:49:29 2026 by rpki-client