Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/f121c9da-cdbd-326e-b209-0e0b0ba2082a.roa
File:                     f121c9da-cdbd-326e-b209-0e0b0ba2082a.roa (raw, json)
Hash identifier:          XygsXcE3hjvHrivreO30tlqoBy9s+XnRoNkO5CpMTe4=
Subject key identifier:   DA:A9:25:6D:BB:FD:F2:D4:C3:62:85:8F:DF:F5:92:8D:C5:0A:46:8A
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584B047BF7851DDC71361A29EF00
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/f121c9da-cdbd-326e-b209-0e0b0ba2082a.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     30572
IP address blocks:        12.220.102.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7b:f7:85:1d:dc:71:36:1a:29:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=96763539-f309-43d2-a8a2-9ab2cf61f569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:63:da:c0:df:6a:50:6a:aa:a5:48:b8:e1:a5:
                    b4:c7:58:69:22:c6:c6:2b:45:f7:ea:78:08:49:23:
                    0b:0e:ed:37:6c:ab:33:bd:9c:19:84:0b:f7:55:ad:
                    73:b2:58:a2:1e:7a:ba:8e:82:af:c3:ae:f3:71:3f:
                    8e:75:88:df:c8:f6:33:5b:44:cc:e1:e2:e8:04:1a:
                    b7:53:e9:ef:67:64:62:e1:8f:79:25:ef:25:2b:2b:
                    9b:ac:6d:ef:c9:82:14:18:ba:c9:73:37:a5:b7:71:
                    6f:ab:78:eb:e4:3d:57:0a:0e:a9:25:a4:90:d7:93:
                    39:22:ed:c0:65:0f:4f:5a:7c:63:fc:e1:31:ac:3f:
                    29:5c:a0:70:0a:64:90:fc:f7:57:39:07:5d:2a:90:
                    67:d1:92:55:05:2a:1d:e4:6b:a9:83:ff:72:bf:91:
                    ee:ca:ff:2b:9c:58:78:ba:3f:40:92:2f:f8:7f:5c:
                    de:bb:9c:16:23:4d:8c:a5:63:64:92:9f:f5:a4:f0:
                    8c:30:78:69:58:e2:2d:00:59:5c:d3:ea:4e:46:7d:
                    e1:25:a3:e8:ac:54:88:ee:ad:28:13:80:81:66:ef:
                    73:4f:01:08:30:3d:0d:cc:5d:c8:2b:18:59:23:55:
                    70:a9:69:c5:e2:8e:73:7e:74:39:9a:1c:84:ec:fc:
                    ae:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A9:25:6D:BB:FD:F2:D4:C3:62:85:8F:DF:F5:92:8D:C5:0A:46:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/f121c9da-cdbd-326e-b209-0e0b0ba2082a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  12.220.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:5f:4a:b7:e0:ce:0b:b4:aa:4e:b7:b5:e4:97:36:c8:14:f8:
         c6:66:03:05:95:fb:69:3b:ae:52:7f:47:fb:6b:a2:5d:cf:f4:
         6d:75:6f:c7:52:43:5c:a9:f0:ae:c8:b9:39:05:88:4b:f8:27:
         3f:61:e0:f5:77:2c:98:d5:29:86:97:b0:d4:32:5f:9f:73:9a:
         19:84:5a:a3:a7:d9:e8:26:b8:3a:bb:af:ed:1e:e1:b4:1f:41:
         90:82:f8:b3:85:ea:48:10:a0:0e:cc:f6:7a:d0:9e:1a:f6:ba:
         b3:d2:e4:3f:4b:1e:cb:d7:11:0d:66:ee:17:b7:bf:10:04:1b:
         2b:36:9d:cb:23:4d:82:a8:52:79:50:9b:e5:f7:6f:54:bd:db:
         02:56:1b:56:cb:fb:63:7c:e0:2f:84:7b:02:9b:dc:97:31:34:
         0a:db:62:35:9a:17:6d:c1:8b:e1:b2:2b:bd:a4:ca:8b:f7:43:
         71:22:3d:be:66:b5:e7:19:66:8a:53:33:c9:24:db:07:29:4c:
         9c:20:82:2a:5c:dc:e9:75:3e:64:71:2b:52:a1:c3:bb:7b:6c:
         a0:12:bb:d0:db:a6:9d:b0:d4:8a:59:55:b9:b4:07:2d:ff:33:
         ba:fa:dd:1d:e1:75:96:1a:ec:88:42:24:34:aa:99:ff:4c:de:
         ee:13:1a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:52:52 2025 by rpki-client