Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/bcf71a6e-1b5e-383d-818d-f47168dac5dd.roa
File:                     bcf71a6e-1b5e-383d-818d-f47168dac5dd.roa (raw, json)
Hash identifier:          l0BI8NnFdbBeXNXBCZQQdYTMyuN/8QDqu92peXMo2KM=
Subject key identifier:   C4:19:FA:EC:EB:DA:75:A4:2D:9A:29:B5:DE:F1:00:13:1A:29:59:02
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F43285849F7151AA957816926B7B31450
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/bcf71a6e-1b5e-383d-818d-f47168dac5dd.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     237
IP address blocks:        35.62.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:1a:a9:57:81:69:26:b7:b3:14:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=d996190e-e70a-4a15-b972-9bd044aec72c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3d:b8:40:8a:82:d6:62:55:21:67:73:70:61:
                    f2:95:07:93:8a:c5:4b:9d:87:59:bd:89:62:60:33:
                    3f:27:25:3f:15:2a:28:76:f5:01:d4:09:2d:e0:55:
                    7e:f8:af:e6:60:d3:8f:ef:e0:2e:19:be:a6:22:2e:
                    d7:ea:dd:d9:6a:c3:46:77:52:f1:86:ef:e9:bb:57:
                    a0:8a:f5:f2:84:85:76:50:1f:a5:b8:44:e3:b1:ee:
                    13:2b:43:d9:40:d7:71:2a:b9:44:3b:e3:30:b9:8b:
                    a8:8f:7f:88:4d:03:df:ab:9d:03:6a:91:40:37:ef:
                    47:51:48:58:f7:a5:e2:fe:cc:a2:75:47:3a:f0:b8:
                    f0:24:df:76:6a:16:d1:7b:49:78:9f:7d:26:2f:06:
                    a8:49:35:a6:0a:a7:38:b6:22:d4:14:7e:3d:53:e6:
                    02:e0:ff:d1:9c:76:96:09:6a:b0:aa:18:c2:c2:81:
                    25:3e:74:20:33:e9:e2:3d:bd:b0:b4:81:88:b2:04:
                    49:6c:12:18:28:7a:46:7c:e5:9c:ea:13:b0:bb:cd:
                    ca:ca:d8:a4:ac:9b:75:aa:9f:1f:0d:3a:b7:3a:a7:
                    cf:04:78:83:37:e3:76:73:09:73:59:96:0e:6c:1d:
                    b7:fe:9b:4b:31:da:4d:0a:96:24:ec:60:eb:42:82:
                    bd:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:19:FA:EC:EB:DA:75:A4:2D:9A:29:B5:DE:F1:00:13:1A:29:59:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/bcf71a6e-1b5e-383d-818d-f47168dac5dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.62.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:1c:34:bd:1d:74:b8:a4:7d:b2:29:ff:5f:76:9f:33:b2:63:
         52:68:cd:f1:0b:00:3c:56:9b:a4:fe:7c:73:2f:06:2a:98:11:
         0b:a0:52:66:5c:47:4b:58:76:69:49:c8:ab:3c:74:15:21:48:
         86:55:aa:17:39:8e:3e:f2:da:7e:de:1f:34:84:0e:7e:dc:cb:
         53:13:07:81:6a:e2:9e:1f:c9:43:bf:f6:66:c0:3e:ac:52:3f:
         20:9a:0c:0a:c6:54:3a:0f:52:12:aa:cc:ac:b5:af:ac:62:c1:
         7b:74:81:b6:dd:e3:19:be:c5:d0:79:89:7c:96:14:0c:98:8c:
         ad:e9:2f:ad:f4:43:42:d9:0d:c5:ca:db:a0:73:07:02:66:20:
         35:dc:ff:36:23:a0:ce:45:25:d6:59:19:c1:67:7a:b7:eb:d7:
         d1:78:f9:39:0e:fa:e4:3c:74:dd:b9:81:c2:08:1c:d2:9f:67:
         b6:0e:1b:e1:a9:fa:a9:cd:36:7e:d9:37:95:48:47:64:32:25:
         c0:d2:f3:9d:da:f5:95:4e:ba:81:cb:54:b2:69:aa:9c:99:7c:
         59:7f:c6:c5:c5:e2:b8:9d:3d:5f:3d:25:50:3a:b1:1c:9e:eb:
         6e:1e:79:24:4a:9a:ab:3d:b3:9b:ec:d4:1f:99:08:a1:5f:de:
         66:1e:ad:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:34:34 2025 by rpki-client