Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/12d3f661-2e56-3c74-a257-15115b48da48.roa
File:                     12d3f661-2e56-3c74-a257-15115b48da48.roa (raw, json)
Hash identifier:          cjnX43Y9HIeN07C17f2p0AvfhaqIrAn8tHTA5eTgW68=
Subject key identifier:   3C:8C:4A:33:A1:13:25:13:DD:F1:CA:23:FB:4B:69:22:D5:33:06:8C
Certificate issuer:       /CN=b031f288-aa10-4c6d-b640-6749f212c6b7
Certificate serial:       010D0C9F4328584A0C0567D2C99EE269FB3AA184
Authority key identifier: A7:28:DE:7B:DB:D3:74:3B:97:C7:D9:08:68:12:83:7C:A7:31:E7:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/12d3f661-2e56-3c74-a257-15115b48da48.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33362
IP address blocks:        24.225.112.0/20 maxlen: 24
                          216.172.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/b031f288-aa10-4c6d-b640-6749f212c6b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/b031f288-aa10-4c6d-b640-6749f212c6b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:67:d2:c9:9e:e2:69:fb:3a:a1:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b031f288-aa10-4c6d-b640-6749f212c6b7
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=5e525b59-76cd-400d-9c4e-d9ef7439a892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0d:21:46:9b:6e:b9:8e:6c:7c:f0:31:38:96:
                    7a:24:9e:26:4f:9a:00:f8:7e:d2:9e:67:ff:fe:8d:
                    ae:cb:09:0a:7d:c5:fc:aa:cd:de:11:1a:95:77:92:
                    6b:0d:33:bd:ad:72:67:0f:6f:6c:4a:8b:49:80:08:
                    62:93:9c:26:9d:5b:c5:45:92:5f:7d:38:a2:83:65:
                    f0:47:a0:66:10:d1:e2:89:8a:33:78:eb:61:cf:96:
                    cf:6c:78:92:ff:9c:db:c4:23:61:c7:45:4b:c0:c8:
                    77:49:48:c6:e9:e7:ae:2c:d0:ca:a9:2e:02:a2:05:
                    da:9e:32:be:18:a4:f6:ac:a2:67:95:ea:29:e0:85:
                    83:29:65:f4:2e:9f:87:9f:17:17:81:85:7b:71:b8:
                    9f:9d:a4:1e:bd:21:11:28:de:67:16:ac:61:8b:3b:
                    e1:c1:f4:4b:41:3d:f9:53:99:22:e8:85:91:e8:b3:
                    db:57:7b:5e:d7:b3:ae:59:2f:2c:44:e1:3c:3f:33:
                    b4:bd:1a:3c:c4:4d:25:44:41:71:35:19:81:23:85:
                    f0:f9:37:3f:d0:54:a9:3a:fb:a6:11:33:92:f7:05:
                    02:1e:12:57:e2:09:7e:29:8b:51:16:91:f3:17:ea:
                    c7:78:a3:18:f1:5c:01:2b:d7:3c:13:8e:66:be:27:
                    bc:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:8C:4A:33:A1:13:25:13:DD:F1:CA:23:FB:4B:69:22:D5:33:06:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/12d3f661-2e56-3c74-a257-15115b48da48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/b031f288-aa10-4c6d-b640-6749f212c6b7.crl

            X509v3 Authority Key Identifier:
                keyid:A7:28:DE:7B:DB:D3:74:3B:97:C7:D9:08:68:12:83:7C:A7:31:E7:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.225.112.0/20
                  216.172.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:1e:81:e8:4d:0f:f4:4f:ba:26:8b:35:8f:25:7b:b7:ae:7a:
         b0:39:e1:b3:2f:28:4f:c8:fd:8e:a2:3d:1c:99:22:2e:e8:7a:
         bc:b9:27:be:d6:b7:9a:41:b6:0b:65:72:bb:99:13:64:67:30:
         4c:52:ad:fe:4f:57:f1:57:67:dd:37:cd:b5:a6:c8:8f:a5:67:
         d2:ac:09:c1:c5:2a:ac:c8:be:c5:8e:9c:6c:e0:7b:7f:4e:d6:
         cc:ff:b7:a9:b2:d9:39:7b:3d:69:da:b1:98:d5:44:fb:91:9b:
         56:60:85:f8:d8:c6:58:3a:47:ef:a6:e4:b4:fb:fe:40:45:1c:
         5f:8b:bb:08:42:bc:15:4d:00:f1:82:45:50:67:83:d8:05:bf:
         4a:18:a8:35:65:6d:f1:ae:3f:b6:be:18:54:36:65:93:97:ae:
         c8:3d:8c:45:a0:a5:20:75:12:35:77:6c:ab:89:81:07:2a:c4:
         22:e1:93:3a:32:14:20:03:bf:a3:c4:46:4e:34:ef:03:ad:6c:
         34:d6:18:7d:62:19:e6:03:03:4a:9d:91:5d:a5:0e:cb:08:80:
         ef:94:11:5f:f3:13:42:17:0a:48:1e:fc:2f:41:57:fd:e9:98:
         c2:53:6d:16:b8:09:7b:30:c5:85:67:aa:90:cf:79:3a:8d:17:
         be:8a:97:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:19:25 2025 by rpki-client