Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/063a2c7d-b84c-3c5a-82ad-5b3cfcbad133.roa
File:                     063a2c7d-b84c-3c5a-82ad-5b3cfcbad133.roa (raw, json)
Hash identifier:          8073eQ78KsIxUdDRYyyvuaLScuRgYb+Q5bUJ1okgFHM=
Subject key identifier:   CB:A0:30:F6:A7:82:10:0D:D6:30:6B:53:D6:ED:A8:A2:D0:9E:D3:2D
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584A295558003867B152377F4480
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/063a2c7d-b84c-3c5a-82ad-5b3cfcbad133.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     26380
IP address blocks:        12.10.32.0/23 maxlen: 24
                          12.22.152.0/22 maxlen: 24
                          12.22.156.0/22 maxlen: 24
                          209.64.210.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:58:00:38:67:b1:52:37:7f:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=1a876d54-8a7b-406a-9719-c47995b4b518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9e:49:6b:d4:7a:cb:04:67:04:1e:2a:f1:0c:
                    d5:b7:ca:41:bb:dd:cf:8a:d8:a8:b4:37:ab:3a:4d:
                    61:64:d0:3d:43:bc:71:11:b4:15:11:17:8c:01:53:
                    80:e8:97:28:79:f8:a7:67:b6:83:fb:13:ea:bf:f8:
                    a7:f6:a9:df:86:ad:42:a7:ac:5a:eb:0d:4d:74:fe:
                    22:d0:1b:3c:3b:7f:52:c3:3c:94:aa:fd:46:ef:d4:
                    a2:38:2d:25:46:e7:00:e8:16:64:6b:0c:51:34:82:
                    2d:01:58:42:c8:ea:84:e0:cf:02:38:ae:64:af:1c:
                    5d:64:ba:30:c2:94:b9:ee:f9:28:38:58:09:ad:9a:
                    00:93:3c:da:31:9c:d5:ba:18:90:ec:ce:e9:b6:ad:
                    d0:5e:3a:5b:d0:42:f2:89:22:07:45:ee:60:77:b3:
                    45:62:fa:7b:ef:49:38:c4:26:ce:17:96:f8:e9:2b:
                    f0:e1:36:26:9c:fb:9c:b5:3f:b1:a2:7e:a4:b7:d1:
                    62:da:39:2c:7b:4e:f0:76:8f:f6:65:e2:f7:e1:47:
                    6c:b3:a3:58:59:34:24:95:53:84:b7:09:ff:5e:72:
                    c0:53:e9:22:1f:36:43:a2:5c:ac:f2:a8:14:cf:ef:
                    47:3a:7b:33:40:65:3f:50:8a:02:b5:58:ed:8d:91:
                    24:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A0:30:F6:A7:82:10:0D:D6:30:6B:53:D6:ED:A8:A2:D0:9E:D3:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/063a2c7d-b84c-3c5a-82ad-5b3cfcbad133.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  12.10.32.0/23
                  12.22.152.0/21
                  209.64.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:3b:6b:32:7c:b6:84:14:41:32:c4:13:c8:eb:67:8a:b3:52:
         18:1c:b5:59:6d:88:78:a5:54:c6:96:ba:b3:be:4b:6a:97:3c:
         5f:e1:40:19:51:b5:ce:23:f1:88:e3:ae:85:3d:7f:eb:63:1c:
         c4:1f:af:ad:9d:67:e0:3d:d0:95:22:88:1f:96:10:28:68:96:
         7e:b3:c8:9a:f6:ca:7b:92:ff:4d:3d:21:20:3e:3d:fb:e4:b7:
         71:51:a9:4a:03:f4:e7:ed:4d:3b:8f:1a:cd:a7:5b:6c:e3:62:
         0a:04:b6:fa:cf:70:65:96:42:de:25:01:3b:ff:aa:2d:46:b9:
         9f:58:bb:c9:70:d2:0f:fc:53:37:df:09:2a:25:e1:4f:e2:1f:
         7b:6f:cb:b0:73:3c:80:36:d9:c2:f9:3d:73:ed:01:6c:70:49:
         a7:36:a7:fd:e0:ee:78:73:b0:64:5e:6f:d3:fb:4a:fe:a0:01:
         05:43:92:82:09:2f:01:f9:c0:11:38:99:90:48:0d:ad:4e:44:
         08:51:c8:f4:ed:af:5e:e4:7e:b3:bd:3e:43:bf:d7:a7:d3:9b:
         b7:4d:e4:e4:b4:9f:90:97:69:31:7d:91:3c:a1:24:cb:d0:ba:
         e6:e2:c1:80:a2:47:91:fa:3e:25:8d:a1:62:8d:7d:13:81:90:
         86:7c:05:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:16:04 2025 by rpki-client