Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/12e46e6f-b9b8-3b84-b6d5-27e024920045.roa
File:                     12e46e6f-b9b8-3b84-b6d5-27e024920045.roa (raw, json)
Hash identifier:          ngU2IJfagL9az9IRT5n+iTJyfLlwuP31gJC+zVlCAY4=
Subject key identifier:   F1:25:6B:C1:30:C2:C2:E0:03:1A:8B:AF:B5:C2:B9:83:80:E8:D4:BA
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584A295556B9E0FBBA6D4E47A700
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/12e46e6f-b9b8-3b84-b6d5-27e024920045.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     22249
IP address blocks:        12.20.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:56:b9:e0:fb:ba:6d:4e:47:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=a447a54f-b525-4d68-9dbb-049326c7e4b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5d:5b:d0:f0:67:89:8f:0d:6f:6a:b9:de:da:
                    c0:8e:7e:97:ff:5f:a5:e8:c0:fb:f0:99:63:1a:40:
                    c0:46:a3:a6:4c:ae:15:37:b2:f0:0a:c2:cb:50:71:
                    2f:82:54:3c:2c:a4:0c:b1:42:a8:a7:59:84:1f:5b:
                    a1:d5:e8:c0:1a:68:bf:24:73:a2:1b:d5:b0:e1:d5:
                    17:b5:f1:26:f3:b0:d6:8c:98:7e:65:e2:23:46:6d:
                    e1:7a:be:11:f0:09:37:ba:d9:ef:b3:07:3f:c8:4b:
                    cc:f8:d5:30:1f:62:6d:c1:99:d7:f4:5a:8b:ad:f8:
                    b9:ae:64:3e:fd:31:c1:4c:9b:bf:9c:99:5a:95:e8:
                    70:f3:5c:26:fb:a6:34:42:7c:ad:97:9d:f8:f3:d5:
                    ff:be:e0:c5:19:7b:bc:12:ce:83:4a:6a:ba:ab:f2:
                    68:e4:2a:6d:dc:c5:6b:99:08:25:39:10:8c:84:19:
                    58:c9:58:87:4e:94:a2:09:ed:a0:a2:d9:62:5b:b2:
                    66:50:8b:73:58:c5:56:9b:2f:a1:06:cf:18:b0:1a:
                    63:56:26:b6:0a:a0:e1:d1:d9:2d:2b:0a:ea:64:d0:
                    70:cf:c5:ba:58:07:ae:25:73:0b:3e:a3:ba:0c:88:
                    a8:e8:34:a7:dc:0f:83:ca:e9:1d:da:fe:2a:9d:d9:
                    bf:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:25:6B:C1:30:C2:C2:E0:03:1A:8B:AF:B5:C2:B9:83:80:E8:D4:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/12e46e6f-b9b8-3b84-b6d5-27e024920045.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  12.20.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:4c:df:d4:90:41:38:d4:b3:56:72:33:0d:be:25:e8:19:dd:
         b8:82:15:df:d0:53:4e:f2:e1:af:43:e0:38:8e:36:94:b8:ec:
         bb:2c:53:a1:55:e7:52:c0:5b:05:02:e4:cf:2f:56:91:7e:63:
         14:78:20:2a:52:e0:1b:55:7b:d3:2c:70:aa:39:a1:0e:f6:02:
         c5:b5:48:f9:e7:b6:ca:a2:e7:cd:59:b8:1c:40:79:cf:4d:a9:
         f8:f1:83:ce:59:56:a8:61:7e:6c:c8:76:89:47:05:a9:f7:3c:
         87:5c:33:1a:2b:e6:c9:1a:af:2c:70:d2:5e:aa:3d:2a:3e:58:
         0d:6f:a6:14:ad:1e:7f:cb:9a:f0:ab:24:17:4a:21:e4:d7:27:
         9e:07:44:4e:a3:69:dd:98:c6:83:b9:40:3b:85:f7:9f:3f:3f:
         7f:f3:64:42:50:ee:21:4f:7b:db:2d:ec:c8:a6:fb:cb:8e:ec:
         82:37:d5:af:95:3a:f3:8b:a8:85:24:c6:64:8b:9b:c8:cf:a2:
         4e:ce:d1:98:52:e9:00:88:ad:d6:31:ea:32:b4:9c:63:16:bc:
         bf:b2:3d:96:12:6e:86:90:ed:14:6f:49:d6:41:f9:b2:5d:f3:
         4b:9e:16:02:7c:d9:78:dd:b9:ee:d9:18:6b:1c:e4:ba:f9:0d:
         3c:b3:27:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:03:25 2025 by rpki-client