Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/bb12e068-974d-3f9d-afd2-9beed92e7d2e.roa
File:                     bb12e068-974d-3f9d-afd2-9beed92e7d2e.roa (raw, json)
Hash identifier:          42GfGZg0TASI91lWtRvLjaBmJnpZZy/R3Sy9KHnUTzw=
Subject key identifier:   52:A4:45:3B:9D:E8:F8:22:54:4E:24:28:1C:52:82:C6:C6:BF:CE:1A
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584B9CA22F10C0F8D9EC636C8F00
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/bb12e068-974d-3f9d-afd2-9beed92e7d2e.roa
Signing time:             Thu 23 Oct 2025 01:00:31 +0000
ROA not before:           Thu 23 Oct 2025 01:00:31 +0000
ROA not after:            Wed 21 Jan 2026 02:00:31 +0000
asID:                     7018
IP address blocks:        23.112.0.0/12 maxlen: 12
                          45.16.0.0/12 maxlen: 12
                          99.0.0.0/13 maxlen: 13
                          99.32.0.0/12 maxlen: 12
                          99.96.0.0/13 maxlen: 13
                          99.112.0.0/12 maxlen: 12
                          104.0.0.0/12 maxlen: 12
                          104.48.0.0/12 maxlen: 12
                          104.176.0.0/12 maxlen: 12
                          107.128.0.0/12 maxlen: 12
                          107.192.0.0/12 maxlen: 12
                          107.208.0.0/12 maxlen: 12
                          162.224.0.0/12 maxlen: 12
                          172.0.0.0/12 maxlen: 12
                          2600:1700::/28 maxlen: 28
                          2602:300::/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9c:a2:2f:10:c0:f8:d9:ec:63:6c:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Oct 23 01:00:31 2025 GMT
            Not After : Jan 21 02:00:31 2026 GMT
        Subject: CN=15157892-7a22-496e-851d-3459a1515d89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a0:c8:6e:d5:97:43:99:2e:f6:19:fe:ea:10:
                    d2:98:1a:41:cc:11:db:e5:9a:12:67:96:48:cf:db:
                    20:28:dc:10:9c:18:e8:77:39:f1:34:c0:c8:e4:37:
                    3d:fa:3b:52:c7:5c:be:e1:cb:35:e9:b6:24:db:5d:
                    77:6d:2d:83:eb:2b:23:1c:a6:8b:7b:0e:32:1c:e5:
                    a9:1a:2e:a4:3d:c0:3b:db:79:d3:23:1d:81:a9:a2:
                    50:8f:2a:01:87:a0:b4:e9:e7:11:d7:e6:8c:ef:43:
                    ce:fc:ea:1c:84:6a:9a:42:1f:a1:7e:d9:ec:9f:19:
                    d0:d3:52:82:07:4f:6e:13:3e:42:62:86:c9:99:aa:
                    2a:44:ac:bf:89:8e:dc:a8:ed:cd:06:58:52:f8:dc:
                    ca:0c:4d:c1:7b:c7:e6:29:20:e7:ce:9c:86:7e:15:
                    b3:7a:61:80:1b:1c:8a:e4:f2:5f:b7:4d:9c:73:e5:
                    1c:12:40:63:9b:d8:d6:18:e3:2c:e3:3b:1f:7c:e8:
                    6a:78:59:06:f1:f9:bd:40:16:7e:dd:df:ca:49:5a:
                    a4:bf:5d:c4:38:36:c8:ed:34:04:4a:a3:2f:38:49:
                    cf:6d:30:c4:c1:51:a9:71:7c:fe:ee:97:41:20:56:
                    7f:e4:7e:80:3d:1a:de:da:de:5b:82:f9:bb:01:2b:
                    78:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A4:45:3B:9D:E8:F8:22:54:4E:24:28:1C:52:82:C6:C6:BF:CE:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/bb12e068-974d-3f9d-afd2-9beed92e7d2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.112.0.0/12
                  45.16.0.0/12
                  99.0.0.0/13
                  99.32.0.0/12
                  99.96.0.0/13
                  99.112.0.0/12
                  104.0.0.0/12
                  104.48.0.0/12
                  104.176.0.0/12
                  107.128.0.0/12
                  107.192.0.0/11
                  162.224.0.0/12
                  172.0.0.0/12
                IPv6:
                  2600:1700::/28
                  2602:300::/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:ef:89:65:75:bb:5b:14:94:11:d1:b0:e2:fb:d9:8c:95:48:
         14:7d:d0:33:eb:38:45:d0:87:e3:23:4f:eb:58:60:69:80:95:
         03:eb:05:ae:c9:51:7a:be:d4:12:c0:14:0e:66:83:20:ad:26:
         d0:db:4b:4b:5e:ee:55:0c:4e:8e:79:88:d1:6b:08:63:61:24:
         71:5c:81:73:93:ef:ca:ab:c4:16:71:0c:e5:df:61:1b:64:e1:
         d5:29:69:2c:c2:d5:56:41:43:6a:da:c5:ec:90:e0:82:f5:0d:
         ba:be:57:08:ae:dc:29:f4:18:e7:be:3d:23:dc:ea:b5:18:25:
         cb:50:c8:11:81:ee:a7:c6:d9:5e:1c:a2:55:b7:45:04:77:04:
         48:b3:48:c0:9b:3d:6f:22:df:e7:ca:b1:dd:51:1e:b4:80:d0:
         a0:78:cf:40:7e:0f:23:36:7b:c0:bb:eb:4d:c4:0e:71:fd:0f:
         a1:a1:46:17:41:d3:29:f6:07:d6:70:96:59:93:6d:ef:77:4c:
         46:77:37:b2:d5:fb:77:95:2f:6c:78:7f:05:4d:59:58:4a:1a:
         7e:ed:fa:a4:fa:bf:04:47:f3:13:75:6e:7d:3d:e6:91:24:2e:
         68:cb:07:42:2c:74:c0:40:e8:61:e2:63:63:07:f2:13:94:b0:
         d6:e6:12:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:43:59 2025 by rpki-client