Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/87c46462-9637-3a03-bb6e-d9e365d7897d.roa
File:                     87c46462-9637-3a03-bb6e-d9e365d7897d.roa (raw, json)
Hash identifier:          aDAwukugAAienwxsNtLfmpnhRt/tQhBZScg9igqnPHc=
Subject key identifier:   BD:B2:80:A5:8E:66:A4:47:F4:1C:EB:FA:75:53:F7:B5:E7:E8:DD:66
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F4328584A07D529C0AC58FB8D88A5F580
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/87c46462-9637-3a03-bb6e-d9e365d7897d.roa
Signing time:             Sat 31 May 2025 01:00:50 +0000
ROA not before:           Sat 31 May 2025 01:00:50 +0000
ROA not after:            Fri 29 Aug 2025 01:00:50 +0000
asID:                     46261
IP address blocks:        172.102.204.0/24 maxlen: 24
                          172.102.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:d5:29:c0:ac:58:fb:8d:88:a5:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: May 31 01:00:50 2025 GMT
            Not After : Aug 29 01:00:50 2025 GMT
        Subject: CN=4b05614f-3d25-4329-bf32-887e2c7ee0a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:05:b5:a4:ca:48:bd:0d:e8:be:46:2b:65:e1:
                    e8:84:aa:09:59:85:59:f7:8c:8b:87:29:c4:22:d5:
                    36:28:67:7b:88:cf:fc:44:cf:58:9f:19:cf:ae:70:
                    05:57:f8:81:0b:da:ca:87:7c:8f:3f:ad:08:25:ea:
                    ce:ef:0e:51:25:5d:c3:06:fc:71:6c:62:43:5e:c0:
                    ed:4e:ab:06:80:cd:01:60:77:ae:5f:08:de:0d:68:
                    cd:1f:87:38:02:d2:c7:fa:b0:15:93:17:8e:f6:96:
                    8c:24:28:ce:1f:5f:6c:d7:32:2a:b8:df:d6:3f:14:
                    06:c9:dc:10:7e:4a:81:bd:45:1c:c5:6b:ed:0d:45:
                    dc:b2:34:b0:83:cb:c4:da:19:94:3f:f7:54:55:ef:
                    1a:e6:8a:29:b7:42:9c:14:ec:46:a3:7b:80:bc:3a:
                    6c:4c:70:79:e6:e7:92:f8:23:67:25:fb:8e:99:db:
                    6a:6b:c6:ea:61:06:c7:90:cb:05:a7:85:05:7a:a6:
                    44:61:dc:05:72:0a:11:65:9d:15:52:c3:f5:97:6c:
                    b5:ea:68:c7:93:94:c7:7f:d2:2a:cd:c7:25:a2:80:
                    1a:19:bc:dc:5e:70:d6:36:e1:ed:60:a3:08:49:72:
                    fd:31:89:c3:73:91:fe:cc:f4:d1:7b:89:65:d4:2c:
                    cd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B2:80:A5:8E:66:A4:47:F4:1C:EB:FA:75:53:F7:B5:E7:E8:DD:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/87c46462-9637-3a03-bb6e-d9e365d7897d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.102.204.0/24
                  172.102.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:b0:da:60:d2:4d:d7:f2:6d:5a:0a:37:20:16:b4:32:24:17:
         45:6a:57:56:6d:d8:4c:5f:51:14:d3:53:f6:a8:2d:31:da:cd:
         96:8b:6b:1f:d9:22:29:6d:af:b3:4d:d4:58:5b:0a:53:9a:b8:
         71:e1:e7:f5:41:a3:05:ca:12:c3:b5:51:04:85:28:2a:9e:63:
         07:cf:73:7e:82:36:a3:74:d2:b4:85:4f:18:77:36:12:21:02:
         80:0e:d1:f5:ba:09:18:6a:63:52:10:e2:db:9f:39:43:a0:c2:
         d3:4a:fa:32:e3:62:22:67:92:00:9b:9b:7c:11:88:e8:51:ed:
         21:c0:b8:9d:52:80:f8:52:9a:a7:d4:b0:15:d0:1e:3a:fd:85:
         e0:fb:f2:b3:f4:cb:9c:e9:51:c3:cf:e0:b6:b2:b6:a4:c2:0f:
         92:b1:d9:77:2f:b3:53:70:30:39:f8:54:9b:2e:83:4e:71:5c:
         19:d4:8d:4c:a1:69:10:db:e6:6f:59:9c:2b:68:28:fb:fe:f2:
         88:47:07:bc:e2:fb:db:99:df:73:15:c2:12:ec:8a:ee:bd:ca:
         f7:c1:1a:00:2e:e7:51:3e:88:c2:db:a0:34:28:f1:23:88:6b:
         c5:e9:63:2e:53:59:5d:4c:c9:40:56:a3:55:36:32:c1:e8:ce:
         68:9c:16:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:03:31 2025 by rpki-client