Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/bb4d736c-0c57-3d5c-9406-f0cc9f2b2254.roa
File:                     bb4d736c-0c57-3d5c-9406-f0cc9f2b2254.roa (raw, json)
Hash identifier:          cfjXUnZ/GPyOwg8ZWgNFn6UxDKgahfDunuk/INfRQAg=
Subject key identifier:   F7:E7:B1:CD:A6:0F:B3:73:F1:6E:42:7E:95:38:65:20:E6:5D:56:04
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584E0FF64F1E320AAF01F0A09580
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/bb4d736c-0c57-3d5c-9406-f0cc9f2b2254.roa
Signing time:             Thu 04 Jun 2026 18:01:55 +0000
ROA not before:           Thu 04 Jun 2026 18:01:55 +0000
ROA not after:            Wed 02 Sep 2026 18:01:55 +0000
asID:                     16833
IP address blocks:        12.161.225.0/24 maxlen: 24
                          12.161.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0f:f6:4f:1e:32:0a:af:01:f0:a0:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Jun  4 18:01:55 2026 GMT
            Not After : Sep  2 18:01:55 2026 GMT
        Subject: CN=82171005-2dbf-4692-926a-586daf340808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a4:89:71:51:df:0f:32:77:8d:52:d4:dd:a0:
                    99:16:6e:b8:e7:09:b9:9e:2a:50:93:95:84:f5:a7:
                    74:69:a5:15:03:f3:dd:f7:de:a5:b4:14:95:fd:07:
                    6c:a2:2a:c3:e3:9a:f6:9a:56:50:c4:71:a0:b3:1b:
                    32:ad:42:a8:10:2e:dd:d4:97:ac:e3:d1:9e:b1:be:
                    4e:06:35:55:f8:38:90:f8:c8:85:6a:5d:e4:80:66:
                    6a:27:76:e2:4c:19:04:33:19:54:67:6e:09:be:fb:
                    fa:31:f5:ec:e3:ed:ee:1a:20:17:ba:45:35:b9:c6:
                    a0:3b:bd:5d:2c:91:9b:30:3c:f9:09:4a:3c:24:f7:
                    cb:98:8d:96:af:58:e8:c3:cc:ab:20:65:f9:a2:6e:
                    68:a7:54:1b:79:71:b3:40:6f:2f:95:73:04:09:98:
                    d4:8e:c7:52:11:b0:3c:11:b1:be:06:ab:9f:b6:4c:
                    75:8f:c3:a5:32:62:5d:1c:ef:6a:13:21:be:e9:3f:
                    17:ce:12:64:14:b5:43:59:be:df:b7:5f:c1:1c:6f:
                    a0:21:b5:64:32:e3:22:fc:9d:d5:02:2f:d9:56:08:
                    4b:35:d5:0c:63:d8:f9:4f:31:bf:53:ed:63:1b:80:
                    2b:5b:0e:b7:ca:17:6b:d8:e5:fa:9c:8a:64:83:6a:
                    8d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E7:B1:CD:A6:0F:B3:73:F1:6E:42:7E:95:38:65:20:E6:5D:56:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/bb4d736c-0c57-3d5c-9406-f0cc9f2b2254.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  12.161.225.0/24
                  12.161.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:14:c3:f1:85:8e:79:ba:7a:01:01:af:3a:11:45:4c:c1:82:
         70:00:14:31:72:7e:93:af:3a:3c:46:c7:ea:63:e4:36:04:02:
         44:14:0b:64:5f:35:78:3a:28:ab:6c:35:49:db:06:36:99:44:
         95:db:41:5c:86:15:41:6c:77:e9:bc:05:ea:50:ba:2e:66:b5:
         b8:64:3a:3e:1f:cd:75:70:c5:8b:a2:55:0d:be:05:29:ba:0d:
         b7:4a:12:9f:e0:d9:91:4b:dc:c9:3c:57:24:43:33:f7:e0:10:
         5b:a2:d3:96:bd:06:dc:cc:1d:78:75:57:42:24:dc:cc:b2:b3:
         b3:9f:fa:70:0c:45:88:bc:a8:e3:c6:05:29:81:4f:fa:4d:49:
         f1:0b:b6:47:8a:79:c9:15:11:44:4d:4f:97:58:26:13:cd:9d:
         e3:7d:a4:45:fa:d2:6f:4b:48:30:76:77:94:18:19:3b:0b:b8:
         dc:47:d5:6e:7a:b9:a8:2c:0c:4f:60:69:52:d9:ea:a5:c1:82:
         1c:ed:c2:30:9e:77:d8:61:28:a3:e4:72:9c:10:52:45:e9:6b:
         65:02:f8:a5:f7:2b:8a:07:2d:ca:51:8a:ac:df:89:57:af:1d:
         96:43:5c:87:77:cf:4e:07:09:c5:c4:58:6a:3e:7c:1a:b5:3d:
         da:6b:da:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 20:39:10 2026 by rpki-client