Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/f121c9da-cdbd-326e-b209-0e0b0ba2082a.roa
File:                     f121c9da-cdbd-326e-b209-0e0b0ba2082a.roa (raw, json)
Hash identifier:          VxT3Y9MUtH7t51fyLs2AS89gllrfsijB1+ITigrRMwI=
Subject key identifier:   FF:55:B8:F7:0A:47:C7:80:61:BA:85:60:CA:5A:95:F3:19:A1:1B:CC
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F43285849441F32253DC0B531FBFF0F40
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/f121c9da-cdbd-326e-b209-0e0b0ba2082a.roa
Signing time:             Fri 21 Mar 2025 22:31:39 +0000
ROA not before:           Fri 21 Mar 2025 22:31:39 +0000
ROA not after:            Thu 19 Jun 2025 22:31:39 +0000
asID:                     30572
IP address blocks:        12.220.102.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:44:1f:32:25:3d:c0:b5:31:fb:ff:0f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Mar 21 22:31:39 2025 GMT
            Not After : Jun 19 22:31:39 2025 GMT
        Subject: CN=e8e65d9a-9aec-4a62-b6dc-f2b93faebe64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:8c:aa:74:eb:06:59:30:b6:d5:2e:ed:c6:af:
                    a9:8a:64:7d:1b:79:8e:1d:62:b7:65:f7:59:d3:a4:
                    ed:92:20:f1:55:34:f4:a6:2d:25:68:70:b8:21:ad:
                    78:ca:e5:8a:7a:4f:81:d3:7d:da:bf:b2:62:22:71:
                    ae:98:6c:90:78:da:b6:23:70:b7:da:f4:73:56:81:
                    09:04:e9:18:a9:4e:1a:2d:dc:b9:a8:51:71:8f:87:
                    41:92:d5:58:bf:db:3e:55:94:8a:95:1b:eb:f7:ce:
                    63:87:3a:51:c3:e6:a0:66:3b:b6:0f:75:e2:23:a1:
                    60:b0:9a:ea:33:64:25:71:00:99:af:2e:b4:4b:00:
                    26:2c:10:88:3b:9e:c8:ef:b6:a2:c0:16:72:3c:83:
                    d0:08:6e:9b:9d:b2:8c:c6:d4:7a:b8:0e:34:68:f0:
                    90:d5:40:92:fc:7c:d8:75:81:a1:6f:c1:67:02:0c:
                    64:b6:f5:45:01:98:f9:5e:ac:84:90:7a:72:c2:43:
                    5f:8b:fd:9c:63:3e:e4:ef:d9:82:d0:e4:77:2a:74:
                    e9:77:a3:a7:17:14:07:df:72:4c:6b:27:e6:fc:54:
                    f6:2a:bf:99:f2:cc:2b:a9:ab:5c:a7:20:a2:98:72:
                    7c:0b:37:39:cb:b7:bf:a5:1e:de:84:5a:ce:22:fc:
                    41:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:55:B8:F7:0A:47:C7:80:61:BA:85:60:CA:5A:95:F3:19:A1:1B:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/f121c9da-cdbd-326e-b209-0e0b0ba2082a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  12.220.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:50:0e:58:49:83:e1:17:68:a6:73:59:31:15:e3:35:34:a2:
         c9:31:a8:ea:b0:45:28:a5:ad:81:9b:0c:85:2f:d4:42:e5:38:
         ba:2b:6d:a0:e5:f0:31:be:38:ef:87:a3:7e:46:4b:fd:e6:03:
         e5:fd:33:3e:46:21:af:b5:19:e0:f9:49:3f:a1:f7:de:e1:ab:
         9b:bd:18:85:33:f4:63:3e:a6:ec:75:fc:97:17:1f:13:6b:97:
         2d:63:5a:da:91:04:16:8f:0d:24:87:10:b7:30:13:a0:f5:84:
         ef:04:2e:5b:b8:8c:05:c4:12:37:8f:2a:74:d3:21:31:90:26:
         11:b8:cd:d8:25:a6:2b:7e:5f:09:df:41:91:c5:2b:7e:6c:e3:
         ed:43:e4:65:eb:13:3b:95:db:82:24:03:53:ba:70:d2:9b:6c:
         7c:80:8b:0a:de:9d:7b:0d:53:79:80:50:58:8a:b1:26:01:de:
         0c:80:a5:02:0e:53:a1:0d:da:82:e1:b5:80:58:40:bf:ce:2c:
         fb:dd:93:86:f6:18:62:31:67:e9:a9:4b:c4:6a:ac:91:2e:03:
         3e:95:6e:7a:35:90:72:0d:f5:15:35:ad:8d:53:da:d6:f4:9e:
         78:00:14:ab:ae:a5:cc:1c:19:51:d1:c6:67:59:84:c4:07:89:
         04:67:f3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 11:42:13 2025 by rpki-client