Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4be0100-3333-3352-85fa-30db65557312.roa
File:                     c4be0100-3333-3352-85fa-30db65557312.roa (raw, json)
Hash identifier:          A8ZfanZkTcZfGgLLOiFFMvdNB90f0lUJ+74Qz8Z+Ftc=
Subject key identifier:   4C:8E:FA:E2:EF:77:11:85:6D:A3:0C:AE:41:02:35:BE:96:D0:04:8F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849ED4FD895EB76FB3FC45BE180
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4be0100-3333-3352-85fa-30db65557312.roa
Signing time:             Wed 21 May 2025 13:01:04 +0000
ROA not before:           Wed 21 May 2025 13:01:04 +0000
ROA not after:            Tue 19 Aug 2025 13:01:04 +0000
asID:                     16625
IP address blocks:        173.222.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ed:4f:d8:95:eb:76:fb:3f:c4:5b:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 21 13:01:04 2025 GMT
            Not After : Aug 19 13:01:04 2025 GMT
        Subject: CN=688d13fe-2be6-4014-b9f0-e0b7f8159e31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c5:04:03:d5:e7:34:bf:c6:cb:56:a9:64:e5:
                    69:79:02:ff:ee:ab:8b:ea:96:74:c0:17:72:7e:68:
                    a0:cd:7d:be:d7:46:7f:d0:55:eb:fc:83:94:41:4f:
                    73:a7:5c:55:00:8b:41:9b:b2:c2:73:81:e2:79:78:
                    05:28:a9:6b:79:a6:e7:b3:be:aa:e5:f0:61:0a:bb:
                    73:d1:42:d7:e6:b7:ba:0f:e8:3f:b0:6d:0c:e9:50:
                    32:91:c5:7c:e3:fc:68:9e:23:23:98:f9:ee:30:75:
                    94:04:89:ad:5f:38:06:4a:01:5b:c6:a3:1a:a7:b7:
                    3f:66:e6:52:10:5e:59:0e:0a:e0:69:7f:a9:f7:26:
                    47:72:6d:17:08:cb:f0:2b:bd:84:80:16:15:16:8c:
                    58:59:fd:06:fe:08:45:b8:f3:33:e4:d6:62:03:de:
                    28:a0:13:b7:90:bf:c9:a6:45:14:95:ee:80:17:45:
                    57:fb:5a:e3:63:c4:46:f4:89:20:da:9b:0c:5b:5f:
                    f2:a0:9c:40:6a:08:de:8c:f8:e9:d8:3d:6c:cb:2c:
                    d4:18:aa:a0:05:ef:1d:cd:6e:26:b0:2d:63:8d:1b:
                    43:1a:d6:90:17:c6:af:c1:98:4f:4f:47:36:ca:4f:
                    9a:72:02:7a:db:3b:3f:bb:db:5b:1a:b9:e4:d3:d1:
                    c8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:8E:FA:E2:EF:77:11:85:6D:A3:0C:AE:41:02:35:BE:96:D0:04:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4be0100-3333-3352-85fa-30db65557312.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.222.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:0f:83:03:53:ca:86:77:93:e9:f9:5b:c9:fb:83:d5:1f:9c:
         a5:5c:05:9c:bc:45:37:35:bf:c6:98:05:28:48:25:2b:19:8b:
         fb:00:7b:5c:b3:0b:9f:81:47:a3:b0:b8:a3:b2:56:13:49:8c:
         31:a1:36:36:b2:9c:2f:02:6a:4c:73:4f:88:8d:c0:05:53:9a:
         48:f2:24:bf:42:c4:23:d5:2d:a4:5a:b5:bb:f2:69:30:2c:e7:
         57:fc:6b:5a:68:4f:12:71:4a:62:b5:9e:b0:0b:ea:2f:0d:a5:
         88:74:cf:0d:84:57:80:ad:d3:ab:38:ca:35:91:c5:57:06:24:
         35:d4:fa:5a:97:2b:76:75:8b:4a:bb:9b:da:dd:c9:b4:56:ac:
         bc:e9:ac:c0:90:c5:ca:eb:78:53:63:fa:a7:e5:5b:6f:a6:ea:
         25:11:e8:d3:d0:9f:8b:c6:6f:ce:91:4e:f5:32:a8:01:59:0e:
         e1:00:33:d7:6f:f0:8e:e3:dc:f8:88:dc:74:d6:b9:7c:e5:58:
         fe:7f:3d:30:0a:a6:ea:64:a7:3f:c0:8e:1e:e8:6d:2d:db:8b:
         08:1a:85:49:63:95:33:6a:ed:fb:62:d1:81:90:d8:ea:75:98:
         09:7f:4a:05:c1:02:d7:b1:fc:d1:a9:7f:89:65:58:da:d3:9d:
         36:e0:65:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:27:13 2025 by rpki-client