Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/7cb5d8b7-0eb4-3ec8-a4b6-cf17779d32c0.roa
File:                     7cb5d8b7-0eb4-3ec8-a4b6-cf17779d32c0.roa (raw, json)
Hash identifier:          5ew3491N9kJaIMM2RYC2s/YlQD6Fi5qACTDyhnw3/04=
Subject key identifier:   91:BD:65:97:C7:8C:59:96:EC:C3:80:79:7E:F8:50:93:30:1D:18:D0
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F43285849D4535242EF71A8D2ACB57280
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/7cb5d8b7-0eb4-3ec8-a4b6-cf17779d32c0.roa
Signing time:             Mon 12 May 2025 14:13:05 +0000
ROA not before:           Mon 12 May 2025 14:13:05 +0000
ROA not after:            Sun 10 Aug 2025 14:13:05 +0000
asID:                     3477
IP address blocks:        155.206.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:53:52:42:ef:71:a8:d2:ac:b5:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: May 12 14:13:05 2025 GMT
            Not After : Aug 10 14:13:05 2025 GMT
        Subject: CN=239be706-ce91-439e-96c2-def12e5a18a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:89:47:74:76:4e:f8:55:8e:ec:bb:10:7a:ef:
                    41:70:f6:87:c6:96:b0:3e:19:b5:24:a9:06:b8:30:
                    47:c7:48:1b:7e:97:b7:70:69:3d:ec:a1:b7:95:f8:
                    b2:7b:37:0d:fc:b8:5d:16:47:ba:dd:0e:00:2d:02:
                    64:0f:9b:81:fa:98:20:73:ee:78:9e:c8:b5:0f:03:
                    10:a3:f4:2d:3a:16:10:a7:3e:75:b2:60:d6:3f:b8:
                    73:51:45:eb:48:39:0d:ef:f5:1c:18:f5:e7:39:6f:
                    e0:5d:e1:b4:e8:7e:17:7d:08:de:50:d0:79:86:e2:
                    4b:51:2c:31:0c:4a:f2:0f:80:f9:10:ad:63:b3:2e:
                    6b:4d:7b:80:5f:90:bf:34:74:a6:b9:33:e2:de:0d:
                    cf:4f:d5:aa:04:6f:e2:70:61:af:99:fd:1f:ba:77:
                    94:25:5a:d8:6c:32:a5:d9:fc:45:d0:c0:9f:38:a0:
                    0a:f9:2d:bf:7f:b5:83:87:90:64:e5:28:67:6a:36:
                    4d:2b:36:ba:06:74:c2:ce:77:eb:2b:0c:55:d4:6c:
                    a3:00:2f:f6:8b:f6:ee:f9:71:1c:fb:a9:3f:53:86:
                    b4:a8:ce:98:c3:42:05:79:d7:ba:54:b1:88:96:31:
                    55:87:0e:3d:2a:12:9a:bf:15:f7:cf:8a:34:e9:1f:
                    86:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:BD:65:97:C7:8C:59:96:EC:C3:80:79:7E:F8:50:93:30:1D:18:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/7cb5d8b7-0eb4-3ec8-a4b6-cf17779d32c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.206.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:c4:de:57:5f:8d:cf:df:23:84:89:dd:b6:55:29:42:7f:69:
         8a:06:43:7f:63:fa:11:bb:35:90:a4:df:83:59:c5:9f:cd:56:
         ac:1e:94:ad:09:53:9d:81:e4:e7:5f:40:c8:5f:45:5d:3d:33:
         b6:48:62:ea:7c:13:aa:3a:30:3d:b8:aa:18:3b:a4:3b:10:e5:
         5c:d9:44:43:e9:87:ae:77:bf:24:e6:40:1a:51:86:61:b5:d3:
         07:cc:09:40:84:c4:8c:be:d7:8d:ae:bf:b7:c0:67:23:58:29:
         4c:aa:d7:f6:0e:e2:d7:d8:71:9d:19:12:2c:d8:cf:e0:6f:d9:
         a3:4d:fb:60:e1:f6:72:59:30:ec:31:e8:62:9f:a4:03:54:0f:
         a8:81:22:b6:e3:73:73:f7:c4:4b:5a:f2:77:ef:8e:62:ae:9f:
         6d:2d:5d:00:fc:e6:d4:16:a3:ce:6b:74:cf:d5:87:ec:89:f1:
         13:19:3f:af:8c:4c:eb:59:37:01:69:c2:1f:0b:07:fe:27:1c:
         27:88:c1:15:65:2b:74:29:c7:55:00:9a:73:93:ee:3c:1d:ec:
         22:24:7e:4f:22:80:8f:e6:0f:18:f0:d5:f5:33:ae:35:bb:92:
         71:88:8c:f1:70:50:91:8c:d0:bf:25:a0:fa:e7:af:11:29:71:
         3a:e4:06:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:23:40 2025 by rpki-client