Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/78d7aa01-4523-3098-9ce6-5a3ee414b7d3.roa
File:                     78d7aa01-4523-3098-9ce6-5a3ee414b7d3.roa (raw, json)
Hash identifier:          9ShsEbsZAXklEmbVZ/77rqNdFCuEC3CqcstF4vMzWbw=
Subject key identifier:   06:C2:C4:55:FC:33:9B:E0:B4:F2:93:A3:FD:12:C8:17:1E:51:E1:E1
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F4328584A03A53CEB2A9869A9AC464000
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/78d7aa01-4523-3098-9ce6-5a3ee414b7d3.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     14061
IP address blocks:        206.189.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:3c:eb:2a:98:69:a9:ac:46:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=6f0b6755-95de-45cd-93e7-152580873c28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8d:2f:c2:64:05:6c:3a:d9:e9:95:65:1c:ad:
                    42:06:90:38:28:ed:70:19:25:f8:cb:3d:c9:ff:88:
                    58:6f:fc:02:02:e6:74:df:45:97:3f:13:62:18:a1:
                    00:51:32:d6:f5:cb:28:86:bf:50:2a:23:55:87:3c:
                    a6:b2:d5:5e:6c:e7:a8:2f:eb:9d:3e:05:b7:ed:2f:
                    e8:b3:32:70:04:b0:90:bc:11:f5:17:87:ad:54:71:
                    67:82:df:ae:dc:0c:e2:c1:fa:05:16:04:42:46:10:
                    bf:cf:17:23:fa:ee:85:2a:29:bc:87:bf:66:7c:3b:
                    2a:81:0d:c1:6a:fb:7d:f6:e6:b3:a5:8f:b6:fe:b2:
                    58:76:e3:db:c6:a9:54:93:36:21:39:e9:6e:c6:a9:
                    c4:ff:2d:75:2e:cf:7d:2c:8a:50:56:e0:10:c5:b2:
                    7f:a6:54:7d:bd:b8:fe:e4:88:b7:9c:0f:b2:58:93:
                    77:50:60:b9:fa:5d:04:6d:4e:43:f3:57:21:ae:76:
                    b7:84:c4:1f:dc:53:37:b5:53:5a:e7:67:0a:38:26:
                    ad:29:ce:ed:30:8c:f5:b4:22:c6:67:b8:1b:58:0f:
                    73:d5:88:06:cf:be:27:4d:4b:c5:b8:28:90:cf:ba:
                    c5:83:c5:05:4f:4f:c7:a4:28:09:72:08:fb:55:38:
                    dd:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C2:C4:55:FC:33:9B:E0:B4:F2:93:A3:FD:12:C8:17:1E:51:E1:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/78d7aa01-4523-3098-9ce6-5a3ee414b7d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.189.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:87:c8:16:57:ec:fc:fc:38:83:ec:02:d1:a6:b5:91:05:79:
         8a:fd:7c:d2:da:23:b1:f1:6a:94:4d:41:b5:2d:cc:70:eb:9c:
         df:44:97:b9:cd:74:35:2f:f3:0c:bd:ac:e5:4e:35:0d:61:20:
         01:61:9e:30:0d:86:92:36:01:bd:a8:bd:5d:65:b0:38:16:0c:
         10:d5:a6:50:f4:09:c2:b8:bf:81:84:80:cd:1b:7e:8f:66:50:
         84:d9:16:bb:9b:bf:8a:be:d2:b4:d7:a8:05:34:2b:fb:6f:67:
         80:e5:b9:b5:4b:61:09:03:45:6d:04:61:05:37:31:0b:f6:a0:
         22:17:97:66:ad:6f:eb:96:09:c1:d7:96:03:93:a7:72:41:6f:
         22:e1:8f:b9:ea:02:b5:ca:05:45:26:5d:a8:15:62:3b:fa:20:
         9b:c0:db:6b:33:d3:be:60:fb:84:4c:0f:f3:cb:cc:20:8a:b7:
         42:0b:d6:2d:4d:01:56:3d:46:54:1b:e8:33:77:a9:57:c7:9a:
         c8:e8:1e:66:e3:df:fb:31:ef:39:03:86:5a:36:e7:b6:5c:9d:
         84:9f:cb:09:d0:b3:77:73:02:f8:6a:5e:d4:8e:f0:7a:0b:a7:
         4f:f6:d8:4b:a9:45:5f:b7:0f:63:45:11:47:de:80:d7:40:ad:
         82:60:c5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:07:49 2025 by rpki-client