Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/c905560f-e46c-3a04-8eec-93cebdd49469.roa
File:                     c905560f-e46c-3a04-8eec-93cebdd49469.roa (raw, json)
Hash identifier:          Llo3scPnOVKTti2qLjhk3/RYHH10rOz5iXerZwqXGfc=
Subject key identifier:   A8:A6:D6:78:CF:FF:6C:2E:DC:08:4A:8B:A4:F2:75:D3:CD:FB:88:3C
Certificate issuer:       /CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
Certificate serial:       010D0C9F43285849C0A4DD833EE1C9FF6BEE3780
Authority key identifier: 97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/c905560f-e46c-3a04-8eec-93cebdd49469.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     16509
IP address blocks:        206.225.201.0/24 maxlen: 24
                          206.225.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:dd:83:3e:e1:c9:ff:6b:ee:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=213e22fe-f5ab-4683-8afa-18e981964156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:14:91:f7:9e:18:89:29:49:e9:74:f4:00:99:
                    a0:a9:2c:32:17:66:0e:8e:26:5d:a4:94:e6:7f:9a:
                    93:5b:3b:45:df:4c:2c:5a:7a:57:3b:bf:38:2f:99:
                    b4:12:6a:c0:bc:40:35:14:b5:ce:f2:b4:36:eb:32:
                    7d:4d:f9:53:8b:3e:64:66:db:45:2c:70:a8:e3:ca:
                    12:7e:dc:1c:48:18:fc:9a:b2:ce:f1:5e:be:fe:2e:
                    4e:71:74:53:4c:c6:cf:31:6d:cf:eb:25:76:a6:d7:
                    d0:7d:66:b6:3a:23:ff:00:14:28:ce:4e:af:e3:46:
                    5c:ac:19:40:db:1c:ee:a7:19:52:aa:ac:c2:bd:04:
                    e1:08:33:cc:1b:51:1e:d1:7f:bb:c4:2d:f4:2a:0a:
                    f3:91:a7:85:a1:85:dd:4d:4f:84:04:f6:b2:5a:8b:
                    9c:b4:02:e9:48:c7:ee:a0:c1:e7:83:83:9d:55:52:
                    62:93:f1:2b:b4:74:bd:c2:41:e3:67:7e:fc:02:08:
                    ac:dc:ae:f7:c1:9c:b3:8e:a8:8c:98:75:81:c5:48:
                    ba:2b:3b:1d:ca:8f:b7:4c:77:2c:81:34:b1:17:7c:
                    be:30:00:0b:f0:d0:12:3d:95:d3:1d:0b:ff:a2:69:
                    77:e7:6d:cf:66:45:80:f4:d3:b7:b5:35:e2:0c:f6:
                    81:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A6:D6:78:CF:FF:6C:2E:DC:08:4A:8B:A4:F2:75:D3:CD:FB:88:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/c905560f-e46c-3a04-8eec-93cebdd49469.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl

            X509v3 Authority Key Identifier:
                keyid:97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.225.201.0/24
                  206.225.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:57:66:d7:7a:05:c5:93:0a:2a:47:84:fa:57:c3:3b:95:99:
         b3:ff:a8:5a:f5:94:02:14:52:f8:78:b1:d2:7c:db:fd:da:cf:
         8d:ae:14:55:3c:e8:33:df:18:23:64:5b:34:14:bb:e1:5d:b0:
         2f:76:7c:d2:b4:0e:9a:31:af:04:13:57:43:97:4c:8a:36:3d:
         85:35:08:ef:46:28:ff:b4:fe:ab:9e:06:ee:bf:d7:21:83:31:
         29:fe:20:73:06:1d:c9:23:22:b2:a1:d1:15:1d:64:9a:c5:1e:
         75:da:6a:f1:b4:95:a9:36:31:d8:17:f2:95:e2:2f:43:63:87:
         d5:61:0f:f4:a4:02:62:42:1d:d5:9f:75:b3:41:c2:49:f8:86:
         4f:9e:8d:19:fc:fe:70:b0:b0:98:42:2c:08:22:54:35:b5:31:
         8a:5a:06:6f:12:21:b9:86:f5:55:c4:50:29:6d:7c:ed:ed:c0:
         51:3e:bf:7f:12:2b:0e:e5:f6:c1:e4:8b:ee:65:db:ef:dc:48:
         07:5c:aa:67:e8:ce:0e:65:99:8e:56:e2:17:75:3c:ca:44:f5:
         61:77:94:7e:12:de:36:02:fb:0e:b1:a6:b6:b9:d7:61:72:76:
         20:02:a3:8b:87:4e:b8:55:06:19:71:6c:40:d0:f6:c8:c0:3d:
         59:08:60:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:39:36 2025 by rpki-client