Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/05b1b493-9d94-3e6b-81eb-2cf069390bb0.roa
File:                     05b1b493-9d94-3e6b-81eb-2cf069390bb0.roa (raw, json)
Hash identifier:          3G9H6/EjOjVdUbm+DMTTIC35ZExOZgsp1n9jVdmF4Ak=
Subject key identifier:   E7:13:19:72:5F:C5:48:F6:8B:5F:D4:87:7D:B1:C2:01:18:2C:AA:3B
Certificate issuer:       /CN=a2d891cb-6de8-4437-8155-3741bf9d4144
Certificate serial:       010D0C9F4328584A268ABCCD5908BB14DFF921C0
Authority key identifier: 35:18:CE:6D:B2:C6:46:71:A0:E5:1A:1A:37:BE:E2:69:AB:CC:0C:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/05b1b493-9d94-3e6b-81eb-2cf069390bb0.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     7029
IP address blocks:        206.183.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/a2d891cb-6de8-4437-8155-3741bf9d4144.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/a2d891cb-6de8-4437-8155-3741bf9d4144.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:bc:cd:59:08:bb:14:df:f9:21:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2d891cb-6de8-4437-8155-3741bf9d4144
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=0b4c81e4-06f2-4089-af42-1d665db239e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a9:51:5f:2d:21:91:57:c9:c2:e4:56:ca:25:
                    b5:ed:0e:cc:e9:1a:43:f0:45:49:29:35:5f:52:a1:
                    d0:7c:74:a8:ee:a6:1c:84:93:3c:c4:d2:2e:c4:21:
                    5e:88:fd:53:c0:de:e2:7c:86:89:a3:8a:3b:63:6f:
                    9b:df:7d:6e:fc:22:dc:29:dc:57:8b:c6:b6:86:e6:
                    67:9c:d4:1c:af:8d:cf:64:e5:3f:76:86:a8:61:60:
                    42:2e:76:74:3f:56:9d:bf:78:5e:a1:8f:ff:c0:5d:
                    46:33:47:fe:72:a5:ff:e7:91:14:6f:4a:7d:9d:cc:
                    ae:c8:e9:30:98:5c:9a:40:58:ac:ea:f2:a2:d8:d2:
                    50:0a:90:82:02:28:cb:fd:05:9c:ca:df:25:9d:61:
                    2c:a2:4b:8c:47:19:5e:cc:6e:a8:1b:34:26:97:b5:
                    04:1e:da:92:05:78:44:93:b1:4b:c8:10:18:93:f5:
                    43:c7:2f:44:16:18:b9:a6:a5:4f:f1:a4:a3:f1:4d:
                    8a:6b:db:38:c1:b2:cd:f3:4f:19:e6:9b:f5:ab:eb:
                    2f:92:f3:a8:ed:e9:3f:03:73:a6:76:ff:db:af:2d:
                    50:6a:fb:51:52:81:96:64:59:06:f4:97:15:c8:53:
                    da:60:02:db:81:46:77:29:12:dc:34:68:c4:c7:e5:
                    fd:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:13:19:72:5F:C5:48:F6:8B:5F:D4:87:7D:B1:C2:01:18:2C:AA:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/05b1b493-9d94-3e6b-81eb-2cf069390bb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/a2d891cb-6de8-4437-8155-3741bf9d4144.crl

            X509v3 Authority Key Identifier:
                keyid:35:18:CE:6D:B2:C6:46:71:A0:E5:1A:1A:37:BE:E2:69:AB:CC:0C:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.183.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:da:36:df:29:57:57:21:13:60:b2:db:89:31:a4:3c:58:e2:
         bd:9d:91:ad:17:d6:bf:4d:60:8f:90:11:0d:3d:d8:e2:e9:d0:
         e2:1c:aa:fe:ad:c2:3f:8a:26:91:c3:a6:fc:6c:9c:f7:0d:7a:
         15:a6:01:3a:5f:9a:48:b5:00:17:78:f5:fb:4c:72:96:04:23:
         d0:a8:6e:60:de:f7:0f:97:18:f5:f8:15:54:9e:cb:bf:f4:3f:
         a5:d3:fc:48:d1:ec:7f:e3:25:19:8b:46:f6:60:00:08:ce:ff:
         12:4b:d1:21:18:2f:06:60:e2:95:c5:26:a4:c3:a2:c9:98:39:
         65:5c:96:83:12:1e:77:99:e8:f1:09:aa:39:be:ce:5d:f1:14:
         e4:34:1a:f5:b0:a0:6a:9f:05:fd:b2:9f:3c:5b:30:2b:50:ea:
         21:71:c3:63:86:56:5c:ec:f8:d2:86:09:64:d8:38:c2:21:b6:
         44:f2:43:9e:f2:71:a5:08:52:4c:14:8e:40:f6:f6:bc:73:57:
         dc:24:34:27:f5:d3:33:3b:2e:e4:4c:7d:e2:f6:52:ae:c7:50:
         ec:06:a1:71:35:3f:87:b8:7b:37:5e:12:a8:e4:4c:55:84:b6:
         c5:b8:2b:ee:24:68:dd:93:96:95:15:4e:86:55:06:33:5f:08:
         c2:b5:f6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:24:47 2025 by rpki-client