Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/6d649304-75f6-3f3c-9942-b6c761d8c2a7.roa
File:                     6d649304-75f6-3f3c-9942-b6c761d8c2a7.roa (raw, json)
Hash identifier:          kjqip0OVEowIKI9KOhrtMHkyxsEQKb3EZmwSmhWG+E0=
Subject key identifier:   62:7F:F2:50:3B:14:A9:93:07:A5:83:8B:9B:3D:9E:50:A2:8A:E3:C9
Certificate issuer:       /CN=bc6146e0-ac7c-49f0-a39f-f40759de0b5d
Certificate serial:       010D0C9F43285849860467FF6393C4DDE0086780
Authority key identifier: 6F:35:45:A6:31:FD:EC:B9:3A:FD:94:AD:E8:F5:F2:3E:EF:94:DA:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/6d649304-75f6-3f3c-9942-b6c761d8c2a7.roa
Signing time:             Mon 14 Apr 2025 13:00:59 +0000
ROA not before:           Mon 14 Apr 2025 13:00:59 +0000
ROA not after:            Sun 13 Jul 2025 13:00:59 +0000
asID:                     47036
IP address blocks:        65.254.184.0/24 maxlen: 24
                          65.254.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:86:04:67:ff:63:93:c4:dd:e0:08:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc6146e0-ac7c-49f0-a39f-f40759de0b5d
        Validity
            Not Before: Apr 14 13:00:59 2025 GMT
            Not After : Jul 13 13:00:59 2025 GMT
        Subject: CN=441ca333-7ce1-4cae-baa0-9bca8c9d08f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:47:d6:6b:b1:1a:12:4c:85:0f:f4:3f:d9:29:
                    87:45:63:0c:ae:ef:a9:ab:aa:3c:55:ea:97:3f:c0:
                    25:2c:bf:8a:36:73:f5:94:1e:a8:9d:dc:16:ea:bc:
                    69:d8:da:52:42:41:b0:af:e0:fe:23:9d:22:ef:6c:
                    06:04:dc:ce:5a:63:17:45:3e:f7:18:09:c4:42:4f:
                    b1:da:07:19:d2:d4:67:2c:69:4f:3d:94:bc:ae:d8:
                    5c:cf:56:57:df:02:34:ef:e4:7c:1b:08:c6:a0:7b:
                    2d:67:46:a3:0b:44:93:5d:63:0e:94:34:e0:11:ad:
                    b7:4d:a1:8a:43:7c:2d:5a:0a:57:1c:e2:32:39:22:
                    a1:d3:06:0d:45:09:42:72:73:b5:b2:d9:e9:3b:33:
                    5e:c4:e8:c2:7e:b0:6a:7f:60:cc:2b:8c:a5:79:15:
                    87:44:9e:83:f8:f1:7a:74:a6:e3:e4:6b:3a:4e:b9:
                    60:e2:60:99:73:c7:cc:34:b7:f2:23:87:f7:ff:a0:
                    ae:62:c6:5d:1a:15:a5:80:4d:6c:72:fd:0c:5a:b9:
                    b1:2b:6f:22:24:3a:47:55:c8:6f:90:41:7f:63:02:
                    97:34:5d:48:7d:94:8c:ae:a9:ff:1e:37:14:4a:a6:
                    e1:3f:0c:19:2b:ba:a5:c4:ca:1c:9b:0f:88:d1:c7:
                    ae:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:7F:F2:50:3B:14:A9:93:07:A5:83:8B:9B:3D:9E:50:A2:8A:E3:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/6d649304-75f6-3f3c-9942-b6c761d8c2a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.crl

            X509v3 Authority Key Identifier:
                keyid:6F:35:45:A6:31:FD:EC:B9:3A:FD:94:AD:E8:F5:F2:3E:EF:94:DA:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.254.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:ff:f3:12:fc:db:3b:9a:9b:93:dd:5b:39:05:cf:78:31:dd:
         ba:a7:22:8d:ac:a5:3b:16:c1:c5:ed:29:d2:05:7a:7f:f4:ac:
         87:9c:f8:b0:69:2e:f7:9b:13:8e:69:87:19:31:fd:fb:61:5a:
         ee:96:9d:ca:e3:18:70:77:27:ff:5a:91:6c:b9:b5:88:89:f2:
         a3:06:bd:99:02:66:21:76:6f:f0:74:6f:67:93:69:3d:c3:25:
         43:f0:ca:4d:5b:d6:5b:bb:be:61:0b:a1:19:07:2f:cf:e7:6b:
         8e:31:57:a0:70:5e:ee:54:35:0c:b4:4d:73:f8:60:53:42:3a:
         8c:34:69:00:06:b0:35:62:f0:75:6e:f2:f4:46:8e:61:f5:b5:
         64:2f:fc:4a:67:af:2f:46:9e:ac:dc:33:35:71:1a:0c:be:41:
         2d:da:4b:ff:f0:9b:5a:e3:5d:0b:ee:de:d3:3f:0c:ab:11:55:
         d1:7c:10:cb:18:2f:87:41:68:af:88:26:c2:e0:16:bb:80:f0:
         bf:1e:0d:ca:5e:4c:e5:3d:48:24:70:79:9e:1c:66:19:f5:18:
         ca:1b:34:2c:34:a1:ef:ed:71:ab:88:5d:47:2c:9c:84:9d:7f:
         8b:1e:da:5d:39:8d:34:f6:2c:14:dd:3c:7b:ed:0b:c5:b5:47:
         a9:eb:68:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:46:47 2025 by rpki-client