Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/0d8e67f0-b29b-3bc9-9671-8f3a17955443.roa
File:                     0d8e67f0-b29b-3bc9-9671-8f3a17955443.roa (raw, json)
Hash identifier:          YD1wRxWAHEkzNAUajprxi+l8Q453Bh0MBGjqj96oyfk=
Subject key identifier:   B8:35:84:6D:35:DD:0A:0A:40:F8:AD:FA:03:56:40:52:BE:6E:0B:3E
Certificate issuer:       /CN=6c7a9179-b71c-4608-b6ad-37c021ece676
Certificate serial:       010D0C9F432858498CFF1912B6BDD8A5AC97A2A8
Authority key identifier: A4:AA:05:6E:EC:2E:BF:7A:43:54:F8:C6:CF:73:36:6C:C3:8D:26:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/0d8e67f0-b29b-3bc9-9671-8f3a17955443.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     208889
IP address blocks:        206.168.135.0/24 maxlen: 24
                          2602:fbd9:ff0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/6c7a9179-b71c-4608-b6ad-37c021ece676.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/6c7a9179-b71c-4608-b6ad-37c021ece676.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:19:12:b6:bd:d8:a5:ac:97:a2:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c7a9179-b71c-4608-b6ad-37c021ece676
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=05452ef5-9fc2-4375-8a1d-a2a66a30dfdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:be:fa:b5:d2:85:49:ce:82:aa:42:7e:ee:d2:
                    0a:1d:d0:cd:39:ff:38:e3:2c:f8:ea:ef:2e:ae:70:
                    20:7b:ad:56:c2:3e:8e:99:15:8b:82:d0:48:c7:c9:
                    3c:fe:1c:26:c5:11:ea:4c:03:f0:1f:69:de:f9:31:
                    df:54:bf:8b:18:05:e9:8f:5e:62:95:7e:eb:f1:96:
                    ad:58:19:bd:e2:6d:84:85:d5:ad:13:fc:21:c9:b8:
                    6f:c0:fa:e5:bc:53:03:c7:25:c1:bb:11:b5:60:e0:
                    67:4a:77:af:dd:db:a8:42:ae:23:d3:8a:03:60:82:
                    85:b3:9d:c3:4a:2f:ae:62:22:25:b3:53:eb:a5:f4:
                    10:ae:28:68:a9:37:58:91:5e:e3:e2:89:6b:06:a4:
                    87:3c:90:ee:e6:45:dc:c5:8f:d3:b8:d4:7b:88:21:
                    8d:97:ed:59:ae:96:ab:5d:7f:97:43:4e:fd:d1:25:
                    af:45:21:67:ff:a5:8a:d3:3a:1d:c2:7c:e7:0a:c7:
                    59:cb:14:ed:ff:f0:88:00:0c:01:b9:79:49:71:56:
                    16:68:b4:ae:f4:8b:3c:3b:65:76:a2:80:1b:ce:e4:
                    b6:e0:0a:0d:ad:96:2d:68:8d:b8:33:04:26:a6:69:
                    10:6c:fe:dd:b3:c2:7d:27:5b:8e:bf:90:35:4b:cc:
                    a0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:35:84:6D:35:DD:0A:0A:40:F8:AD:FA:03:56:40:52:BE:6E:0B:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/0d8e67f0-b29b-3bc9-9671-8f3a17955443.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/6c7a9179-b71c-4608-b6ad-37c021ece676.crl

            X509v3 Authority Key Identifier:
                keyid:A4:AA:05:6E:EC:2E:BF:7A:43:54:F8:C6:CF:73:36:6C:C3:8D:26:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.135.0/24
                IPv6:
                  2602:fbd9:ff0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:cf:98:72:6c:79:e8:c7:e8:9f:a6:b5:08:e2:ad:8d:85:4d:
         b8:c1:7c:d1:c2:32:c2:36:d9:a9:d5:96:ba:8b:6b:bc:0c:14:
         2b:c7:11:6d:1e:5d:22:22:2f:fa:c0:86:bc:77:bf:ae:60:51:
         8d:cf:fa:29:dd:6e:81:a8:3f:5c:f9:4f:f6:bd:ab:06:34:8d:
         86:54:9f:ef:a6:e7:af:0b:b4:8f:9d:5a:dd:93:54:ff:8f:6f:
         ae:a2:a8:c3:a2:a3:3b:b3:bd:fe:f0:dd:10:a6:c8:9f:90:dc:
         fb:22:92:d1:22:a4:6f:2c:1f:62:fd:01:ab:b6:89:5f:d9:a3:
         73:a4:20:a9:9d:d0:1b:09:fc:59:d4:2b:e6:31:f1:ad:f5:e3:
         b4:e6:b1:a7:c7:61:11:c7:3d:d2:2b:60:66:d9:c5:71:64:7b:
         9b:d7:79:ff:97:bb:a3:a9:57:99:5e:b5:d8:8e:d8:b4:5e:fc:
         78:e0:2a:d9:2e:40:9b:4b:33:dd:cb:d8:c5:fb:60:84:f7:ec:
         46:67:44:e4:d3:78:76:0f:be:51:99:81:17:8d:6b:fa:6f:40:
         43:a1:d5:f1:f0:9b:01:87:cb:fd:0f:cb:63:b1:dd:bb:ed:e8:
         d6:b3:6e:5f:d5:41:64:29:09:ca:50:ab:a0:74:8d:8c:7a:d8:
         c9:29:c3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:36:22 2025 by rpki-client