Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/69cdef79-d280-3419-8f19-f2ec48165ccc.roa
File:                     69cdef79-d280-3419-8f19-f2ec48165ccc.roa (raw, json)
Hash identifier:          A84b3gM/tf9wwCeBDmA4JFWvktMcfvl9SJmJTyxxJCA=
Subject key identifier:   1F:0D:3B:A1:8A:98:81:D5:63:C1:85:FB:EF:E1:A1:CA:3D:DF:84:0C
Certificate issuer:       /CN=8ac31463-974b-4676-9328-200202ae4d6e
Certificate serial:       010D0C9F43285849F71525B2D10C9FE13EA8B900
Authority key identifier: 66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/69cdef79-d280-3419-8f19-f2ec48165ccc.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     33211
IP address blocks:        206.41.112.0/20 maxlen: 20
                          206.41.118.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:25:b2:d1:0c:9f:e1:3e:a8:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ac31463-974b-4676-9328-200202ae4d6e
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=dd569d51-f312-4992-b89a-3f91aa791805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:72:55:e7:2e:b9:96:c0:b3:bc:a7:f7:49:eb:
                    db:3c:5e:15:9c:d4:22:3a:88:3d:86:18:93:92:6a:
                    6e:52:15:7e:ee:ec:2f:10:de:49:62:1b:31:b2:4d:
                    4a:b9:5c:04:d4:e2:3c:cd:ec:b9:bb:46:41:ff:14:
                    98:62:62:6d:41:9f:39:0a:de:68:5c:63:6b:72:2d:
                    e6:9e:02:a2:e1:d3:a5:79:d7:04:f5:04:73:c0:b6:
                    46:10:26:73:2c:d5:61:79:0f:b4:bc:a7:73:8e:3d:
                    22:17:6d:8e:76:83:7a:37:0a:cf:ed:c9:00:2b:2d:
                    07:0b:79:c2:40:e4:4b:51:f5:fd:d9:91:62:c8:cf:
                    cb:ee:a4:fd:c0:41:81:3b:f8:c3:c7:cf:c5:a3:4b:
                    77:08:34:9d:8f:a0:62:2c:2d:83:0e:94:2b:5a:da:
                    21:97:53:3b:6c:a8:a6:fa:9e:d3:7e:ab:49:63:9e:
                    81:53:fa:42:a5:17:8e:9a:c3:bf:8a:4d:d5:c1:1f:
                    17:34:50:9e:e5:e5:81:1e:61:75:22:a7:02:d8:de:
                    af:de:6f:9c:5b:fb:d0:a8:55:ca:6c:5d:cf:53:ee:
                    f1:0a:28:8f:c7:9f:b5:d1:28:c9:3a:94:4d:0d:7d:
                    c0:b3:d6:df:56:d1:41:24:67:5c:d8:4e:e2:16:7e:
                    91:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:0D:3B:A1:8A:98:81:D5:63:C1:85:FB:EF:E1:A1:CA:3D:DF:84:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/69cdef79-d280-3419-8f19-f2ec48165ccc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl

            X509v3 Authority Key Identifier:
                keyid:66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.41.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:51:a1:72:45:eb:ee:93:94:51:62:cb:fc:28:d7:33:d4:01:
         06:41:fa:87:46:22:2d:22:e9:46:5d:a0:82:0b:28:c0:c5:20:
         0a:00:41:de:78:21:f2:61:99:05:3e:3a:5e:8b:ed:ca:32:a6:
         d6:3a:bc:d0:ce:70:fc:ef:c9:19:53:cb:be:84:eb:ec:8b:ff:
         6f:9d:1e:bc:6e:f6:a6:7d:47:a0:aa:0e:28:a6:20:42:26:d7:
         cf:c3:09:d8:b4:2f:0b:bf:27:5f:3b:4f:19:ba:08:72:3c:8d:
         3e:1c:42:25:b3:97:f2:d9:41:ff:1f:41:95:11:49:51:07:2f:
         a9:43:56:67:94:86:e2:fc:50:77:1d:c8:76:fc:27:0f:61:79:
         83:55:76:db:14:f8:14:80:b3:a5:f1:61:07:6a:8c:ff:d4:56:
         22:24:3e:4e:5c:62:66:6b:96:81:7d:d5:b8:02:91:d1:76:0f:
         07:ef:5b:f2:3b:f4:79:d9:01:e1:2c:04:a8:ff:57:e7:53:f7:
         32:f4:2e:67:e3:da:72:80:3a:e5:0f:e1:a2:50:5b:e3:93:9b:
         ee:ff:36:30:c3:25:22:c2:cf:43:00:7f:05:a6:f3:71:d7:b0:
         15:23:fb:ca:89:b9:c7:23:e0:7d:75:09:45:82:28:f7:26:f2:
         8c:ac:76:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 00:53:07 2025 by rpki-client