Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/b55e8b3c-8a04-3164-9aa1-9ee277dc4c73.roa
File:                     b55e8b3c-8a04-3164-9aa1-9ee277dc4c73.roa (raw, json)
Hash identifier:          yWjt/yjflc1ud5ooBUyTdL4vf7eE3xZXFXZNvXIhgaY=
Subject key identifier:   F7:AE:B9:51:AC:E9:C7:E7:D7:F0:0C:90:81:60:E2:F0:C6:12:BA:A8
Certificate issuer:       /CN=d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27
Certificate serial:       010D0C9F43285849FCAA6F0A200006A079A03700
Authority key identifier: A1:2C:DA:96:0B:63:94:15:8D:17:96:2B:73:6A:DF:40:5C:72:A2:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/b55e8b3c-8a04-3164-9aa1-9ee277dc4c73.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     14618
IP address blocks:        206.204.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:6f:0a:20:00:06:a0:79:a0:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=911a83b1-9f9b-4fdb-8125-20fe3a644bf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b7:d0:af:1d:ff:1a:a4:9f:06:b2:f5:42:ee:
                    c3:fb:c7:fa:20:03:e6:b4:90:4f:96:da:89:eb:99:
                    32:1a:66:41:19:04:46:21:9e:86:17:50:86:42:77:
                    75:ce:86:cd:e6:82:72:b3:7b:75:52:ee:3c:c1:cc:
                    5b:a1:eb:5f:7c:62:4e:86:2a:fd:f6:e9:86:42:d4:
                    89:08:80:cc:70:ec:a9:11:6b:55:29:0f:84:0d:61:
                    c5:3d:62:58:cc:d6:8d:4c:ef:9b:b2:ab:e1:08:f3:
                    cf:8f:eb:a3:7c:05:11:75:3b:16:34:1a:8c:e0:3a:
                    cf:1a:09:6a:e4:09:79:09:af:c3:3f:04:33:e8:d1:
                    f7:e7:8f:38:29:f2:e7:08:fe:72:ec:29:0c:04:6a:
                    39:3d:72:f0:2b:5a:a4:6b:99:24:32:3b:cb:7b:b0:
                    ba:f8:e8:0e:4a:ac:00:b6:a4:18:3b:23:ae:a5:5d:
                    2a:ba:c7:03:e7:3c:f9:57:70:d7:48:ce:d5:72:c6:
                    1f:15:cf:5b:08:03:7b:42:05:ba:f8:98:3d:0f:ef:
                    41:2b:11:47:16:69:88:39:17:dd:e1:d7:2f:07:c0:
                    97:ed:3e:e9:dd:c1:b2:c0:c4:52:43:f7:8c:da:46:
                    5d:eb:28:50:59:bd:86:cc:64:d8:f7:ff:18:95:dc:
                    c9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:AE:B9:51:AC:E9:C7:E7:D7:F0:0C:90:81:60:E2:F0:C6:12:BA:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/b55e8b3c-8a04-3164-9aa1-9ee277dc4c73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.crl

            X509v3 Authority Key Identifier:
                keyid:A1:2C:DA:96:0B:63:94:15:8D:17:96:2B:73:6A:DF:40:5C:72:A2:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.204.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:07:ce:01:6b:c6:84:c2:13:2e:e4:28:58:18:b4:fa:f2:ad:
         05:ca:b7:e8:b2:5b:f6:81:c3:90:4e:12:c3:d4:75:71:c4:4d:
         62:22:51:bb:04:87:9e:b3:1d:09:25:01:9a:4a:96:de:67:7f:
         13:72:60:1d:92:ae:ac:88:f3:28:a1:26:52:7d:f4:ee:ee:bb:
         69:98:cf:5b:01:2e:b1:b8:d2:96:00:a4:71:73:83:ae:7c:fe:
         9f:bd:67:75:0b:7a:fd:32:ca:a2:ba:2c:00:15:17:eb:9a:5e:
         f5:f8:6f:da:61:7e:54:df:c5:e2:e8:ce:ca:e6:f6:8b:84:88:
         45:a5:d9:2b:7d:22:30:a2:e7:78:05:5f:37:e2:8e:8e:c9:c5:
         cc:13:12:09:37:2c:9d:db:7f:47:e6:f1:87:53:4f:6e:25:d1:
         21:4a:5e:eb:5a:f7:56:3d:10:69:a8:84:b1:2e:e0:99:82:24:
         c0:f2:42:72:d7:51:f3:e4:b9:38:2b:a2:0d:e7:59:db:bf:a5:
         7e:ba:ce:81:3b:ec:22:82:77:c5:b0:a0:c5:18:a8:0f:dd:4e:
         cb:14:d7:2a:0e:51:8a:42:8b:dd:82:03:ff:fb:7f:e7:f5:6e:
         e1:3b:89:cd:6c:9a:8e:8a:ff:8b:00:7d:47:75:fb:2a:79:5e:
         0f:9b:82:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:07:04 2025 by rpki-client