Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/499f3ce8-6bd8-3289-9ade-d37bf075f486.roa
File:                     499f3ce8-6bd8-3289-9ade-d37bf075f486.roa (raw, json)
Hash identifier:          IZrvtsm5nsaPBX7NKaMeCpB4JlfPakh8AY733sM/kW4=
Subject key identifier:   79:F5:15:79:83:9F:4E:56:82:51:1F:81:69:BC:46:87:B4:D7:93:D2
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584A0C057605990719BE9936D1C0
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/499f3ce8-6bd8-3289-9ade-d37bf075f486.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     26744
IP address blocks:        206.180.138.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:76:05:99:07:19:be:99:36:d1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=0d19c6f6-737c-443a-8c54-5047497c5494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2a:c0:28:2a:cb:96:c8:e5:e3:80:d7:2c:1b:
                    b3:1f:76:7a:58:e6:c1:63:ab:01:36:f9:0b:69:a3:
                    74:d1:26:8e:32:34:fc:48:67:06:61:7e:d1:b4:39:
                    4a:e8:ed:76:68:21:c4:29:c7:96:04:3c:24:51:90:
                    a8:25:5e:6e:82:8e:48:1e:45:a2:c9:1d:21:3a:9c:
                    12:9c:fa:55:bf:fc:86:ec:fe:be:25:c6:f2:af:14:
                    6f:1a:a6:ba:af:55:98:9d:93:46:83:e7:4e:21:59:
                    f2:fc:97:55:9d:3f:56:53:47:bc:b9:76:4c:27:a2:
                    54:85:62:06:45:2f:ec:23:fe:c5:bd:68:8d:7f:55:
                    99:3e:1f:09:79:b9:bf:93:86:89:b5:b5:98:cc:a0:
                    d0:6f:18:9c:8c:4b:a0:9b:78:c3:8c:c9:fb:7f:b1:
                    a3:71:2b:25:62:62:60:92:b2:0d:70:77:5c:85:47:
                    cb:7a:95:ec:43:27:b8:f8:4f:36:99:9a:20:87:4f:
                    2e:c9:72:ce:66:7d:c5:1c:b7:af:56:15:56:e2:e3:
                    e6:d1:58:ac:0e:e5:84:dd:69:03:0a:b8:fc:1c:58:
                    56:16:36:8a:4c:2d:96:a6:76:0f:cf:f9:ea:cc:d6:
                    58:8f:42:21:e2:50:5e:02:0e:59:dc:2d:df:60:70:
                    72:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:F5:15:79:83:9F:4E:56:82:51:1F:81:69:BC:46:87:B4:D7:93:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/499f3ce8-6bd8-3289-9ade-d37bf075f486.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.138.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:b9:26:46:51:5e:69:3e:86:29:7e:7b:d6:3b:2c:db:17:31:
         44:e5:7e:a5:f3:2b:63:10:97:be:d1:4c:b7:2e:28:38:20:6b:
         1c:fa:7f:44:1d:bf:42:ae:fa:19:c5:e9:f4:b4:a6:35:87:f5:
         23:db:1f:ec:be:00:32:c9:a6:85:0c:17:c0:52:6d:cb:bc:4b:
         09:f5:19:b0:96:e3:6b:3b:2b:d6:7a:9a:43:63:1f:2e:1b:44:
         19:cd:45:d4:3c:f7:87:68:c8:7b:55:55:93:ff:19:b8:d0:29:
         0a:9b:76:a2:bb:ba:96:b8:49:20:e2:1a:32:13:7a:4b:26:ee:
         a4:71:50:61:f5:61:be:5f:3b:dc:c3:5b:49:dd:b4:f5:39:82:
         c7:4a:ea:a6:46:0c:3d:21:0c:c1:b1:c3:1d:b6:2e:7d:21:ba:
         91:aa:85:d0:0d:73:ca:e2:23:df:da:89:9c:73:c2:a9:7d:97:
         1b:4b:c0:fd:0e:10:da:67:f6:0d:54:86:af:2f:67:4b:52:a7:
         27:be:50:15:de:af:a0:15:e5:c1:15:94:54:82:91:61:fd:1a:
         38:f7:fd:26:c1:2d:35:3e:27:06:74:96:ee:55:04:28:51:f8:
         5a:b2:e3:3f:92:63:e4:74:bf:9e:33:7e:93:6c:13:b7:dd:16:
         cb:d6:cc:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:09:42 2025 by rpki-client