Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/a921e491-09cc-3788-809c-fb266e3431cc.roa
File:                     a921e491-09cc-3788-809c-fb266e3431cc.roa (raw, json)
Hash identifier:          gmz3D1pBxpN/lKpboe59YPyxJM49Df9W5UZmJOFc6G0=
Subject key identifier:   9C:C8:93:D2:BF:79:C7:8F:39:55:16:67:1A:7A:E5:1F:FF:C0:C1:DD
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584A0C05670923229A3440D97E20
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/a921e491-09cc-3788-809c-fb266e3431cc.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     26744
IP address blocks:        206.180.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:67:09:23:22:9a:34:40:d9:7e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=70c51f1f-d3d8-4e46-bd9b-0b71e646b702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9d:b1:bf:20:db:b1:3b:cf:c7:09:6e:ef:57:
                    f5:e6:e9:76:89:91:a1:5c:95:43:63:c5:16:55:a6:
                    e2:42:b0:8b:b5:6d:bc:be:9b:3e:a1:1b:ce:68:50:
                    ca:2c:eb:ee:af:bb:d4:ee:83:7b:c4:78:91:91:2d:
                    16:47:12:f5:1c:64:bb:ab:1c:d6:35:18:7a:7d:e5:
                    71:45:07:19:09:ae:92:1f:01:fd:fe:d1:b9:5f:2f:
                    e9:8f:0a:01:55:ba:76:5b:49:41:fa:44:fe:60:29:
                    12:b6:97:27:ff:56:a6:db:a4:c9:bf:30:54:5a:dd:
                    d4:2e:1b:75:43:d7:0f:51:f6:8b:3a:99:41:68:6b:
                    0c:06:dc:55:35:93:49:bd:17:90:0e:8c:f2:1c:af:
                    f0:fd:90:a3:8f:a6:63:57:c8:75:40:58:3d:4c:50:
                    04:4d:35:97:8a:33:49:9e:b3:8e:0b:ee:ec:ef:94:
                    3f:d0:2e:9f:a0:68:cb:e7:51:62:89:2c:03:f2:36:
                    9e:43:bc:a5:ba:42:a2:7a:21:03:8d:eb:17:6d:be:
                    f9:9c:b8:50:0e:1f:f8:04:9a:ee:43:cb:88:80:f0:
                    0c:a2:f3:bc:93:c9:99:cf:da:d5:99:01:64:d1:ef:
                    e4:e6:c0:f9:87:9e:39:bb:df:3e:d0:fe:e4:83:3c:
                    90:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C8:93:D2:BF:79:C7:8F:39:55:16:67:1A:7A:E5:1F:FF:C0:C1:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/a921e491-09cc-3788-809c-fb266e3431cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:61:58:a0:7e:5d:b3:9a:dd:e9:48:0c:07:7f:71:22:10:08:
         90:4f:28:e9:9b:6d:bc:96:7b:a5:1e:c1:1a:58:b0:4d:74:aa:
         3b:13:9a:c9:4b:28:cc:6e:a8:47:c0:73:2d:11:94:1a:9c:19:
         f2:ba:76:96:87:93:7c:3d:91:ca:c4:72:9c:38:c4:c4:52:a1:
         9c:c6:eb:0d:f4:ce:1d:db:10:f5:df:4e:bd:02:29:a3:6c:4d:
         a8:63:50:1f:dc:5e:c4:99:a9:7b:f6:40:c8:dc:d9:a1:a0:db:
         b1:55:b2:2f:1e:2b:bb:39:1d:9d:e1:80:db:c0:6f:ac:54:b6:
         2c:03:1b:fb:59:7a:85:c2:4e:69:2d:70:56:2d:63:e6:5f:8c:
         8d:12:a9:38:04:41:2d:54:76:1d:1e:ed:6f:58:7e:32:04:6b:
         39:4d:13:04:6a:2d:26:88:dc:91:1e:9b:a1:88:80:ad:c2:de:
         5f:eb:f1:8d:54:1b:c0:dc:56:0f:cb:82:4a:4a:c5:32:5c:cf:
         2f:59:33:12:e4:61:be:22:47:b4:98:dd:5d:77:cd:9d:c1:78:
         e6:98:4c:57:60:b1:99:89:1e:23:66:e7:59:d4:13:1e:90:cc:
         0c:18:f7:85:86:b6:d0:49:c2:22:25:20:c4:44:00:c0:34:a2:
         a3:93:45:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:24:06 2025 by rpki-client