Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71/95607831-8fd4-3725-bb6b-01dee3e9b844.roa
File:                     95607831-8fd4-3725-bb6b-01dee3e9b844.roa (raw, json)
Hash identifier:          r4GhjklMaCOHy/zx+q+9rcm5a06QHYIjJOBibehQ+O0=
Subject key identifier:   08:1D:01:C4:34:12:80:11:EB:6E:E5:37:FE:B7:2A:75:83:70:B9:1E
Certificate issuer:       /CN=bfe5a38f-5ff4-4b97-a459-e25cfc9caa71
Certificate serial:       010D0C9F4328584953C41247D398F553AC5A4ED8
Authority key identifier: BC:36:F0:C3:90:91:7B:B8:CB:F7:FE:00:75:72:5B:AF:FB:59:8B:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71/95607831-8fd4-3725-bb6b-01dee3e9b844.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     27
IP address blocks:        206.196.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:12:47:d3:98:f5:53:ac:5a:4e:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfe5a38f-5ff4-4b97-a459-e25cfc9caa71
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=927ece24-f4b1-4545-b65a-0063e42c9285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b3:09:5a:37:b1:4f:89:11:a0:53:ee:47:49:
                    27:96:57:2c:51:a3:a9:21:81:e5:f0:c0:fd:bd:86:
                    0a:71:7f:33:96:0b:9b:aa:c6:15:15:07:82:d5:77:
                    ee:2f:ab:7f:7e:a6:f9:a9:c3:50:0c:e8:08:64:55:
                    1b:7f:f8:90:ec:1a:b2:14:ed:ec:46:0e:0d:11:c0:
                    91:81:01:5d:cd:0b:58:ea:57:0e:e0:87:59:e2:8b:
                    5b:4e:4f:17:d7:8f:0b:30:31:60:7d:a9:dd:81:50:
                    02:92:3d:7e:f0:37:25:d1:c2:85:c6:59:1d:02:dd:
                    f3:e3:f4:6b:3a:7e:40:13:4e:dd:6e:59:57:08:23:
                    1b:b6:11:55:3b:7e:85:ec:69:d6:cc:f0:0b:58:7c:
                    df:d4:03:3b:5a:95:36:0c:aa:98:42:a5:7b:e0:34:
                    cc:8b:c7:f2:cc:7f:60:e2:5e:bb:ae:aa:6c:70:d2:
                    2d:f4:ef:2b:1c:12:43:3e:13:8c:3d:bc:29:90:86:
                    62:bb:7e:0f:51:cd:a8:ba:d0:c5:7b:bc:ae:c1:4f:
                    97:f0:38:4d:19:8d:6f:71:28:71:1a:1f:47:13:df:
                    6b:01:51:a9:6b:a6:22:aa:8d:ce:d2:c7:60:3f:4b:
                    13:66:30:36:8c:eb:73:d0:bb:79:a3:58:86:5b:28:
                    ab:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:1D:01:C4:34:12:80:11:EB:6E:E5:37:FE:B7:2A:75:83:70:B9:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71/95607831-8fd4-3725-bb6b-01dee3e9b844.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.crl

            X509v3 Authority Key Identifier:
                keyid:BC:36:F0:C3:90:91:7B:B8:CB:F7:FE:00:75:72:5B:AF:FB:59:8B:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.196.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:87:e4:5f:24:0c:dc:1d:70:0e:b8:4f:63:1b:7e:42:29:cd:
         9b:40:68:14:79:3b:44:01:ea:bb:ba:b2:72:30:4c:bc:d2:c8:
         2c:05:6e:cf:3e:4b:76:15:1b:c7:ff:ea:e5:a4:42:e5:e4:67:
         ca:b3:ef:70:5d:ef:86:fe:9d:b6:2d:96:47:48:20:3c:f5:8c:
         42:80:56:c5:fd:0f:90:49:6d:bc:c9:ac:36:92:b9:e0:95:3a:
         19:e3:0d:ea:64:9f:c9:f8:46:1a:21:46:40:e2:c7:b7:99:f0:
         03:d4:99:da:e2:4d:90:a0:46:c9:32:09:0c:4c:56:fc:13:fd:
         e8:6f:d4:c8:e3:c7:06:43:03:a6:8c:0b:d6:38:e3:cc:15:c3:
         6c:57:ef:bf:95:ef:cd:49:d4:80:30:69:3d:d2:62:26:a5:73:
         93:47:96:37:47:70:d0:14:3d:d4:9d:7a:bb:96:0f:76:46:f0:
         b0:8b:d5:2a:f4:08:ae:9e:1c:8a:88:bd:82:9b:a4:fc:29:23:
         10:72:fd:b1:ac:c7:6e:56:27:67:06:9b:6b:32:62:0d:47:61:
         b4:67:bc:76:4e:a6:2e:25:47:e3:20:61:ee:82:ff:cc:b2:e2:
         d5:4f:24:14:92:47:b5:07:11:e7:14:30:87:53:36:3b:1a:90:
         c1:7f:2c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:52:50 2025 by rpki-client