Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/bfcf5131-e716-3bd0-bfeb-0b69f9630fe0.roa
File:                     bfcf5131-e716-3bd0-bfeb-0b69f9630fe0.roa (raw, json)
Hash identifier:          OGO3h0jwDD41ZVKxaE2+CyKyZdX0Lp7OUERiR/DPc10=
Subject key identifier:   97:0A:A7:0F:99:5A:91:21:17:99:5D:9D:8F:F9:28:32:EC:C6:2C:D2
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F43285849D594D2F874018FD1ABFCB288
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/bfcf5131-e716-3bd0-bfeb-0b69f9630fe0.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     16904
IP address blocks:        206.188.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:d2:f8:74:01:8f:d1:ab:fc:b2:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=103642da-5785-4614-ab65-8366b817901b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:25:00:60:31:6a:27:f8:0c:8c:1f:44:be:e6:
                    9e:0d:7e:e0:c5:1b:0b:f5:52:ff:2e:e6:30:64:e6:
                    f8:31:bd:b0:71:33:f6:5d:35:86:fd:0c:3d:e6:0c:
                    f6:b5:ed:64:f7:24:bc:3f:11:1d:e3:a7:6c:fa:bb:
                    4f:cd:d0:d3:52:d9:e8:08:f7:0c:a5:50:35:c1:3a:
                    56:62:25:1f:11:eb:76:dd:a9:a4:e0:47:02:38:6b:
                    f3:7b:c2:c3:27:bb:91:6e:ab:8f:8d:d5:d7:da:ac:
                    42:7d:56:57:82:86:04:35:1b:eb:77:57:ad:b0:0b:
                    05:6d:0c:54:c5:58:9e:71:04:04:ad:df:d6:12:a0:
                    63:14:00:10:1b:e1:1f:0b:8b:88:3b:9e:ae:87:da:
                    41:be:2d:42:41:e5:6d:9f:14:60:c4:7a:0c:50:70:
                    e5:89:27:04:26:27:ac:c2:44:46:b7:62:ff:94:0e:
                    6a:0e:a0:b4:ba:85:d5:86:fd:63:95:3a:47:c8:c1:
                    06:43:71:a0:cc:e2:10:3c:a5:0f:d3:b0:b2:b1:4f:
                    e7:dd:52:1b:de:23:5d:bd:db:6f:74:bd:0f:28:3e:
                    9f:66:53:7e:58:4e:7f:87:19:a7:6d:1a:20:21:18:
                    48:13:10:27:50:1f:a7:c9:7b:d7:73:89:c5:6f:68:
                    07:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:0A:A7:0F:99:5A:91:21:17:99:5D:9D:8F:F9:28:32:EC:C6:2C:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/bfcf5131-e716-3bd0-bfeb-0b69f9630fe0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.188.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:75:32:c9:d9:06:2f:3a:fc:69:7e:f4:36:33:ee:f1:31:a0:
         1e:4d:86:d5:af:d3:39:e7:7a:bc:98:fe:b1:8e:59:78:9a:d4:
         07:a7:eb:6f:4b:9a:01:d8:f9:ba:70:93:cb:dd:ef:fa:50:01:
         26:7a:06:9e:b2:42:71:cc:df:84:b4:91:7a:52:5e:12:e9:0c:
         22:21:5e:d0:56:16:f6:2e:81:f5:15:23:23:0a:c5:63:7a:7b:
         47:4b:df:74:03:39:da:3a:ca:c9:b3:1b:7a:00:4d:95:62:4d:
         24:2e:47:38:06:0d:4f:cb:60:36:01:2b:ab:f7:c3:5c:44:3b:
         1c:d9:4a:dc:eb:61:c4:e3:f7:75:f7:98:60:83:39:f2:9d:87:
         fe:67:7e:8a:1c:f8:65:24:a4:04:6d:30:20:20:68:81:f3:60:
         4a:26:e8:7e:71:f8:58:ff:0d:ce:da:33:43:1a:72:51:42:56:
         56:c9:eb:65:7f:89:c6:6c:77:e5:c8:78:a2:02:33:e6:43:5e:
         ff:11:69:0b:53:79:d1:7b:30:52:4f:45:9a:27:a6:13:bd:c7:
         c3:d0:e5:38:f2:11:e6:dc:13:23:23:30:de:7b:4f:11:df:21:
         b9:91:c2:53:49:ba:fa:dd:cb:1a:93:4b:00:dd:7f:7b:2a:68:
         18:93:77:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:52:19 2025 by rpki-client