Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c95032f5-b07e-44ee-b4e6-573f8fb3e50a/fc84b37c-033c-35dd-9cc3-68859b5f0a02.roa
File:                     fc84b37c-033c-35dd-9cc3-68859b5f0a02.roa (raw, json)
Hash identifier:          SIihEXlGbIX7HKKLv/fUW/nM4bX9BxDa3gKDnO2NAz0=
Subject key identifier:   EB:D7:DD:5E:66:04:FA:6D:B0:95:68:2A:67:B7:EC:0E:9E:9E:47:5A
Certificate issuer:       /CN=c95032f5-b07e-44ee-b4e6-573f8fb3e50a
Certificate serial:       010D0C9F4328584A03A54E193EC1856D36372480
Authority key identifier: A0:6B:64:59:9B:63:CF:12:58:E7:E0:E3:56:9A:A6:85:12:91:AD:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c95032f5-b07e-44ee-b4e6-573f8fb3e50a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c95032f5-b07e-44ee-b4e6-573f8fb3e50a/fc84b37c-033c-35dd-9cc3-68859b5f0a02.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     62642
IP address blocks:        206.220.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c95032f5-b07e-44ee-b4e6-573f8fb3e50a/c95032f5-b07e-44ee-b4e6-573f8fb3e50a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c95032f5-b07e-44ee-b4e6-573f8fb3e50a/c95032f5-b07e-44ee-b4e6-573f8fb3e50a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c95032f5-b07e-44ee-b4e6-573f8fb3e50a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:4e:19:3e:c1:85:6d:36:37:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c95032f5-b07e-44ee-b4e6-573f8fb3e50a
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=0716d6b0-b5cc-4049-9737-7a9983210452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9f:aa:36:0c:dc:bc:37:79:cd:03:ce:0c:f1:
                    7b:41:be:14:a6:cd:c8:2f:37:a9:ed:39:3f:60:66:
                    a3:dc:63:75:f1:a0:7d:0f:79:11:1e:23:b2:db:04:
                    72:a4:74:f8:d4:5a:d3:32:02:4d:85:81:1d:9e:47:
                    71:a1:12:5c:bf:1b:d1:28:e1:5b:09:b2:7d:df:6c:
                    35:4f:2c:6a:f6:02:e9:b5:22:3a:ea:e3:bd:70:85:
                    a7:c9:d7:17:8c:13:d3:fc:71:eb:81:75:df:5c:5e:
                    5f:d9:d2:6d:6b:64:47:66:ce:01:fe:53:58:c2:2f:
                    62:95:57:37:b6:9f:13:2e:08:cc:e1:9e:f8:75:7e:
                    f0:97:f4:e7:99:4c:7a:15:d5:6b:1c:4b:65:f8:2e:
                    bb:bb:4e:3a:d8:6c:5d:74:e1:a4:4a:ba:0c:f9:4d:
                    86:3e:45:f2:00:b3:90:84:23:44:cc:0f:cc:fe:06:
                    fd:7a:83:66:e7:19:42:6b:b4:21:e2:70:d6:22:b3:
                    10:4e:d0:82:cc:02:18:f3:03:ba:1a:2e:4c:bd:25:
                    2e:a5:ad:be:4d:9e:33:84:3e:4e:89:b1:60:11:82:
                    09:b1:f3:58:75:bc:75:fc:59:27:22:78:1f:7f:2e:
                    98:6d:57:0a:39:6d:3d:a8:48:8d:ca:7e:ba:17:cc:
                    08:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D7:DD:5E:66:04:FA:6D:B0:95:68:2A:67:B7:EC:0E:9E:9E:47:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c95032f5-b07e-44ee-b4e6-573f8fb3e50a/fc84b37c-033c-35dd-9cc3-68859b5f0a02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c95032f5-b07e-44ee-b4e6-573f8fb3e50a/c95032f5-b07e-44ee-b4e6-573f8fb3e50a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:6B:64:59:9B:63:CF:12:58:E7:E0:E3:56:9A:A6:85:12:91:AD:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c95032f5-b07e-44ee-b4e6-573f8fb3e50a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.220.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:53:30:c8:0f:72:08:5e:e3:18:84:1d:24:31:f7:d2:32:41:
         5c:e2:cc:0f:b8:d6:22:75:b1:98:96:55:70:e2:2b:b6:fe:92:
         f6:e6:4f:7f:95:14:2a:c6:d3:d5:cf:3f:b2:3a:db:3a:ea:6b:
         f7:98:c7:0e:e1:89:26:4f:2c:e0:a9:35:6a:20:cd:ca:e0:d1:
         98:9e:d1:2a:c9:3b:91:68:bc:8e:52:41:59:78:b7:aa:ca:a8:
         b6:b6:47:47:a7:df:e2:75:82:fb:de:c5:ab:f9:f9:0d:36:c1:
         5e:78:07:2a:be:de:42:d3:99:97:d8:69:1a:55:8c:c6:68:9f:
         71:b2:0e:61:96:9a:f0:59:d6:7e:77:5a:16:c8:d8:63:b7:29:
         c1:5a:b9:bd:4a:1e:c5:f9:85:c0:7d:f4:a2:3b:53:14:01:bd:
         14:4b:5f:61:52:4b:09:2d:91:69:a3:e5:68:ec:a2:6d:37:31:
         b2:a7:11:4a:15:82:f8:d0:60:17:be:f3:10:0a:6e:20:94:4c:
         24:23:ae:8b:4f:f5:27:5f:fc:01:97:9b:7c:d1:00:3c:b8:90:
         75:c4:76:57:52:12:b6:6d:29:fe:b4:32:57:bd:7b:a6:92:20:
         94:3c:34:fc:5f:bb:06:3a:37:f4:50:ca:42:6a:ca:c1:5e:b0:
         44:36:88:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:47:21 2025 by rpki-client