Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/a0ac8e4a-2504-37fe-9ed7-9655b37ebe3d.roa
File:                     a0ac8e4a-2504-37fe-9ed7-9655b37ebe3d.roa (raw, json)
Hash identifier:          90QSPBEWLO7C++AygXdY0nBg4ZpYW6NQ0mhrS1kgoQ8=
Subject key identifier:   48:68:E7:97:03:00:22:41:7A:E5:73:D5:EA:A5:AE:CC:D2:51:52:86
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F43285849D594D4B477369CD42F0EA980
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/a0ac8e4a-2504-37fe-9ed7-9655b37ebe3d.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     30133
IP address blocks:        199.6.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:d4:b4:77:36:9c:d4:2f:0e:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=03daa160-737a-4da6-a707-276b494325e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:00:61:15:cb:16:25:a2:8e:d3:e7:d8:08:7f:
                    b4:95:72:c0:98:7b:45:ab:03:3b:4c:87:d3:8a:0b:
                    b9:3a:6a:b2:3f:15:0c:5c:20:e7:d0:e9:da:74:f3:
                    57:74:77:df:6d:19:d9:e7:7e:a4:8f:65:b6:8d:37:
                    ba:ec:bc:07:89:86:37:42:3d:5b:95:d8:81:08:81:
                    17:d2:98:d3:b4:a4:f4:6d:36:4e:7b:a3:70:4b:77:
                    87:87:1f:4a:c5:79:1b:e3:b9:f9:ca:67:7e:12:03:
                    65:ce:e5:01:dc:82:8b:9f:40:94:e4:d5:42:1d:40:
                    d0:3e:ae:c8:64:60:e1:3c:25:c4:4f:d6:21:93:f8:
                    05:21:cd:53:b2:6c:82:58:54:d7:ed:fe:28:e1:86:
                    6e:98:34:ab:2b:ce:fa:13:47:df:03:0d:c8:e4:68:
                    e9:70:77:76:04:ea:31:5f:5d:d8:80:a9:c1:24:c3:
                    db:c9:a7:9a:ed:18:a8:c7:81:1c:ee:2b:0f:2f:17:
                    5b:2d:94:ec:89:4a:3c:ca:6f:00:0a:d6:1d:c8:fb:
                    d5:ee:46:6f:dd:69:f0:ef:43:dd:35:69:1a:38:f6:
                    01:68:98:cf:48:4e:da:79:42:92:36:94:ae:97:b1:
                    42:2a:d8:04:ca:b9:b4:f0:c0:e3:39:7c:78:d6:6b:
                    3d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:68:E7:97:03:00:22:41:7A:E5:73:D5:EA:A5:AE:CC:D2:51:52:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/a0ac8e4a-2504-37fe-9ed7-9655b37ebe3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.6.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:98:d5:ac:a0:dd:74:d0:ca:0a:df:ee:06:67:ef:65:db:a1:
         c3:80:cb:90:26:17:9c:94:2c:0b:b8:01:1c:eb:2f:9c:87:14:
         a9:82:12:91:ac:4d:5a:a2:c6:19:a3:78:a0:70:d9:a7:8b:08:
         9e:5e:3e:a8:ff:25:35:8c:10:78:0e:85:19:22:c9:ab:48:35:
         a9:74:ce:0e:77:28:fe:bf:8c:6b:88:5a:bc:ab:87:1a:40:76:
         2c:33:40:12:44:87:56:ad:13:16:b0:b4:12:c4:8c:b9:7d:1d:
         0d:cd:5a:e2:6f:31:58:2d:7f:aa:19:ee:6f:00:b6:0d:c6:41:
         74:5b:b5:17:9a:b6:9f:6e:31:aa:c3:e3:16:c6:4f:40:57:5c:
         51:a4:f1:1c:e3:d8:45:c1:70:86:c2:ab:9e:c6:6b:d6:14:39:
         5c:c0:87:d0:1a:fc:0e:de:96:56:59:95:60:65:98:9b:77:d9:
         62:67:27:a8:26:ca:9a:67:a7:91:57:73:9d:1c:70:53:54:54:
         39:ac:3a:f0:88:4f:8c:fd:ab:9b:5f:7f:7d:41:89:53:12:f2:
         cd:3e:16:2a:ec:19:64:c1:fe:cb:ed:cb:9b:c3:ed:6b:f4:74:
         eb:d9:78:88:b3:b3:de:ee:2c:e6:0d:5f:47:2c:76:fe:34:a6:
         b2:23:f1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:16:28 2025 by rpki-client