Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/a35b35d7-1b98-343e-bb13-d4cb3acfc202.roa
File:                     a35b35d7-1b98-343e-bb13-d4cb3acfc202.roa (raw, json)
Hash identifier:          WlgmR7YiuK526x+60tOK6scwEbjdkd4VCYsXZ0ke8nM=
Subject key identifier:   86:C5:D1:B4:01:18:82:8B:06:66:00:F3:A4:61:A5:47:C9:F8:6A:1C
Certificate issuer:       /CN=60200506-e0ba-4a7d-b096-a86957fd76ee
Certificate serial:       010D0C9F4328584A30503F9D6BC4B47C7B2F4A80
Authority key identifier: CE:43:ED:FD:A2:97:AD:00:6A:E5:9C:26:E1:DF:AC:97:8C:DF:A5:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/a35b35d7-1b98-343e-bb13-d4cb3acfc202.roa
Signing time:             Sat 14 Jun 2025 13:01:04 +0000
ROA not before:           Sat 14 Jun 2025 13:01:04 +0000
ROA not after:            Fri 12 Sep 2025 13:01:04 +0000
asID:                     32157
IP address blocks:        205.211.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/60200506-e0ba-4a7d-b096-a86957fd76ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/60200506-e0ba-4a7d-b096-a86957fd76ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:30:50:3f:9d:6b:c4:b4:7c:7b:2f:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60200506-e0ba-4a7d-b096-a86957fd76ee
        Validity
            Not Before: Jun 14 13:01:04 2025 GMT
            Not After : Sep 12 13:01:04 2025 GMT
        Subject: CN=8f8dbf31-3f0e-499b-8103-40343f6a71e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:25:d4:91:98:f5:e0:17:98:30:ea:6d:a4:e4:
                    71:01:04:2d:db:1b:84:3d:dd:0a:5a:bb:95:7c:67:
                    a4:ca:e4:c7:fa:7b:74:66:d4:93:e8:54:a8:50:08:
                    49:18:c7:c9:c3:e2:5a:90:07:6e:1e:f4:d3:34:b7:
                    6b:39:eb:99:67:48:39:c1:c6:3d:52:d3:66:92:3e:
                    22:68:fc:db:aa:a1:f2:53:5a:50:02:bb:65:d0:ed:
                    4a:ed:a4:40:ae:06:5a:76:1e:5a:6f:b0:6d:9b:fd:
                    e6:29:10:b5:28:4a:24:5b:6a:38:23:e0:b2:16:40:
                    bf:b3:67:5f:f5:e1:aa:12:b0:78:bb:c1:19:c9:d8:
                    71:94:60:45:2d:b0:41:14:f2:98:36:c5:a6:45:d0:
                    77:6b:75:1a:2b:dc:f0:ed:c6:68:fe:cd:b4:da:df:
                    56:76:e8:d9:64:1d:f5:fe:c2:fd:ca:e8:50:30:6c:
                    f7:9f:63:67:c3:3d:48:84:3f:19:d8:32:08:0d:4e:
                    2c:62:06:81:f4:a1:8a:4f:49:d6:37:e5:48:e8:5d:
                    11:2c:4d:9b:d4:fb:a5:ee:05:92:03:4f:56:da:c8:
                    8f:f8:40:ba:0b:ce:16:96:ea:f4:06:46:ca:d7:53:
                    9d:f8:60:96:a7:f4:10:52:f5:02:01:c9:4c:bd:e7:
                    9f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:C5:D1:B4:01:18:82:8B:06:66:00:F3:A4:61:A5:47:C9:F8:6A:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/a35b35d7-1b98-343e-bb13-d4cb3acfc202.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/60200506-e0ba-4a7d-b096-a86957fd76ee.crl

            X509v3 Authority Key Identifier:
                keyid:CE:43:ED:FD:A2:97:AD:00:6A:E5:9C:26:E1:DF:AC:97:8C:DF:A5:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.211.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:86:f2:e2:56:42:ce:c4:27:ee:1f:5a:95:59:bb:50:d4:ba:
         0d:96:8a:c7:85:e8:c6:3a:66:28:1e:6b:ca:e0:2d:d3:12:3c:
         94:e4:6e:02:e1:37:13:e8:1d:55:78:37:e8:0a:79:57:99:7a:
         63:4e:78:48:b6:d9:d0:09:1d:06:34:30:55:54:08:0f:ff:87:
         94:90:6f:45:57:e7:14:f9:ef:09:0a:9d:4d:7d:c8:7c:38:7d:
         1b:e6:bb:bf:bd:7d:78:70:22:1c:d4:96:71:e1:25:33:fe:f9:
         96:c5:95:7c:9d:46:fb:82:42:5a:cd:6e:23:87:bf:df:d8:4a:
         79:3c:c4:0e:a6:c8:f6:14:ff:6d:e2:d3:9a:d7:a2:21:76:87:
         a8:aa:de:07:f8:ef:3d:eb:27:a1:f1:33:3f:81:4a:87:0e:db:
         5a:98:56:75:b8:a1:38:e7:25:72:12:e3:cc:fb:cd:eb:77:99:
         1c:ba:e6:1b:f2:74:bc:55:82:93:bc:4b:6c:bd:74:c4:d8:aa:
         83:bd:8b:a4:9a:fe:4f:c8:12:78:99:56:02:1a:6c:be:0c:fa:
         1f:65:27:0e:1a:1b:43:f4:42:a2:cc:65:2c:96:60:27:5b:e8:
         db:7b:33:5d:a5:bf:62:ee:81:b8:e5:29:2d:76:f0:ba:9f:41:
         2b:22:b6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:15:12 2025 by rpki-client