Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/c6eba4d0-e78b-3380-8a7e-c6f25aee6ccf.roa
File:                     c6eba4d0-e78b-3380-8a7e-c6f25aee6ccf.roa (raw, json)
Hash identifier:          QOtiKuqdalezUSVjTsGoi027UsWf8shJ1cg00stEj7Q=
Subject key identifier:   E8:41:96:8E:F5:E7:FA:C3:E5:B2:08:01:2A:6D:3A:A3:45:8B:92:EF
Certificate issuer:       /CN=4a06d1f9-0d04-482f-a665-8c270260e2c1
Certificate serial:       010D0C9F4328584A03A54D65CE28A59B7235C800
Authority key identifier: 7B:44:2C:34:6A:A0:F4:F0:11:B5:27:93:C3:37:45:6B:6A:A6:43:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/c6eba4d0-e78b-3380-8a7e-c6f25aee6ccf.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     399103
IP address blocks:        206.168.154.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/4a06d1f9-0d04-482f-a665-8c270260e2c1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/4a06d1f9-0d04-482f-a665-8c270260e2c1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:4d:65:ce:28:a5:9b:72:35:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a06d1f9-0d04-482f-a665-8c270260e2c1
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=9cf6dcc7-7290-41d5-918f-7441d311f532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7c:71:c0:77:a7:c5:7f:4e:2e:97:32:b7:8a:
                    03:5e:c7:b7:b7:50:5d:c8:36:1d:c5:ce:41:11:55:
                    a7:df:5a:9a:b3:02:5a:8f:68:e1:b0:4f:c3:a6:fa:
                    b9:a0:cc:f7:03:e4:a3:cc:85:e6:d0:84:8a:5b:eb:
                    13:bd:d6:1f:34:86:82:c9:1e:d3:90:f7:67:b9:ac:
                    ef:75:a1:3d:e9:12:f3:84:97:78:28:c5:e0:f4:e9:
                    57:f2:01:dd:7c:f3:ed:e1:d7:df:8c:fe:ce:5d:d4:
                    da:fc:5a:5c:49:a6:d1:3e:f0:81:d4:29:9e:14:29:
                    54:d9:f7:db:c4:0f:37:96:e1:52:9e:c3:84:8e:42:
                    a9:7d:5a:90:62:48:38:1a:34:84:5c:1a:a9:fb:c9:
                    9b:bf:f9:ac:d5:33:98:57:7a:8d:1e:3c:38:ab:e9:
                    36:01:64:cf:16:7a:ab:30:eb:2f:32:3d:5d:e0:05:
                    c1:9e:39:9a:fb:3f:e6:40:5a:5d:63:73:1d:e1:e4:
                    3b:49:e9:7a:dd:4c:4b:22:64:f9:fb:49:1c:4c:df:
                    1a:89:73:b9:6e:d5:2b:a2:27:c9:1b:16:4e:4d:0b:
                    ee:d4:b0:c5:0f:16:c1:0f:e9:f8:43:ef:17:1d:59:
                    29:da:a3:11:7c:86:0d:1b:3e:3d:62:2b:b7:47:11:
                    e1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:41:96:8E:F5:E7:FA:C3:E5:B2:08:01:2A:6D:3A:A3:45:8B:92:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/c6eba4d0-e78b-3380-8a7e-c6f25aee6ccf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/4a06d1f9-0d04-482f-a665-8c270260e2c1.crl

            X509v3 Authority Key Identifier:
                keyid:7B:44:2C:34:6A:A0:F4:F0:11:B5:27:93:C3:37:45:6B:6A:A6:43:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:6a:89:a7:1f:ae:8f:ac:7b:bc:41:c9:8f:4a:a9:ce:7b:78:
         cc:0d:59:1c:ac:71:00:7f:cb:ae:a1:f6:91:a2:fb:07:08:bd:
         37:cc:4b:31:0d:c6:49:5e:f7:e4:77:c8:af:a4:fc:90:90:e8:
         8a:7d:20:e5:1d:21:28:17:75:ab:31:8e:99:b1:d4:bf:70:72:
         37:80:b7:26:2c:ea:9e:5f:5c:fc:a0:95:79:ad:93:d7:c5:d8:
         e1:19:7f:be:89:9f:14:fc:31:30:73:df:d6:02:67:c0:cd:9c:
         fa:92:20:28:06:a8:73:05:53:01:08:35:bb:8d:45:3d:d4:16:
         f9:1d:75:35:0d:fe:b1:0d:f5:77:90:b8:5b:85:74:80:84:15:
         1b:2d:3a:3d:a2:87:dd:9a:64:af:f6:23:cf:19:6c:f4:90:46:
         b6:27:c7:82:92:fd:20:02:23:87:f2:aa:9b:be:d8:68:b5:66:
         21:61:83:aa:94:fa:41:13:fc:0a:e7:51:d9:55:ae:54:76:85:
         10:98:53:d1:47:76:f3:77:98:88:1c:57:a1:2b:7b:4b:0d:51:
         48:c7:b8:2f:23:eb:22:2a:77:1c:10:18:d9:bc:8b:b9:3e:3d:
         37:75:77:e8:be:65:d5:0b:2b:30:b4:13:f7:57:d4:1d:c7:d9:
         31:20:8e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 06:06:38 2025 by rpki-client