Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/f7018b5e-063e-33ba-9e4f-4c1aedd63edf.roa
File:                     f7018b5e-063e-33ba-9e4f-4c1aedd63edf.roa (raw, json)
Hash identifier:          kjdZBpj1Jjy6PpGdR3l3NTT9NZbb2YGslkL2djOZAPQ=
Subject key identifier:   BE:41:7E:9D:F3:C8:61:BC:6F:F7:94:FA:A1:3E:3B:E5:FF:C6:5B:C4
Certificate issuer:       /CN=4d4940f4-61c2-4251-acdb-36be83cdc744
Certificate serial:       010D0C9F4328584A2D3D6CE74D196A9B749A32C0
Authority key identifier: 3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/f7018b5e-063e-33ba-9e4f-4c1aedd63edf.roa
Signing time:             Fri 13 Jun 2025 10:35:54 +0000
ROA not before:           Fri 13 Jun 2025 10:35:54 +0000
ROA not after:            Thu 11 Sep 2025 10:35:54 +0000
asID:                     1403
IP address blocks:        173.206.208.0/20 maxlen: 24
                          173.206.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2d:3d:6c:e7:4d:19:6a:9b:74:9a:32:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d4940f4-61c2-4251-acdb-36be83cdc744
        Validity
            Not Before: Jun 13 10:35:54 2025 GMT
            Not After : Sep 11 10:35:54 2025 GMT
        Subject: CN=bc5a7bc5-907b-4fc5-9240-aa36841b5a19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:30:b9:39:5c:20:8a:6c:81:63:76:d1:3c:11:
                    ea:73:9f:3d:18:32:c6:3e:69:5f:be:06:65:3a:3b:
                    16:dd:0a:93:fb:f6:18:ea:bd:96:e8:fc:14:3c:13:
                    9f:9b:7f:68:d8:51:ae:2f:bd:ae:ed:79:24:c0:ff:
                    8a:d5:03:d3:5d:bd:59:a9:43:73:8f:c7:c7:55:6c:
                    66:e0:54:69:bc:33:8f:4f:b2:a3:3f:87:72:60:99:
                    bb:8e:db:a4:7a:61:62:78:8c:31:d2:43:f4:e2:70:
                    97:6c:4b:af:aa:20:c2:da:39:3c:c9:35:e2:40:eb:
                    b1:51:4e:83:9c:6d:61:77:58:4a:ca:29:e7:34:3f:
                    ed:71:fe:be:06:e8:0a:40:05:aa:70:ad:db:ee:a7:
                    b7:5a:17:c0:02:c7:7a:40:fc:32:7e:22:3c:3d:e3:
                    66:8c:73:e5:f4:37:94:00:e0:b2:d0:67:a4:49:85:
                    17:9c:6a:02:d9:6a:a0:76:5a:ac:20:70:fc:92:98:
                    37:33:26:5d:1d:08:40:1f:67:0c:f9:20:13:95:6f:
                    cf:d2:78:a6:62:a0:6c:1e:70:de:2a:7b:e2:dc:c5:
                    5d:33:5d:ba:55:05:2b:f6:87:d1:aa:a1:30:6d:7a:
                    08:4c:c5:9f:74:ad:30:f4:ee:cc:23:e5:f7:91:b9:
                    01:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:41:7E:9D:F3:C8:61:BC:6F:F7:94:FA:A1:3E:3B:E5:FF:C6:5B:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/f7018b5e-063e-33ba-9e4f-4c1aedd63edf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.crl

            X509v3 Authority Key Identifier:
                keyid:3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.206.208.0-173.206.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:4a:d5:d5:ab:12:10:67:8d:19:10:1a:bf:58:f7:79:fd:7e:
         4d:44:e4:6f:00:8a:2c:fc:66:34:c7:e3:cd:57:cd:1d:e0:a7:
         9c:a7:95:8a:4c:e1:1e:b1:16:13:cd:a9:de:0b:d9:5f:87:db:
         78:e2:e0:a9:46:f9:da:ac:08:c1:c5:f5:ad:fb:4c:61:9f:94:
         1c:f4:be:21:a8:09:9c:e7:e9:2b:01:e1:dc:ec:d3:75:c8:b7:
         41:85:14:2d:5c:4f:20:fd:4c:4b:c7:20:f8:85:12:d5:be:8b:
         36:a9:66:48:6c:ac:44:51:05:73:37:a0:51:38:bc:f9:95:c3:
         c3:bb:5b:a3:40:3b:ed:10:b0:94:ea:c4:fd:cd:42:32:dd:26:
         6f:fe:1c:6b:c4:75:87:4c:ed:31:85:6b:3b:1f:19:9d:a8:60:
         a8:8d:e9:df:ef:81:05:36:68:a7:70:c4:88:1f:28:65:71:71:
         d0:95:c6:1d:4c:ce:58:f7:5f:13:64:76:1a:e9:79:f5:2a:95:
         2e:7a:68:0b:3d:e6:f7:31:4d:d4:13:24:d0:a6:f2:60:ca:ab:
         9e:29:d9:c7:1b:c0:1c:4d:fe:5a:db:b3:66:30:b2:9d:0a:8a:
         85:5a:2c:6f:0a:7d:21:c6:ee:c1:4f:2e:1e:78:b2:78:f7:8e:
         d1:cf:7b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:41:07 2025 by rpki-client