Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/d5dbc3b9-a47b-3dc0-9d94-e66d19626956.roa
File:                     d5dbc3b9-a47b-3dc0-9d94-e66d19626956.roa (raw, json)
Hash identifier:          py2hTbR423Cvp6t0Q3/SsoYf/dfUymPxxyNoM+ny5l4=
Subject key identifier:   9C:E6:75:DC:17:56:FD:BC:ED:E1:A1:B0:1A:DC:71:B5:7D:BE:0E:28
Certificate issuer:       /CN=c9aa1567-89a9-4ce4-8bd7-e624999091e3
Certificate serial:       010D0C9F4328584A2C2017CDD4AA89F48951A280
Authority key identifier: F6:E2:9D:DC:F3:98:69:7C:13:B9:E8:52:1D:40:07:88:1D:21:4D:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/d5dbc3b9-a47b-3dc0-9d94-e66d19626956.roa
Signing time:             Fri 13 Jun 2025 01:00:51 +0000
ROA not before:           Fri 13 Jun 2025 01:00:51 +0000
ROA not after:            Thu 11 Sep 2025 01:00:51 +0000
asID:                     16509
IP address blocks:        208.71.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/c9aa1567-89a9-4ce4-8bd7-e624999091e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/c9aa1567-89a9-4ce4-8bd7-e624999091e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2c:20:17:cd:d4:aa:89:f4:89:51:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9aa1567-89a9-4ce4-8bd7-e624999091e3
        Validity
            Not Before: Jun 13 01:00:51 2025 GMT
            Not After : Sep 11 01:00:51 2025 GMT
        Subject: CN=6dfaea55-f978-4ec5-9bf8-169730a48f8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e1:cf:d2:7f:3f:20:8e:f8:4e:d9:fd:fc:61:
                    65:2a:43:f3:21:9a:c4:73:ba:ff:2f:47:4f:83:52:
                    64:b1:25:0e:ab:75:68:90:15:23:16:b8:75:ac:3f:
                    f8:f7:88:b4:9a:28:7c:63:d5:d8:8d:3b:a7:a3:fb:
                    74:f7:67:b2:52:04:1f:ad:8a:64:f2:5c:ff:06:a8:
                    78:0d:1e:8f:f1:69:27:18:7c:21:48:47:2a:2d:1f:
                    1e:1c:41:48:09:9a:8f:4b:e3:46:cb:e3:2f:90:cb:
                    09:a0:87:cf:3f:fd:f8:af:4c:36:e5:94:88:12:4e:
                    b5:e0:e3:46:a6:a0:3a:ee:a3:bf:7e:5d:61:4f:62:
                    fc:9f:38:65:96:47:c8:65:9a:22:58:97:93:91:8d:
                    05:7e:d3:d6:62:ff:83:7c:09:29:18:c5:b2:d5:d7:
                    ec:06:a8:1a:6f:a7:61:96:d0:ed:92:b8:b2:5d:f2:
                    8d:da:02:9c:9c:9e:00:36:c6:19:6d:d1:c7:c9:57:
                    0e:62:7f:c5:cd:49:a1:54:d1:81:03:dd:17:86:1e:
                    5c:31:db:3f:42:c2:55:9f:ce:d6:e3:5c:91:b7:7a:
                    5d:f2:09:ae:ef:b9:ee:ac:a1:4f:ec:15:98:cf:66:
                    c5:60:db:ff:81:f4:4b:c7:c6:0f:1a:d3:be:7d:d2:
                    e1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E6:75:DC:17:56:FD:BC:ED:E1:A1:B0:1A:DC:71:B5:7D:BE:0E:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/d5dbc3b9-a47b-3dc0-9d94-e66d19626956.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/c9aa1567-89a9-4ce4-8bd7-e624999091e3.crl

            X509v3 Authority Key Identifier:
                keyid:F6:E2:9D:DC:F3:98:69:7C:13:B9:E8:52:1D:40:07:88:1D:21:4D:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.71.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:12:3c:3f:84:14:b1:8c:7d:3e:cc:65:fd:a3:f5:0f:25:fe:
         24:ac:bd:14:99:30:c1:50:19:0d:65:1a:95:92:f3:bf:bf:72:
         e9:e8:16:1b:05:fd:01:2f:ca:7f:4e:6f:de:38:7e:df:fb:72:
         7c:9e:63:a1:ff:d9:87:1e:d4:72:2c:b4:4c:84:e1:91:84:ed:
         55:84:ef:db:44:1e:75:1b:c4:d0:db:c2:be:38:aa:ab:96:56:
         55:12:26:b2:20:b5:a1:32:d9:25:ec:0e:1e:09:12:fe:c1:6f:
         46:78:c8:e9:05:8d:42:5c:06:b4:67:19:44:ba:e4:4c:1e:34:
         15:bb:49:6a:4c:54:c5:56:96:0a:a9:82:d5:eb:4a:f7:d1:20:
         ff:66:d8:6f:63:77:31:ba:48:82:06:85:d2:f0:e5:c8:7d:9b:
         b4:d8:40:6a:36:c6:4f:8c:d0:0c:8f:fb:c6:8b:04:5d:cb:fb:
         2d:fb:06:4c:91:3f:97:82:37:25:6a:b3:41:9c:a9:6d:4d:5a:
         5a:99:0e:1e:e3:1a:1b:a6:4b:f6:8e:fb:ac:96:16:a9:86:53:
         a5:e2:da:b5:24:a1:c1:27:08:bd:f2:f8:0a:49:b3:ed:a4:2c:
         46:f8:d7:18:24:91:a6:d4:8e:cd:bf:9b:ba:38:27:88:cc:53:
         65:9c:39:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:08:47 2025 by rpki-client