Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/704a74c7-336e-377a-9e26-aad1722f6ce4.roa
File:                     704a74c7-336e-377a-9e26-aad1722f6ce4.roa (raw, json)
Hash identifier:          ISRIVkPsoSPhXxjJ8fnZltMYXXFT304UOc/GumvE5G8=
Subject key identifier:   0B:4E:17:8E:F1:DE:53:7E:93:34:48:47:50:C9:A9:06:E6:CC:2B:55
Certificate issuer:       /CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7
Certificate serial:       010D0C9F43285849E00A4DA58C42BF476B773E00
Authority key identifier: F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/704a74c7-336e-377a-9e26-aad1722f6ce4.roa
Signing time:             Fri 16 May 2025 18:55:39 +0000
ROA not before:           Fri 16 May 2025 18:55:39 +0000
ROA not after:            Thu 14 Aug 2025 18:55:39 +0000
asID:                     22709
IP address blocks:        206.195.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e0:0a:4d:a5:8c:42:bf:47:6b:77:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7
        Validity
            Not Before: May 16 18:55:39 2025 GMT
            Not After : Aug 14 18:55:39 2025 GMT
        Subject: CN=87342812-5502-477c-bf84-3cdc5c07d111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:46:83:b5:ba:84:25:49:dd:89:18:1b:5b:7c:
                    e4:e0:00:2f:98:c3:c6:6d:d0:ef:99:f5:6b:2c:bb:
                    4b:7f:35:21:2a:89:09:18:f9:f5:82:6a:c4:64:47:
                    13:53:3f:9b:1f:11:93:09:6c:71:db:08:8a:04:6a:
                    bb:5b:98:cf:82:c0:01:fa:54:4d:e2:59:93:44:e9:
                    50:6e:82:f4:54:ca:f4:25:8f:c2:7f:bb:8c:c8:fa:
                    73:15:d1:e1:29:4c:f8:a0:7d:94:15:b8:e8:ad:c5:
                    5f:ae:03:a7:ba:52:fb:78:42:63:9c:72:a7:fc:0d:
                    2a:86:5d:87:ea:6f:34:a3:d0:13:64:eb:4e:a9:97:
                    00:c8:27:10:32:74:a2:8c:65:3a:82:58:09:0b:4e:
                    fa:25:6b:a1:00:8d:f0:34:93:51:c6:57:7d:d0:93:
                    16:63:36:ae:df:8d:2c:7b:44:f5:92:a5:2b:7b:51:
                    0c:d2:76:8c:9b:6c:bf:73:dd:d3:f9:f8:be:1c:16:
                    4a:3f:3b:bc:b3:c7:bb:41:84:f3:83:07:92:68:6d:
                    05:de:49:52:b0:64:fc:56:25:d2:80:69:71:29:47:
                    da:89:3c:de:ba:03:74:64:cf:6d:59:d2:86:13:21:
                    c0:90:b5:54:a7:31:42:3d:66:16:19:1e:fc:40:04:
                    ba:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:4E:17:8E:F1:DE:53:7E:93:34:48:47:50:C9:A9:06:E6:CC:2B:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/704a74c7-336e-377a-9e26-aad1722f6ce4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl

            X509v3 Authority Key Identifier:
                keyid:F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.195.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:26:3d:5d:6a:fc:03:d5:50:85:3a:de:78:2f:0c:b0:55:a3:
         be:df:b7:da:6e:f9:ed:c5:0a:c4:90:ad:aa:9e:cf:67:b6:17:
         10:31:d3:b3:1f:09:ed:ff:13:c3:6b:d0:53:21:98:f7:32:37:
         95:8e:e8:28:94:5c:7d:13:f6:f6:3b:f6:72:18:4b:ac:72:91:
         b7:1b:f4:94:d8:12:06:ae:d1:76:f3:09:e0:de:9f:ea:01:62:
         e3:39:7c:35:ea:a5:50:e3:b7:0e:ff:e9:9f:8e:6b:10:25:22:
         8a:88:71:1d:00:53:72:fe:84:57:ee:c5:f7:65:b3:86:1d:cc:
         36:a6:4a:9e:ab:6f:fc:2d:83:42:5a:56:53:43:83:e6:e9:cb:
         85:ca:b5:e9:87:c9:59:cc:f9:28:12:76:83:bf:25:e3:47:bb:
         83:fe:2b:bd:5d:3f:ad:59:27:2c:9a:37:54:3c:ce:af:aa:e7:
         9e:56:0f:1e:f3:5e:71:db:fb:b1:28:bf:14:95:88:9b:c5:1a:
         f9:2c:6d:6d:aa:10:84:0b:6c:d0:1a:ed:bd:d4:4b:57:91:7a:
         46:f1:dd:e0:5f:55:04:ef:c9:ed:ef:68:f6:e8:a1:a1:9a:c6:
         77:71:aa:f9:00:25:8e:b9:3b:dd:17:3b:b4:47:2e:14:f3:a6:
         b0:36:c3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 05:37:56 2025 by rpki-client