Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7a5f6f8-12f7-448c-8cbc-ee3ecdc1a97e/613abee1-24fd-3f37-99bc-3562f8d1b8fb.roa
File:                     613abee1-24fd-3f37-99bc-3562f8d1b8fb.roa (raw, json)
Hash identifier:          6PBecACZydeXCgnpZajGWF+1d1j+7I3232OgW4BHeqI=
Subject key identifier:   B0:79:B7:EC:C5:7D:62:D8:28:33:FE:45:E0:9B:DF:23:DA:A2:01:30
Certificate issuer:       /CN=a7a5f6f8-12f7-448c-8cbc-ee3ecdc1a97e
Certificate serial:       010D0C9F43285849F0E80F870B569B007965E480
Authority key identifier: 72:AD:D4:E7:99:ED:20:44:16:63:6A:EA:8A:44:54:1C:5C:2B:C0:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7a5f6f8-12f7-448c-8cbc-ee3ecdc1a97e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7a5f6f8-12f7-448c-8cbc-ee3ecdc1a97e/613abee1-24fd-3f37-99bc-3562f8d1b8fb.roa
Signing time:             Thu 22 May 2025 19:55:24 +0000
ROA not before:           Thu 22 May 2025 19:55:24 +0000
ROA not after:            Wed 20 Aug 2025 19:55:24 +0000
asID:                     376
IP address blocks:        205.236.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7a5f6f8-12f7-448c-8cbc-ee3ecdc1a97e/a7a5f6f8-12f7-448c-8cbc-ee3ecdc1a97e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7a5f6f8-12f7-448c-8cbc-ee3ecdc1a97e/a7a5f6f8-12f7-448c-8cbc-ee3ecdc1a97e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7a5f6f8-12f7-448c-8cbc-ee3ecdc1a97e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f0:e8:0f:87:0b:56:9b:00:79:65:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7a5f6f8-12f7-448c-8cbc-ee3ecdc1a97e
        Validity
            Not Before: May 22 19:55:24 2025 GMT
            Not After : Aug 20 19:55:24 2025 GMT
        Subject: CN=dbb08732-a863-47b6-b0b7-821a2ed07ffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f8:9b:28:58:84:e1:e7:fa:2b:bd:27:e6:1d:
                    9a:54:61:3a:82:8d:65:7a:79:c2:ad:bc:58:ee:68:
                    b1:d4:7b:12:a6:a8:c8:e9:67:39:47:a4:e6:1f:fd:
                    06:8b:5b:43:7b:06:73:4a:29:57:99:4f:e0:59:14:
                    6a:22:81:ca:e2:92:a4:47:bd:99:c9:5d:4c:ca:8e:
                    fa:19:62:36:0f:72:d3:ac:91:de:3f:01:0a:7b:6a:
                    0a:fd:75:3f:1d:cd:ff:22:d7:ad:a1:7c:8a:af:0f:
                    96:96:6f:1f:26:e2:3b:f2:fe:a4:00:f7:b2:4d:16:
                    a2:35:45:2c:af:04:18:be:d2:02:e0:4e:c6:a7:89:
                    8a:e0:28:97:64:30:c1:c3:7b:02:94:ac:ca:45:e5:
                    70:13:8f:a4:52:cc:55:a7:39:ba:95:1c:7d:d4:6a:
                    ff:76:7e:91:bd:b3:2e:ff:3d:94:b3:a5:55:7b:6b:
                    e2:14:b5:ec:01:bf:96:74:ab:26:db:10:c7:c4:5a:
                    6a:37:0d:b1:3f:de:d5:b1:05:40:db:76:ac:a2:fa:
                    f6:17:d7:a4:5d:b5:40:05:ea:f2:9c:2f:72:b2:8a:
                    d5:3b:81:bc:f9:9d:21:ed:c8:3b:78:04:c9:8d:17:
                    2e:6c:fe:59:cd:e5:4f:88:0b:86:fd:da:b5:c7:ed:
                    0a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:79:B7:EC:C5:7D:62:D8:28:33:FE:45:E0:9B:DF:23:DA:A2:01:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7a5f6f8-12f7-448c-8cbc-ee3ecdc1a97e/613abee1-24fd-3f37-99bc-3562f8d1b8fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7a5f6f8-12f7-448c-8cbc-ee3ecdc1a97e/a7a5f6f8-12f7-448c-8cbc-ee3ecdc1a97e.crl

            X509v3 Authority Key Identifier:
                keyid:72:AD:D4:E7:99:ED:20:44:16:63:6A:EA:8A:44:54:1C:5C:2B:C0:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7a5f6f8-12f7-448c-8cbc-ee3ecdc1a97e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.236.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:dc:8a:c3:69:21:09:0f:b6:58:62:84:ab:a1:bf:6a:4c:83:
         f8:59:5c:e1:4c:8c:e7:50:cb:21:ff:04:ff:06:35:1d:5f:23:
         0d:a8:1d:b4:6d:92:05:4e:01:46:89:7d:e4:61:f4:da:f4:5c:
         ed:f4:87:1c:52:77:57:42:11:57:bc:b1:e2:96:49:e9:ae:1b:
         e8:eb:cc:22:c4:38:b8:a1:d7:29:6d:df:4f:ba:cc:ff:3e:cd:
         2e:f9:a9:e5:d9:b9:7f:dc:78:18:37:d6:f1:59:cf:3c:61:9c:
         6d:f4:c4:a8:1b:93:43:57:3d:21:7d:72:bf:75:d7:e6:e8:61:
         8e:35:57:28:65:1c:39:e3:02:82:fe:d1:af:15:8e:fb:69:33:
         80:f6:07:70:14:ff:da:26:a1:90:d8:b3:eb:6f:95:cb:8d:d6:
         6a:53:b0:4d:03:8e:6d:b2:45:52:46:85:91:f7:15:a0:e1:73:
         c3:e4:50:d8:48:44:8e:94:a4:65:89:5e:1a:eb:e0:d0:43:21:
         a7:78:ea:19:7f:eb:0d:04:6a:34:a4:36:20:3c:01:02:f8:13:
         43:71:b3:cb:dd:6e:35:85:3a:15:80:38:06:4b:fa:1a:2a:17:
         f8:d5:68:ff:5f:6b:6a:b6:18:0a:bf:67:04:97:7b:75:31:13:
         57:ac:05:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 09:26:13 2025 by rpki-client