Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/9137e577-28d9-3e12-b2ce-2824bb2f97df.roa
File:                     9137e577-28d9-3e12-b2ce-2824bb2f97df.roa (raw, json)
Hash identifier:          pxu3U6VO/XSBRbW5b3/+MRktEgonLbAYX4k2m1SJUXM=
Subject key identifier:   F6:CB:FC:BA:93:BF:9C:E5:56:40:73:9A:51:EB:9B:04:7A:E4:3F:8C
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F43285849C20A1A243D249E8FE1B0A940
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/9137e577-28d9-3e12-b2ce-2824bb2f97df.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     0
IP address blocks:        206.51.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:1a:24:3d:24:9e:8f:e1:b0:a9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=f70aa513-bc5e-4195-95e1-d720ac1dbe37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7f:e1:da:6e:33:e7:58:eb:6d:53:56:49:06:
                    cc:e3:ea:fa:79:36:0b:59:5c:2d:b9:6a:20:f5:74:
                    49:f6:f9:ab:22:f6:a4:73:07:de:b1:9e:f4:d0:ef:
                    83:2b:ad:1e:5f:75:b5:d2:d8:6f:04:86:97:3a:06:
                    21:c1:0a:cc:f2:f0:91:b8:bc:3b:7d:4a:98:28:30:
                    57:30:94:85:50:0f:d6:dc:c0:1f:2b:a0:71:22:01:
                    90:fe:65:e5:fb:02:f8:3a:52:54:88:87:af:08:37:
                    08:58:54:b8:c8:06:2e:cf:fa:b9:be:08:21:10:36:
                    44:5a:58:c6:f3:4d:db:cf:24:83:9d:40:80:cd:12:
                    20:d7:98:da:0d:c2:b0:f4:a3:67:eb:30:1d:fb:2e:
                    6e:e8:65:f4:b4:6c:63:18:a0:fb:e3:a3:f9:1b:db:
                    80:02:1c:11:06:de:38:f2:dc:db:49:7f:25:b5:8f:
                    50:40:62:ef:2a:fa:9a:9a:9f:01:61:36:32:c7:c7:
                    19:20:8e:dd:e0:11:7f:d8:94:f3:3a:ca:1f:62:81:
                    6e:34:03:72:92:c9:79:32:88:64:e3:cc:95:56:a1:
                    c1:3d:47:c5:43:d8:64:a3:e3:6f:40:1a:cd:7c:94:
                    8e:4b:ee:a7:7a:1b:d9:43:08:52:e5:c5:89:d6:34:
                    41:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:CB:FC:BA:93:BF:9C:E5:56:40:73:9A:51:EB:9B:04:7A:E4:3F:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/9137e577-28d9-3e12-b2ce-2824bb2f97df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.51.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:6a:05:a2:24:c3:a6:a0:71:4e:c4:8b:1f:f8:c3:42:e6:28:
         24:3a:a1:39:4e:f4:66:2f:f3:f9:2d:2e:d8:9f:e0:9a:40:14:
         b3:22:b6:8f:8e:2f:a5:8f:89:87:17:22:fe:72:76:d2:10:0b:
         74:f6:d3:ee:27:7e:b2:14:02:ee:5e:1f:2f:df:4a:90:c9:7d:
         15:c5:3d:19:da:40:c5:5a:2f:bc:82:26:c7:36:3f:5a:b2:ae:
         c0:60:99:7b:5c:6d:7d:22:84:56:28:c2:32:e0:21:ec:94:ca:
         61:e2:87:1f:a7:71:80:c6:b2:87:b5:85:e6:78:5c:bf:d2:a0:
         da:2b:d4:44:65:0a:bb:62:dd:98:63:3e:a5:4d:54:9a:05:78:
         5a:eb:e8:53:be:aa:03:af:3b:1b:ad:4c:b4:1e:74:2f:5c:64:
         96:09:c5:98:28:28:b2:13:93:2f:31:7d:d1:03:8c:5b:b2:57:
         a8:a2:78:47:9a:92:a9:a9:ab:29:df:b6:29:aa:55:5c:86:e2:
         44:8c:74:53:92:ac:00:99:27:3d:ab:ec:34:35:7d:f7:66:22:
         be:67:b8:9e:06:f1:d5:5b:43:9a:18:ad:e8:c3:d3:c8:ef:1d:
         b9:d8:32:d6:6c:ce:81:f9:8c:0f:c3:9e:66:d0:4e:26:0f:8a:
         e3:86:dd:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:37:41 2025 by rpki-client