Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c8817623-911a-3d53-a166-264485c4b571.roa
File:                     c8817623-911a-3d53-a166-264485c4b571.roa (raw, json)
Hash identifier:          +pqNiks8AaoKwY9SNUwnnYH/ZcwbOpR5kCUnmRkZVvs=
Subject key identifier:   72:6C:0B:50:F4:DC:23:4F:11:62:88:A6:63:DB:DF:83:00:8D:49:1D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849EDE9CC5A6662995BA2D41C80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c8817623-911a-3d53-a166-264485c4b571.roa
Signing time:             Wed 21 May 2025 18:11:29 +0000
ROA not before:           Wed 21 May 2025 18:11:29 +0000
ROA not after:            Tue 19 Aug 2025 18:11:29 +0000
asID:                     16224
IP address blocks:        206.136.120.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ed:e9:cc:5a:66:62:99:5b:a2:d4:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 21 18:11:29 2025 GMT
            Not After : Aug 19 18:11:29 2025 GMT
        Subject: CN=036b5344-77cf-43d0-8579-dd52c939e0bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ad:6b:be:2f:44:5b:79:2d:ed:ad:06:8f:22:
                    7a:fc:2c:92:c8:cb:b3:c0:53:a4:bf:a8:1b:d6:46:
                    2d:f3:ce:82:e3:81:36:2f:f1:c4:55:b9:5a:38:31:
                    9e:3c:35:af:dc:ee:0a:4f:52:39:49:83:e1:a8:f4:
                    1c:1b:74:77:48:29:72:4a:62:fc:6f:06:22:09:a0:
                    61:e3:be:ba:d5:2f:c1:53:dc:09:db:a5:4e:c1:05:
                    d5:5e:68:66:03:2b:14:e0:49:d9:4e:7e:2c:f3:e5:
                    d0:1b:f3:86:65:88:ff:4f:3a:bd:11:2e:a9:72:47:
                    24:8f:3e:2e:89:53:81:0e:d5:03:1c:3e:e3:73:56:
                    cb:01:19:82:c3:07:b0:20:3b:fc:7d:d3:b7:5c:59:
                    cf:a0:af:82:e1:2e:18:63:d6:62:86:0d:b4:ad:d4:
                    c1:22:3a:e5:7d:c8:82:54:54:80:5b:38:f9:ef:8b:
                    78:4e:ce:bd:a7:20:fd:8f:38:cb:50:b9:16:ba:b6:
                    a5:2d:c7:55:ba:70:4a:33:89:30:45:3f:fa:35:89:
                    8f:5e:6b:ce:07:f3:dd:ec:a5:19:52:5c:0e:1b:1d:
                    5a:3e:ea:8a:e8:8c:1c:aa:41:bf:fe:bd:a7:77:67:
                    4d:59:54:3d:d9:2c:5f:42:9c:a7:94:41:02:2b:f6:
                    cb:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:6C:0B:50:F4:DC:23:4F:11:62:88:A6:63:DB:DF:83:00:8D:49:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c8817623-911a-3d53-a166-264485c4b571.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.136.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:99:f6:81:4f:92:64:f9:5a:87:58:75:52:1f:8b:cc:60:e2:
         3d:1d:a0:ac:68:69:d9:aa:51:8d:a4:f7:19:26:b3:ea:cc:fa:
         16:53:26:5f:da:3a:0c:e9:3f:21:11:86:72:48:1d:e9:0c:31:
         16:e8:6a:99:a5:65:16:21:af:fe:25:6f:b6:7c:50:c6:fe:74:
         9f:18:ab:32:c6:b6:3c:23:e9:22:7d:f0:92:d9:3e:fa:bd:6a:
         f3:01:e8:6c:67:38:51:a9:01:a6:2d:82:72:b4:13:b0:33:cc:
         d2:72:0e:5e:20:9d:f7:e6:00:37:eb:1f:ed:bd:e1:cb:f0:30:
         82:8f:10:d9:e0:ae:c8:db:94:06:11:a3:c9:9c:a6:16:c4:11:
         dd:6a:22:9b:60:2b:a5:73:d2:24:8d:b6:1d:54:b2:f1:38:0f:
         85:ec:1a:67:d5:63:7f:3e:fc:7b:8c:ae:1d:8d:d5:7b:ca:b6:
         60:34:1f:7b:d7:16:1b:be:fb:a0:18:99:cc:53:c8:4e:de:80:
         ea:c9:ae:e4:7c:ba:bd:aa:39:ec:bd:29:a0:ec:19:b9:2f:19:
         7e:51:3c:b6:44:47:27:73:fa:e4:07:10:7b:6e:f3:11:1e:03:
         7a:8e:96:97:e3:f4:a5:5c:52:41:66:7e:bb:67:1c:e6:cb:7a:
         8f:0c:cc:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 02:27:50 2025 by rpki-client