Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/1f7d990c-09db-355a-a9de-5d66f6acd83c.roa
File:                     1f7d990c-09db-355a-a9de-5d66f6acd83c.roa (raw, json)
Hash identifier:          Tbw85QdxiMJcwHYivQwDabOXk76Gf1LdfZJfeMT0fzM=
Subject key identifier:   44:05:60:E5:33:EC:67:43:15:08:6B:A6:34:8A:EF:B9:95:26:DD:55
Certificate issuer:       /CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
Certificate serial:       010D0C9F4328584A2C2011F14DB60DA2ACF7D200
Authority key identifier: 80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/1f7d990c-09db-355a-a9de-5d66f6acd83c.roa
Signing time:             Fri 13 Jun 2025 01:00:51 +0000
ROA not before:           Fri 13 Jun 2025 01:00:51 +0000
ROA not after:            Thu 11 Sep 2025 01:00:51 +0000
asID:                     63344
IP address blocks:        206.180.20.0/24 maxlen: 24
                          206.180.32.0/24 maxlen: 24
                          206.180.34.0/24 maxlen: 24
                          206.180.44.0/24 maxlen: 24
                          206.180.46.0/24 maxlen: 24
                          206.180.47.0/24 maxlen: 24
                          206.180.48.0/24 maxlen: 24
                          206.180.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2c:20:11:f1:4d:b6:0d:a2:ac:f7:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
        Validity
            Not Before: Jun 13 01:00:51 2025 GMT
            Not After : Sep 11 01:00:51 2025 GMT
        Subject: CN=b366f569-6541-4031-864f-c5a44f95a2d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ce:c9:33:85:2f:83:97:53:7b:c4:9e:be:f5:
                    e1:7b:e5:c3:27:d6:ad:f6:e1:59:0a:ae:e1:42:65:
                    66:1f:13:a4:59:79:7e:35:bc:a9:ef:eb:5b:a9:c4:
                    32:16:b6:36:3d:b5:c4:c5:aa:e6:d3:9c:31:66:46:
                    b2:d6:fa:95:b0:b7:f9:6d:f6:cd:71:26:6d:96:56:
                    eb:3e:6d:6f:41:fa:98:f5:82:39:e4:3f:f5:b9:b9:
                    b7:04:e9:8b:ec:89:ba:f9:7d:a4:52:87:0a:39:15:
                    8c:5c:48:c0:09:ec:1f:e5:87:a1:f2:49:00:73:82:
                    17:68:a6:8e:46:3b:8c:d9:9b:7f:d7:bd:72:eb:1b:
                    a4:42:33:41:b0:5d:be:41:c4:04:e3:2c:ff:ee:30:
                    aa:02:31:3d:24:12:7b:d7:fd:49:d4:c9:56:75:0d:
                    80:d9:ae:a0:38:fc:40:8c:f5:a1:7c:e4:07:76:98:
                    81:34:bc:97:dd:ab:0f:f1:b1:35:f1:e4:66:f2:7a:
                    76:60:50:3b:0f:c1:c6:d5:13:35:08:e4:f7:5d:e3:
                    9d:b1:38:3c:4d:a1:30:b9:61:12:55:ef:a8:c5:a1:
                    d7:15:fb:8f:73:c1:a6:f0:d3:1a:d1:17:f8:63:a8:
                    48:5e:c4:6a:80:6d:38:5a:51:ce:41:45:e2:7e:2f:
                    26:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:05:60:E5:33:EC:67:43:15:08:6B:A6:34:8A:EF:B9:95:26:DD:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/1f7d990c-09db-355a-a9de-5d66f6acd83c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.crl

            X509v3 Authority Key Identifier:
                keyid:80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.20.0/24
                  206.180.32.0/24
                  206.180.34.0/24
                  206.180.44.0/24
                  206.180.46.0-206.180.48.255
                  206.180.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:ed:6d:a0:4a:f6:32:c9:65:11:95:9e:b5:40:a9:c6:53:4e:
         ed:08:89:0d:28:d9:51:6f:f6:a3:9c:39:ee:13:1a:36:ef:01:
         aa:a8:c8:12:8f:40:db:3b:6b:81:ab:b3:5b:42:42:e2:d8:0a:
         bd:80:44:98:93:73:dc:32:2b:9f:87:2d:75:e6:86:24:75:d8:
         2d:c7:af:cc:7f:01:d5:4f:15:ec:09:65:97:6a:9d:49:d1:56:
         c6:18:96:56:bf:15:15:99:9e:e1:78:32:60:8f:26:54:f3:a2:
         8a:c9:40:94:2e:fe:08:80:f9:11:e6:30:2f:4c:01:93:2b:7b:
         3e:95:52:30:78:8a:c1:fe:d5:c4:52:25:e8:a7:4f:02:fa:5d:
         a4:ed:80:f1:51:fa:72:e9:8a:59:f9:57:b8:cd:af:a1:5d:b5:
         67:4c:bc:97:cb:f8:ff:b1:1c:88:f2:39:fb:42:8b:73:ce:4e:
         96:67:9f:e7:da:12:97:3a:6c:34:78:81:85:d4:1d:85:59:db:
         50:7a:f3:82:89:b0:92:6c:19:a8:10:8a:31:75:20:fb:2c:66:
         54:d6:8c:78:18:5e:3a:00:1c:94:31:d7:81:44:4c:32:55:21:
         8c:59:25:79:d0:62:89:d9:d4:bd:84:2a:6c:34:82:4d:21:cc:
         45:9c:58:24
-----BEGIN CERTIFICATE-----
MIIGaTCCBVGgAwIBAgIUAQ0Mn0MoWEosIBHxTbYNoqz30gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk4Y2M4ZTUtMWZjZi00YzI4LTlhZGItNDVlMmNjMWMw
MjNjMB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk
YjM2NmY1NjktNjU0MS00MDMxLTg2NGYtYzVhNDRmOTVhMmQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtc7JM4Uvg5dTe8SevvXhe+XDJ9at9uFZCq7h
QmVmHxOkWXl+Nbyp7+tbqcQyFrY2PbXExarm05wxZkay1vqVsLf5bfbNcSZtllbr
Pm1vQfqY9YI55D/1ubm3BOmL7Im6+X2kUocKORWMXEjACewf5Yeh8kkAc4IXaKaO
RjuM2Zt/171y6xukQjNBsF2+QcQE4yz/7jCqAjE9JBJ71/1J1MlWdQ2A2a6gOPxA
jPWhfOQHdpiBNLyX3asP8bE18eRm8np2YFA7D8HG1RM1COT3XeOdsTg8TaEwuWES
Ve+oxaHXFfuPc8Gm8NMa0Rf4Y6hIXsRqgG04WlHOQUXifi8mUQIDAQABo4IDezCC
A3cwHQYDVR0OBBYEFEQFYOUz7GdDFQhrpjSK77mVJt1VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThj
YzhlNS0xZmNmLTRjMjgtOWFkYi00NWUyY2MxYzAyM2MvMWY3ZDk5MGMtMDlkYi0z
NTVhLWE5ZGUtNWQ2NmY2YWNkODNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4Y2M4ZTUtMWZjZi00YzI4LTlh
ZGItNDVlMmNjMWMwMjNjL2U5OGNjOGU1LTFmY2YtNGMyOC05YWRiLTQ1ZTJjYzFj
MDIzYy5jcmwwHwYDVR0jBBgwFoAUgLK/cdOkjVQ54bafi7AyMY4ObJowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThjYzhlNS0xZmNmLTRjMjgtOWFkYi00NWUy
Y2MxYzAyM2MuY2VyMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQAzrQUAwQA
zrQgAwQAzrQiAwQAzrQsMAwDBAHOtC4DBADOtDADBADOtD0wVAYDVR0gAQH/BEow
SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l
dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEANu1t
oEr2MsllEZWetUCpxlNO7QiJDSjZUW/2o5w57hMaNu8BqqjIEo9A2ztrgauzW0JC
4tgKvYBEmJNz3DIrn4ctdeaGJHXYLcevzH8B1U8V7Alll2qdSdFWxhiWVr8VFZme
4XgyYI8mVPOiislAlC7+CID5EeYwL0wBkyt7PpVSMHiKwf7VxFIl6KdPAvpdpO2A
8VH6cumKWflXuM2voV21Z0y8l8v4/7EciPI5+0KLc85Olmef59oSlzpsNHiBhdQd
hVnbUHrzgomwkmwZqBCKMXUg+yxmVNaMeBheOgAclDHXgURMMlUhjFkledBiidnU
vYQqbDSCTSHMRZxYJA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 19:25:26 2025 by rpki-client