Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/d35ed989-c58c-3ee6-8c22-a631e116f05b.roa
File:                     d35ed989-c58c-3ee6-8c22-a631e116f05b.roa (raw, json)
Hash identifier:          5/93VzBtdEOF83poTTtcretEiOuTV1LJG3I2P7ddhzY=
Subject key identifier:   63:A3:D4:60:28:24:5A:A9:36:1B:44:C4:F6:32:EC:60:CA:0D:73:26
Certificate issuer:       /CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
Certificate serial:       010D0C9F4328584A0C054BC7338451735F15B5FE
Authority key identifier: 80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/d35ed989-c58c-3ee6-8c22-a631e116f05b.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     397004
IP address blocks:        205.157.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:4b:c7:33:84:51:73:5f:15:b5:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=1e2769d4-7216-4cf4-914e-b1fc95769e4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c0:ac:bc:65:a1:76:6c:0d:52:10:74:8d:39:
                    d1:a4:9a:8a:3f:5e:c2:e7:6f:ce:08:22:cf:ec:a5:
                    05:36:9e:c1:7d:71:de:dd:7a:3e:c0:c1:98:40:b1:
                    51:5f:a9:13:86:2b:bd:9a:f8:93:97:7e:59:5b:06:
                    31:cc:a0:11:9a:24:62:7b:bc:6f:21:d5:10:23:95:
                    50:d6:b4:f8:67:ad:f4:0c:2c:c3:5d:4f:2d:b4:96:
                    de:82:30:11:7f:85:03:3c:c0:18:10:78:48:ff:2a:
                    7a:0d:0d:73:b1:3a:65:81:5c:f6:b3:46:0b:c7:99:
                    f6:66:79:ba:7d:5f:cc:62:7d:ec:ea:d7:56:cb:12:
                    c6:f3:98:63:dd:45:d9:23:b7:01:be:a6:14:06:66:
                    ea:8b:42:0c:c9:dd:a4:5f:50:9f:73:da:c1:2d:10:
                    4a:41:dd:a5:3d:4a:e8:92:29:d3:ff:40:c5:8c:1c:
                    b6:c2:94:6a:9e:e5:29:15:88:e7:fa:2f:54:20:46:
                    54:8b:65:55:13:22:8c:b5:63:de:1a:c1:a3:e5:8b:
                    dc:1a:69:c6:f9:e0:95:79:fe:55:a0:50:63:c6:e1:
                    81:58:0b:6b:49:43:f9:b4:c9:71:5c:76:7f:5f:09:
                    e7:4e:ef:a8:fc:3f:a1:0a:ac:6d:1c:57:04:2f:61:
                    62:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A3:D4:60:28:24:5A:A9:36:1B:44:C4:F6:32:EC:60:CA:0D:73:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/d35ed989-c58c-3ee6-8c22-a631e116f05b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.crl

            X509v3 Authority Key Identifier:
                keyid:80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.157.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:86:c3:c3:d7:84:85:58:85:56:58:ac:1e:db:5e:b8:52:a4:
         15:c9:a2:4f:79:91:81:9f:2e:f3:d8:8b:ae:10:a3:0d:bc:ee:
         4a:66:10:77:ee:31:26:61:5d:e0:7f:34:ad:7a:e3:84:17:97:
         68:b1:f9:a1:e2:85:ee:6e:68:cf:81:32:26:53:5c:40:d2:c0:
         cf:b6:90:22:e2:c8:f7:e0:b2:31:ec:38:bb:46:01:ee:4c:82:
         c8:05:c8:f3:30:9a:91:19:43:5d:bf:0e:68:37:0f:7f:5a:43:
         d2:a2:e0:e9:e2:c1:65:2c:14:75:93:0a:39:d7:ee:95:1f:18:
         f9:e5:5a:29:9f:5b:31:9f:24:28:00:87:5a:4e:7e:c2:b6:35:
         65:40:49:31:f3:16:54:ab:f9:c4:d4:cc:ef:ad:77:eb:b2:e8:
         45:72:cb:bb:f2:cd:d3:59:e3:d3:e9:66:52:28:a4:1c:bf:47:
         7d:d7:1d:7f:9b:70:66:77:c4:aa:89:42:c6:05:28:52:9a:90:
         37:f6:3d:61:dd:95:fc:6b:5b:9c:a9:49:7c:eb:5a:b5:96:a3:
         77:d5:86:34:ec:99:db:89:01:bc:58:98:f9:cb:5c:c7:1e:fd:
         f3:2b:b6:09:6e:14:b6:cc:38:09:8e:dc:5c:94:85:25:f9:38:
         7f:90:fe:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 00:02:47 2025 by rpki-client