Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/f53cfa92-ab4c-345d-a7be-595718595df5.roa
File:                     f53cfa92-ab4c-345d-a7be-595718595df5.roa (raw, json)
Hash identifier:          aCOzTY/bnfmtN0yQmjK3slP5iq5aifD7tLmHIC9nYVk=
Subject key identifier:   DD:4F:0F:2C:D6:A3:9A:F9:27:07:1B:4F:45:39:9D:0E:64:C8:77:8B
Certificate issuer:       /CN=8741ed4f-28ba-4cbf-a4a6-384057567d05
Certificate serial:       010D0C9F43285849CFFF8489F548181558C39E00
Authority key identifier: B0:4F:D2:1C:43:38:06:D0:27:8E:BD:98:13:F5:43:C3:B3:48:89:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/f53cfa92-ab4c-345d-a7be-595718595df5.roa
Signing time:             Sun 11 May 2025 01:00:47 +0000
ROA not before:           Sun 11 May 2025 01:00:47 +0000
ROA not after:            Sat 09 Aug 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        206.15.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/8741ed4f-28ba-4cbf-a4a6-384057567d05.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/8741ed4f-28ba-4cbf-a4a6-384057567d05.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cf:ff:84:89:f5:48:18:15:58:c3:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8741ed4f-28ba-4cbf-a4a6-384057567d05
        Validity
            Not Before: May 11 01:00:47 2025 GMT
            Not After : Aug  9 01:00:47 2025 GMT
        Subject: CN=6525e018-028a-49a2-8468-9d9e2f522959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:39:97:2e:47:14:bd:7f:01:f0:61:11:02:a5:
                    0b:d4:73:cb:3e:d5:77:9c:5a:a4:78:de:15:a1:d4:
                    d6:b1:b3:d2:73:88:a6:7f:cf:85:e3:c9:b9:14:eb:
                    ed:75:aa:59:d0:ae:6c:12:0f:27:92:07:38:3c:6b:
                    76:1b:57:84:05:06:a4:28:c6:1e:90:f7:da:cb:90:
                    10:3b:e0:6b:77:eb:95:56:58:18:03:c7:16:f7:d8:
                    d9:13:5b:44:73:f8:70:91:8b:2f:01:65:a9:26:2d:
                    72:61:48:7f:36:18:92:c1:7f:52:e8:d0:f4:a1:d9:
                    e9:ab:4d:d1:ae:94:5e:56:c1:03:3b:45:f4:6b:ae:
                    09:fd:e0:a4:ce:54:33:3b:cc:4e:ef:6e:b1:89:65:
                    26:d4:ed:9b:12:61:d5:ad:5f:a4:f1:b3:56:fa:ce:
                    f7:53:68:10:bf:2a:3e:44:22:4f:1f:70:fe:ea:cd:
                    df:ef:b3:49:fe:3e:65:f9:13:f1:0f:37:85:59:4b:
                    79:49:0d:9d:79:3e:8f:5a:cd:bd:68:21:0b:c2:ee:
                    f9:6f:b6:7d:03:7b:9e:3f:5b:0f:57:c7:e2:c0:ff:
                    ed:c4:73:82:fc:b2:f5:35:09:48:f6:69:18:e7:2f:
                    09:b5:85:34:16:ac:dd:6c:48:f4:4a:41:c4:c1:71:
                    85:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:4F:0F:2C:D6:A3:9A:F9:27:07:1B:4F:45:39:9D:0E:64:C8:77:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/f53cfa92-ab4c-345d-a7be-595718595df5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/8741ed4f-28ba-4cbf-a4a6-384057567d05.crl

            X509v3 Authority Key Identifier:
                keyid:B0:4F:D2:1C:43:38:06:D0:27:8E:BD:98:13:F5:43:C3:B3:48:89:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.15.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:d8:a0:c4:bc:dc:03:ae:dc:b9:bc:a6:9e:52:1c:a8:8c:da:
         77:0f:30:11:21:73:68:6a:1e:43:5d:61:8c:56:f6:07:5d:2b:
         70:8b:30:4b:1a:63:18:6e:49:2b:4b:2e:3d:ee:3f:79:18:fa:
         b2:3a:87:cc:be:b4:ec:a6:f1:3d:b0:97:c3:2b:4f:cd:a4:96:
         24:1d:f6:b1:50:eb:73:c8:d0:83:7b:dd:98:87:b5:da:e7:44:
         f2:5a:85:ed:cf:12:d7:2f:23:83:d8:7e:c9:34:4c:fa:8e:e9:
         a8:2a:f2:13:30:df:19:10:f3:a7:68:2f:3d:40:e4:41:da:1c:
         e7:48:46:46:94:c8:e0:03:2b:a4:2b:a0:5e:d9:84:28:94:e4:
         fc:8a:5b:b9:b6:9a:77:d2:9c:84:0b:6c:40:88:1f:a6:ca:5c:
         a6:33:c4:4f:d5:1a:e5:3c:be:07:28:87:f5:9c:f7:6a:fb:d7:
         dc:5a:be:1a:e5:89:36:d1:8b:82:d8:3b:0e:19:73:ee:29:f8:
         89:66:35:f6:ec:ff:fe:92:7b:1b:eb:ba:16:ea:82:63:ab:57:
         3d:9b:15:bf:90:ac:38:2d:ff:37:29:a6:cb:d6:f8:15:a6:39:
         a4:2c:80:15:e1:e4:4b:12:0d:8d:02:d5:fb:bc:f2:92:2e:4b:
         7f:11:86:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 21:04:12 2025 by rpki-client