Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ae922a28-a193-34eb-a07b-dc2aeea50255.roa
File:                     ae922a28-a193-34eb-a07b-dc2aeea50255.roa (raw, json)
Hash identifier:          C3lykKP6SA9FmIOWgGgp+Wz8L/4sZ+6M2OxDlMddNfg=
Subject key identifier:   2F:1D:91:32:49:66:D2:62:4B:DF:55:09:C2:41:2E:C0:BF:5E:A3:79
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584AECC14EE46CE40CA3A0095D60
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ae922a28-a193-34eb-a07b-dc2aeea50255.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     393740
IP address blocks:        206.180.144.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:4e:e4:6c:e4:0c:a3:a0:09:5d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=5c31d2cc-3899-4377-a158-20be20ac32a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b2:35:89:3c:bf:96:0b:17:86:fb:ef:01:54:
                    26:ce:04:f4:2e:82:c4:dc:a8:5c:1a:76:7d:51:cc:
                    c0:b2:5c:fb:6a:7d:b0:5e:56:f1:40:62:15:ee:73:
                    ca:14:c7:c1:e6:04:3c:5e:2b:bd:ce:fe:48:ec:bd:
                    64:21:1c:dc:30:98:a6:34:77:f8:64:d5:69:69:a2:
                    51:fd:87:2f:c6:45:1d:4d:ce:86:24:f2:f5:68:8b:
                    ce:1d:ae:8b:36:7a:2b:7d:c9:e7:ba:97:8a:d5:7d:
                    9c:64:22:8d:6f:a5:ee:61:64:f0:94:87:3e:83:df:
                    02:ed:23:59:7f:f0:f1:9a:5a:2e:99:a7:6d:26:2f:
                    5f:4d:2a:66:ba:40:52:86:04:1e:43:6b:e3:dc:2f:
                    3b:69:08:5a:7c:f1:4d:14:77:e2:da:95:3a:4b:71:
                    da:c9:a0:c5:47:82:66:86:db:9f:41:f7:f0:46:aa:
                    91:1a:65:29:e3:51:d0:ae:6c:b2:ae:9d:f9:4f:d6:
                    00:89:1d:4a:62:8c:db:7a:9b:c8:62:b9:43:33:c6:
                    43:b1:8a:94:c9:11:6e:34:05:77:76:0a:b9:44:a2:
                    ae:65:fe:74:0f:b2:92:83:a5:fa:90:9f:44:59:b0:
                    32:d7:7f:14:27:a8:51:ad:79:6e:3f:74:8d:5a:64:
                    b6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:1D:91:32:49:66:D2:62:4B:DF:55:09:C2:41:2E:C0:BF:5E:A3:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ae922a28-a193-34eb-a07b-dc2aeea50255.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.144.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:85:0a:5a:56:8f:0f:53:95:98:19:90:63:99:71:ae:f9:f0:
         5c:85:9a:f4:48:ef:f7:9f:46:89:a9:11:f8:b9:f5:ba:10:75:
         12:a2:87:59:28:a2:b8:c3:2b:6b:ea:23:de:d0:0a:25:4d:16:
         f9:fe:12:82:0f:d0:53:32:e0:d1:0c:4a:5e:5a:71:a5:c9:0d:
         e4:8a:92:49:aa:76:7b:50:c3:47:36:7a:95:c8:49:13:cc:e4:
         c2:44:1c:7f:03:35:0c:87:8a:49:9b:8c:64:51:a1:19:6b:df:
         d6:02:94:dc:69:60:e7:c0:7d:12:28:38:08:2b:e8:23:78:7a:
         bd:64:04:51:36:fe:1b:56:10:28:32:c3:78:d2:2c:e2:f6:ad:
         e5:29:72:47:6a:2e:29:1e:28:54:ff:bd:5a:00:87:0b:8d:42:
         3f:41:c5:d2:8f:9e:12:1a:c8:34:3b:13:51:91:46:d1:de:2a:
         a1:70:ba:dd:0d:cc:46:e9:93:05:df:16:c2:f3:a0:03:4e:a8:
         09:59:e0:62:9d:7d:2c:4a:97:f1:1e:7d:31:be:41:b6:48:a1:
         1a:20:da:82:58:ac:16:75:7b:68:e7:2a:0d:a4:ea:83:0d:53:
         a6:9c:81:d7:63:3e:5d:65:54:78:ac:db:20:63:27:ae:03:92:
         bb:6e:7a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:56:58 2025 by rpki-client