Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ddd7db4f-a91f-35b8-921d-6b300e5156e4.roa
File:                     ddd7db4f-a91f-35b8-921d-6b300e5156e4.roa (raw, json)
Hash identifier:          joWd9v+7MRxJQXwxaFoLdPVVro1RKXYbOZAVGXrsJkY=
Subject key identifier:   26:B9:00:A1:CD:17:FF:4E:D8:10:CE:3D:5A:B0:3E:C2:44:0C:8F:3B
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584A0C0566EA3D96B91D80D9BA80
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ddd7db4f-a91f-35b8-921d-6b300e5156e4.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     393740
IP address blocks:        206.180.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:66:ea:3d:96:b9:1d:80:d9:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=7a451d11-797d-41fb-b47d-a5d981a921f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:49:7c:56:dc:99:6d:e5:47:49:1f:ce:73:bc:
                    9f:6e:b7:16:01:6d:cf:10:40:24:23:4f:e5:d8:f8:
                    ee:a8:bf:8c:07:31:8b:af:ac:7a:71:43:3a:cc:9a:
                    08:1e:2d:46:64:12:92:cb:79:33:d6:5d:3c:0e:48:
                    1c:2d:4c:f8:da:53:c2:96:d2:4d:40:a8:6c:40:82:
                    13:01:aa:08:3f:4b:d3:ba:20:3a:77:97:50:44:3d:
                    24:bf:8c:bb:e2:74:8c:27:04:e7:be:60:9f:f0:b9:
                    3e:d4:f0:73:7e:2a:22:c0:cc:25:7f:5c:f5:98:67:
                    cb:19:04:1f:49:f1:40:17:15:fd:44:bc:96:7b:be:
                    a1:48:fb:e2:46:e7:3b:b0:61:90:1b:e4:2e:20:ec:
                    b7:09:5a:5e:fc:01:5a:f0:47:25:37:d9:8f:e7:9a:
                    ad:b4:db:01:68:b8:45:72:b9:12:a1:06:e4:f9:b6:
                    6c:96:d4:f8:65:e8:7e:61:78:d1:34:21:f9:a7:3e:
                    f4:cf:0d:4f:a5:e2:8c:6d:01:af:11:d1:73:43:6e:
                    30:cd:28:b8:2b:bc:92:9c:85:d1:f3:cb:af:be:24:
                    22:4b:39:0d:15:5a:38:3b:21:19:14:58:c7:a1:5e:
                    02:8f:c0:ec:aa:81:57:df:33:81:15:b7:bf:ad:ff:
                    e5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B9:00:A1:CD:17:FF:4E:D8:10:CE:3D:5A:B0:3E:C2:44:0C:8F:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ddd7db4f-a91f-35b8-921d-6b300e5156e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:a9:8e:cc:c1:84:37:7e:e9:91:28:24:eb:48:2b:10:25:bd:
         ac:af:de:50:84:3c:b9:51:94:ea:98:6a:8e:47:e4:24:04:76:
         03:0b:20:e3:ca:08:a1:9c:da:50:0a:6a:bc:b6:86:71:2f:7c:
         28:1d:a9:6d:b1:88:f8:5f:dc:3c:82:98:7e:bc:f2:8b:a5:ff:
         2d:fb:26:3c:f8:0f:39:e9:a6:00:d1:c5:ee:a1:3e:64:84:64:
         3d:7b:b7:f6:a4:fa:49:ea:39:1f:e0:15:90:ad:9e:2b:28:37:
         fa:63:56:30:0d:f6:b9:92:91:ba:37:10:54:00:99:86:9e:65:
         9a:6b:1d:cb:12:cc:b5:3c:8b:7d:d3:87:be:f6:d0:e4:3b:31:
         38:f4:da:a6:84:1e:d9:57:80:6e:85:c3:e0:d0:65:6b:19:a3:
         1b:ed:ef:95:57:de:3e:49:c2:24:b3:2b:48:7b:75:51:8b:94:
         59:70:5e:a9:cd:bb:58:71:28:87:a7:11:f0:21:81:2d:75:88:
         24:21:00:21:f4:97:de:0b:59:b5:b5:6d:10:16:f0:34:43:67:
         b5:54:44:27:95:bc:1b:69:da:ac:73:66:14:e2:77:07:76:7d:
         49:a4:fb:04:4f:89:bd:a2:09:ea:90:90:42:a2:25:1a:f1:1f:
         e3:7b:d1:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:49:51 2025 by rpki-client