Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/4eaa6c68-f076-3a9e-9d92-6f6a069b8454.roa
File:                     4eaa6c68-f076-3a9e-9d92-6f6a069b8454.roa (raw, json)
Hash identifier:          YDNuWRaNt5w4sjIVkW6eP2zUHEd9pphec6BSN4cDPZE=
Subject key identifier:   2E:01:5E:C9:09:77:8D:5A:A9:28:91:3B:85:20:3E:6B:90:03:97:76
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F43285849B14A07CE6D89D68765F23E80
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/4eaa6c68-f076-3a9e-9d92-6f6a069b8454.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     13692
IP address blocks:        206.192.224.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:4a:07:ce:6d:89:d6:87:65:f2:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=6bf7543a-fb27-4c4e-b09e-293a4c0b25f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:9f:98:de:00:4e:50:2a:c4:eb:17:9b:56:c3:
                    fc:2d:b4:39:f5:a2:aa:c9:ac:d1:32:2a:43:a9:d4:
                    d5:1c:dd:57:7e:e4:64:20:a4:8c:37:2e:be:5e:d3:
                    77:48:de:81:e6:3e:30:af:a7:87:30:fd:f1:16:73:
                    c0:3f:47:53:25:46:37:1f:92:70:e1:29:69:02:57:
                    c3:9c:84:42:e4:63:6e:11:d6:10:e5:95:86:8f:21:
                    71:fc:c1:48:16:3d:f0:29:1b:48:6e:a9:71:d6:5c:
                    0e:81:71:0c:d2:41:1f:f3:9e:f1:cd:aa:f8:49:39:
                    d5:64:9c:56:a7:15:05:21:18:03:ff:f0:38:b8:f8:
                    80:9b:a6:e6:8c:da:54:c2:6c:e3:6a:a5:ba:f4:ec:
                    56:33:f3:05:07:87:01:33:a3:9a:7e:35:16:f2:ce:
                    3b:9f:0d:4d:a0:81:59:58:8c:3b:62:28:79:55:89:
                    3b:45:75:3c:64:fd:5c:4c:ba:4a:21:7e:b2:bf:d6:
                    25:ab:52:93:e7:1c:7f:d9:f8:bd:bf:d9:17:18:c0:
                    98:b3:6c:67:10:2b:52:a7:3b:d9:d1:0e:6c:9c:6c:
                    b8:84:0c:5e:3e:1c:38:bb:cc:3d:53:39:56:6d:5a:
                    84:05:1b:c2:b4:c8:1b:33:75:17:fa:d2:5c:5d:4a:
                    01:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:01:5E:C9:09:77:8D:5A:A9:28:91:3B:85:20:3E:6B:90:03:97:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/4eaa6c68-f076-3a9e-9d92-6f6a069b8454.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.192.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:03:b3:1c:85:ad:39:89:c5:3c:60:71:78:1f:09:7e:ff:1f:
         74:36:0d:3d:2a:6e:f4:97:43:d4:61:83:a1:c6:92:6b:bd:c0:
         1e:a6:f6:2c:f8:e6:52:07:d6:28:62:86:4d:0a:c5:55:5e:4c:
         6b:9d:cf:96:f0:df:48:65:24:53:e9:88:68:e0:76:8e:02:69:
         05:81:57:ed:e7:15:e2:e8:78:6f:77:0b:f5:5b:7a:5f:56:16:
         bf:3b:7f:aa:5f:b9:62:6c:f9:fe:64:d6:95:be:a0:17:e1:d6:
         30:d3:d1:f0:f3:d4:eb:10:84:d2:45:52:28:0a:3c:70:8e:f3:
         ec:04:9e:c3:a9:7b:35:8e:3e:40:dc:ea:ec:b4:ec:7e:6b:94:
         74:ac:55:95:a9:8f:70:79:f5:77:39:27:96:84:80:e0:ee:90:
         c9:74:75:39:91:ed:bb:4e:96:d1:95:3c:8d:ba:db:24:73:93:
         c5:31:96:b0:c4:21:a0:65:06:0c:30:e4:e7:1b:53:3a:56:ca:
         4a:a8:69:72:5e:84:38:9e:0e:a9:d8:b3:59:ea:2c:0b:e0:d9:
         20:d7:4d:a9:1e:b9:29:8e:08:60:9e:de:de:49:94:b3:d6:44:
         bb:71:b2:c3:39:0a:7b:0b:a5:0c:ea:ba:2e:14:92:7d:2c:52:
         7f:35:b6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:50:01 2025 by rpki-client