Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/cc606f12-511f-31c9-a491-2b7b79df745d.roa
File:                     cc606f12-511f-31c9-a491-2b7b79df745d.roa (raw, json)
Hash identifier:          7lTBh+FD0bZnvkei8TXjwZBbrHCumoS2Tf4gndKxgDQ=
Subject key identifier:   59:FB:58:30:78:53:86:53:B0:2F:35:1D:A2:DA:5D:DF:86:0E:2A:96
Certificate issuer:       /CN=e60884f4-fa14-4a13-ac3b-efb7c9412082
Certificate serial:       010D0C9F432858495D8968F5F24C212251B3B9C0
Authority key identifier: 0C:9A:7C:E9:6D:8C:38:48:9A:F3:3B:CA:41:66:F3:89:47:7D:49:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/cc606f12-511f-31c9-a491-2b7b79df745d.roa
Signing time:             Mon 31 Mar 2025 01:00:47 +0000
ROA not before:           Mon 31 Mar 2025 01:00:47 +0000
ROA not after:            Sun 29 Jun 2025 01:00:47 +0000
asID:                     36184
IP address blocks:        208.94.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5d:89:68:f5:f2:4c:21:22:51:b3:b9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e60884f4-fa14-4a13-ac3b-efb7c9412082
        Validity
            Not Before: Mar 31 01:00:47 2025 GMT
            Not After : Jun 29 01:00:47 2025 GMT
        Subject: CN=ccc6f8fe-d150-4bed-ba1a-bf3a895ce5de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fe:3e:59:e1:5b:a7:a0:1a:f3:6b:7d:db:81:
                    c9:67:ea:23:4e:d6:2b:3d:92:b7:88:7f:9e:53:27:
                    ea:5e:e3:fd:d7:4b:7e:48:a1:72:cc:e8:d7:74:e6:
                    e6:ff:56:dc:2a:5a:48:bc:37:c0:58:11:74:80:87:
                    ae:e1:26:70:f4:fb:f6:34:aa:30:48:04:28:5f:e3:
                    65:00:d6:50:3f:47:52:56:29:cb:fb:dd:dc:d3:c7:
                    68:5d:b9:30:77:22:4b:6e:7c:1e:30:87:72:de:da:
                    da:7c:b6:a1:69:61:7b:57:55:32:80:83:21:6c:1f:
                    86:32:bd:ee:67:36:d5:1f:de:55:0f:dc:ff:6c:9c:
                    1c:c5:76:77:51:8d:ab:4e:2a:75:93:b8:6e:88:48:
                    8f:a5:af:69:e1:aa:a1:0f:d5:0a:5f:8b:91:ed:68:
                    90:ba:db:18:36:46:d5:5a:d1:47:4a:de:ed:5a:51:
                    dd:34:d9:d7:36:2b:24:86:15:d0:84:0c:2a:e8:ad:
                    fa:72:aa:f5:06:a9:c7:08:2b:b7:e4:69:24:ee:72:
                    56:19:cc:65:c0:58:15:01:4b:02:07:82:d1:48:4d:
                    a4:1a:08:0e:51:d7:38:98:ca:a6:fc:42:cc:bd:1f:
                    30:b7:bd:94:72:cf:08:bc:d2:34:c2:70:3a:88:f6:
                    56:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:FB:58:30:78:53:86:53:B0:2F:35:1D:A2:DA:5D:DF:86:0E:2A:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/cc606f12-511f-31c9-a491-2b7b79df745d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.crl

            X509v3 Authority Key Identifier:
                keyid:0C:9A:7C:E9:6D:8C:38:48:9A:F3:3B:CA:41:66:F3:89:47:7D:49:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.94.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:66:6e:99:fa:53:fe:f3:2c:75:58:18:11:51:b6:4f:c1:79:
         a7:d2:a8:97:ba:54:20:ed:54:8d:0e:93:be:b7:c6:14:be:a2:
         27:aa:c7:4c:b2:28:e0:93:ba:7e:12:32:27:0c:3c:ee:4e:cd:
         f4:76:50:19:37:c6:aa:61:af:67:0e:35:85:52:f1:a1:6e:c7:
         96:ff:19:15:44:43:53:f7:36:b2:05:ea:5d:a6:b7:62:52:8b:
         00:d6:f8:23:ad:aa:2b:0b:2d:50:f2:6e:e6:31:19:d1:46:2e:
         c4:23:80:f6:76:90:ed:26:9b:75:78:e7:d3:de:87:a3:e7:cd:
         91:7e:58:38:45:f5:6f:90:97:01:04:e2:dc:d2:82:a4:01:50:
         e8:e6:5c:07:cd:7d:68:1f:a7:9e:3d:c9:6b:78:19:8b:03:ff:
         f9:3a:b5:a3:9c:36:c0:5e:7c:1d:b2:51:52:d7:8b:95:e3:3d:
         07:2a:6f:6a:d5:49:35:ae:45:62:83:59:89:20:d7:47:25:33:
         45:74:7f:b5:c6:3f:52:f4:e7:a0:33:9f:b4:9f:2e:ea:0d:8e:
         ed:89:ba:0b:4b:cf:58:e5:37:b7:9c:02:bc:ba:12:b0:31:c6:
         c6:39:a0:2a:9c:62:7f:e4:bf:18:0c:08:81:d7:32:81:7a:55:
         27:f5:c2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 23:51:59 2025 by rpki-client