Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/51655df0-c92b-3fbe-86fa-0fdf0a2d5a41.roa
File:                     51655df0-c92b-3fbe-86fa-0fdf0a2d5a41.roa (raw, json)
Hash identifier:          TXJ0q4ZrV6DHFvO4ZIdKWZBgCLIDaCs2/w73VNCs/Ck=
Subject key identifier:   E6:F4:19:75:DE:DF:BD:26:61:25:7A:4E:0E:48:B6:91:9D:93:26:CF
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F43285849F87A878201E441B6299542A0
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/51655df0-c92b-3fbe-86fa-0fdf0a2d5a41.roa
Signing time:             Sun 25 May 2025 13:01:02 +0000
ROA not before:           Sun 25 May 2025 13:01:02 +0000
ROA not after:            Sat 23 Aug 2025 13:01:02 +0000
asID:                     393249
IP address blocks:        206.12.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:7a:87:82:01:e4:41:b6:29:95:42:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: May 25 13:01:02 2025 GMT
            Not After : Aug 23 13:01:02 2025 GMT
        Subject: CN=af85853b-aa0b-4ec7-a00c-f44356aca7aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fa:16:ed:a1:7e:3a:f4:0f:b1:e2:9c:49:0a:
                    6a:01:31:50:95:31:7d:61:2c:b1:f9:f4:76:7c:98:
                    20:45:7d:ae:47:c4:43:93:be:14:8a:54:47:dc:51:
                    16:01:78:8d:48:fb:d3:1d:cc:ae:04:45:96:15:10:
                    b6:ea:ea:bc:a8:a6:d7:95:e0:75:d1:d1:59:2e:61:
                    d7:d5:a1:d6:62:d2:bf:a6:40:70:f5:36:d9:b0:3c:
                    a6:bc:65:0c:34:cf:fd:eb:9e:fb:12:68:55:a6:07:
                    28:02:c0:55:b4:0a:f5:8c:9f:c7:52:21:e8:bb:34:
                    0a:de:9e:0e:e4:37:50:42:d1:7c:2a:20:12:c4:6d:
                    99:84:98:d1:01:a9:37:08:da:3c:d5:27:08:ff:4c:
                    ee:8a:99:f5:29:24:67:1a:63:33:57:3e:a3:36:c4:
                    eb:a7:4f:03:e0:34:1b:69:64:ce:4b:2d:ce:a5:14:
                    eb:85:60:96:2c:e6:52:4a:1b:31:b6:a9:26:a2:9b:
                    6a:63:e4:aa:9a:81:e6:da:13:e6:49:39:bc:8a:8f:
                    70:79:ee:e1:2a:85:84:42:14:b9:0b:33:e5:11:cd:
                    cf:79:b1:b2:17:03:05:d0:c5:6c:47:71:8c:55:d1:
                    e8:e4:e0:37:e0:ea:11:bf:b3:63:6e:48:d0:86:4f:
                    20:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F4:19:75:DE:DF:BD:26:61:25:7A:4E:0E:48:B6:91:9D:93:26:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/51655df0-c92b-3fbe-86fa-0fdf0a2d5a41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:45:eb:97:0c:be:4d:15:04:15:5b:32:31:82:32:73:9d:ea:
         0a:05:47:d2:19:cf:44:e9:ec:a2:c2:4c:22:a4:3a:f0:4c:8f:
         97:bd:3a:d7:fa:7c:b6:39:b4:39:62:01:9b:d5:52:36:1f:a5:
         f8:9e:c8:25:80:0d:45:a7:24:77:7a:76:f5:14:4c:8b:8b:13:
         cc:35:2c:a2:42:ce:e0:06:34:0d:b8:62:70:07:07:12:e6:3d:
         ad:25:67:96:b6:87:61:83:66:6e:62:11:c1:74:a4:7d:24:f6:
         00:de:15:da:c5:86:e5:42:76:69:3a:86:49:ad:6e:f4:99:61:
         60:41:13:d2:c8:4c:44:a9:54:0b:d5:48:d3:31:7c:5c:cf:c2:
         98:ed:b4:cf:ad:9a:9d:cd:13:09:b9:e0:cd:40:4b:57:94:de:
         90:6b:d8:1e:ba:f6:36:f5:51:0e:94:02:71:84:33:74:a0:75:
         2f:79:e0:1d:83:07:5d:49:c0:19:f4:f0:8b:e1:9f:a3:fc:30:
         2a:82:75:87:7d:88:7e:85:11:b4:7b:3c:1e:2a:f1:81:10:84:
         19:57:82:ae:6f:24:db:e2:30:48:95:1c:bb:bd:7a:4d:9f:1a:
         f9:06:af:cd:d0:26:3b:82:e3:0e:d4:b0:49:3f:d6:ea:e1:60:
         ec:0e:40:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 21:54:48 2025 by rpki-client