Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/f1ac867b-a90c-3c65-b0e4-7ffb700d6ae2.roa
File:                     f1ac867b-a90c-3c65-b0e4-7ffb700d6ae2.roa (raw, json)
Hash identifier:          Rf8PM8YFJE6gaNsg5/BBEUrxnMSArEhyk+9PNHgRkhg=
Subject key identifier:   1D:59:D2:D0:FA:7C:2A:D9:DC:85:3B:A4:28:1E:8B:17:DA:48:B7:B3
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584A3B7B02115958F7D9A1A95600
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/f1ac867b-a90c-3c65-b0e4-7ffb700d6ae2.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     393249
IP address blocks:        206.12.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:02:11:59:58:f7:d9:a1:a9:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=a889b5c5-14fc-4b32-95da-64b047b01381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b0:3e:12:a4:0e:93:c0:f2:8e:fd:a8:e7:6c:
                    93:10:16:13:16:c5:2a:1c:ea:a1:60:84:bd:4c:f0:
                    6c:63:83:03:bc:aa:87:30:6b:34:21:57:af:ac:f9:
                    7b:e3:df:bf:b8:1b:a6:50:82:60:74:65:29:1a:cf:
                    24:f6:b1:b9:53:6c:9d:7c:34:96:56:cf:43:1e:d3:
                    79:5f:8b:72:9f:3a:a6:bf:1f:eb:fc:9e:2d:f9:3e:
                    f0:64:ee:de:1b:45:35:82:d6:fd:b8:77:91:91:11:
                    12:13:13:0e:38:c2:78:2a:92:13:01:cc:4e:1a:da:
                    a2:92:54:6a:05:0c:00:2a:aa:fc:a9:f8:f9:59:2b:
                    67:f5:27:20:8c:1e:ba:3c:35:d3:af:22:04:88:8d:
                    20:86:c7:53:77:73:54:c8:15:8e:8f:dc:e7:c8:6c:
                    8b:3a:22:55:1d:31:bc:d7:a4:7e:04:0d:82:b7:0d:
                    07:62:23:77:0f:94:8b:7c:b1:0b:1a:03:2f:2c:a0:
                    73:97:10:3f:db:3b:6d:cb:68:a4:8d:96:a9:6f:93:
                    83:52:fe:b9:2b:8c:a6:a5:fb:f0:98:ff:2b:12:9c:
                    5d:a4:d7:36:f6:58:ea:38:30:be:18:9d:f2:56:59:
                    1b:b1:59:6d:12:3d:52:32:0e:40:23:fb:57:1f:e2:
                    5e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:59:D2:D0:FA:7C:2A:D9:DC:85:3B:A4:28:1E:8B:17:DA:48:B7:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/f1ac867b-a90c-3c65-b0e4-7ffb700d6ae2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:8c:e3:4f:46:a4:aa:bc:fb:f3:8f:23:04:9b:ea:0a:5e:8f:
         99:72:b0:75:49:35:4b:8d:5d:20:87:92:8b:1f:45:ff:1f:0f:
         cb:73:aa:5d:b0:e1:63:7a:cf:c5:d3:6e:ba:21:87:3b:9c:33:
         35:b8:a0:58:87:78:4a:4d:45:3f:4d:58:08:b5:16:d4:b4:8b:
         44:8b:27:98:08:2f:66:d5:13:83:59:13:c2:0b:20:d9:cb:6e:
         a6:60:99:a8:89:25:70:fc:d5:8e:f7:d8:a1:ff:38:d5:15:cd:
         8d:14:db:78:47:27:c0:3d:f3:43:e8:44:5d:d5:4d:7c:43:5b:
         74:3b:4c:c0:11:c4:6a:f0:ea:b3:94:9e:7c:b2:54:56:58:12:
         c8:47:ad:d1:bc:05:a0:34:ce:fa:f7:5c:ca:0d:1e:ed:d0:0a:
         20:aa:c9:cb:a9:14:77:2d:59:36:99:bf:8a:f9:bc:76:85:56:
         23:08:b5:1c:eb:8e:58:9f:ea:b9:c2:8e:43:52:7a:4a:86:61:
         4b:de:24:4c:76:f9:ae:d3:be:82:a4:ab:f3:57:df:c2:a8:eb:
         3d:2e:05:64:70:5f:d3:1a:a7:6d:8f:cf:8b:71:94:e7:3e:60:
         cf:3e:e1:e5:8a:c1:81:70:54:d1:ea:69:33:ed:03:bd:97:e7:
         bf:c8:82:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 21:28:01 2025 by rpki-client