Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62/00d5f446-6317-3dbc-8a74-8f0118ef4b02.roa
File:                     00d5f446-6317-3dbc-8a74-8f0118ef4b02.roa (raw, json)
Hash identifier:          /sxdtXD4Fu1OqNZdA76CRDVMVJ5kb4+R6AkiP6zNZ0Q=
Subject key identifier:   89:89:82:CE:2E:22:5C:D1:B9:C4:93:D5:01:F5:A4:38:47:96:38:75
Certificate issuer:       /CN=6be678b8-74cc-4a67-8700-5a07f5c20f62
Certificate serial:       010D0C9F432858498E6483D1A4DAAD6BB3AB9040
Authority key identifier: 07:15:A1:D8:29:0B:E1:62:53:76:F4:0C:3B:E3:44:85:EE:8C:D1:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62/00d5f446-6317-3dbc-8a74-8f0118ef4b02.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     17120
IP address blocks:        204.81.0.0/16 maxlen: 18
                          204.82.0.0/16 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62/6be678b8-74cc-4a67-8700-5a07f5c20f62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62/6be678b8-74cc-4a67-8700-5a07f5c20f62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:83:d1:a4:da:ad:6b:b3:ab:90:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6be678b8-74cc-4a67-8700-5a07f5c20f62
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=7d691c5d-5595-4ecd-9d70-b1d4893da17f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3c:fd:84:fd:f4:ce:63:66:5e:6e:1f:b6:cb:
                    53:46:48:37:52:26:85:06:b3:af:bd:cf:9c:ae:9b:
                    d2:1b:ae:28:8a:10:02:20:b3:dc:9c:9c:4c:5a:26:
                    9b:bc:0d:41:6e:39:50:b9:f8:e5:2c:c8:29:75:a7:
                    cf:22:33:6b:cc:4b:cb:ab:dd:ac:09:7e:26:09:0d:
                    e7:6d:5d:1f:7b:39:65:cf:9a:0a:ae:b7:a6:b8:4c:
                    a0:29:60:bf:84:a0:88:cd:0c:ef:2d:4a:0f:8d:a0:
                    0d:94:07:a8:8b:75:c7:76:22:ab:b5:63:56:78:71:
                    26:a2:c5:8f:20:61:85:23:ed:4a:15:ca:49:62:3a:
                    3c:69:78:b0:1e:30:fd:fc:67:8c:b7:29:ef:d1:9a:
                    55:7b:86:42:92:a9:15:96:9f:f4:60:53:5c:90:dd:
                    4e:43:6b:9f:dd:2d:31:b7:61:d4:1d:d3:5d:5a:48:
                    d8:3a:25:1f:22:f1:0d:f0:9d:c2:9d:1c:2c:80:ac:
                    1f:c3:b7:98:16:68:91:f5:f1:cf:9a:8c:56:02:23:
                    15:e5:98:01:7b:77:3f:7d:e0:5e:45:6e:cf:83:c4:
                    88:27:32:ef:87:aa:32:0b:f5:65:31:db:f8:0a:94:
                    81:e7:49:46:9c:92:bd:3b:9e:1b:90:40:cb:f0:67:
                    99:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:89:82:CE:2E:22:5C:D1:B9:C4:93:D5:01:F5:A4:38:47:96:38:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62/00d5f446-6317-3dbc-8a74-8f0118ef4b02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62/6be678b8-74cc-4a67-8700-5a07f5c20f62.crl

            X509v3 Authority Key Identifier:
                keyid:07:15:A1:D8:29:0B:E1:62:53:76:F4:0C:3B:E3:44:85:EE:8C:D1:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.81.0.0-204.82.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:06:88:cc:55:a6:08:89:fe:57:83:2f:fb:4a:64:5b:69:6b:
         49:6c:d7:b8:fe:50:24:45:fb:35:16:26:1c:59:87:f6:4c:ee:
         8d:28:51:fa:df:15:4b:60:c4:1a:71:1a:45:4f:4d:2c:5a:40:
         38:7c:26:84:f8:f5:70:eb:2b:06:37:91:0b:55:aa:95:a5:e8:
         6d:a5:ba:d6:c6:fc:61:0b:9a:c5:dc:b1:81:02:40:a5:60:11:
         69:3f:90:58:4c:88:4f:cc:df:15:8d:1d:23:5d:c0:8a:4d:ed:
         c5:55:14:72:8b:04:16:2e:db:85:92:07:16:a9:91:71:4e:d9:
         cb:f2:fc:ed:b1:56:5b:86:67:a2:25:64:db:34:34:96:46:48:
         04:29:ad:c3:32:0e:9b:74:c4:b5:9b:e0:46:50:cb:68:9b:f8:
         0c:58:4d:ab:3b:0f:ba:08:25:0c:62:bc:5c:7a:21:e5:02:7d:
         44:e7:4c:47:3f:6d:85:e3:49:00:8f:26:8a:16:a9:66:51:f4:
         86:e8:f3:68:e2:0a:e4:fe:7a:e5:ae:d0:27:1a:78:6c:cb:49:
         7a:ae:d9:30:e8:11:5a:ff:38:5c:d2:61:d5:6c:85:e6:65:61:
         9d:e9:ec:54:c6:1b:59:c9:c6:de:a7:32:f4:2a:c8:c8:6e:84:
         3f:9a:2c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:04:10 2025 by rpki-client