Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/6210e133-eb91-305d-b703-1f4e8e26d25b.roa
File:                     6210e133-eb91-305d-b703-1f4e8e26d25b.roa (raw, json)
Hash identifier:          S+HXNp5iA15Dsm0bRz4ECCpItvZTO7p4FPz9ZAkYm7o=
Subject key identifier:   C0:7B:DA:D1:B5:32:42:6A:50:B1:B9:7F:6B:B4:2E:6E:52:3A:62:94
Certificate issuer:       /CN=f6414b99-bb9f-492a-a1ac-935a49935d9d
Certificate serial:       010D0C9F4328584988CF1D766C275211C6BC5B00
Authority key identifier: 5F:28:E0:AF:74:7D:2B:A5:14:85:04:6C:28:28:ED:ED:D7:F2:BD:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/6210e133-eb91-305d-b703-1f4e8e26d25b.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     397122
IP address blocks:        206.51.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/f6414b99-bb9f-492a-a1ac-935a49935d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/f6414b99-bb9f-492a-a1ac-935a49935d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:1d:76:6c:27:52:11:c6:bc:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6414b99-bb9f-492a-a1ac-935a49935d9d
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=f0b1b7c5-44c4-428c-8eb6-8ea546433d83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e7:f1:f2:54:65:07:d6:e2:95:de:6c:db:44:
                    50:8f:93:75:bd:4e:cc:d3:36:56:df:11:24:d3:7e:
                    83:25:60:c0:51:9e:ce:cf:a6:4c:a3:35:6a:0b:0c:
                    e7:46:01:d2:54:0b:a5:13:43:e4:f5:f7:1c:c0:fe:
                    26:b3:9b:ae:bc:0c:ed:15:fc:63:eb:98:37:83:6e:
                    5f:41:9f:46:94:8c:70:14:61:cf:68:d4:6d:13:02:
                    1a:48:24:2c:de:7b:97:ee:40:bf:81:79:f8:33:7b:
                    5d:56:00:3c:db:a3:e7:55:9a:6d:7d:42:00:68:62:
                    9a:20:f5:bb:34:a8:7b:d8:f3:94:55:8e:f5:77:d8:
                    ad:a6:7b:99:f5:ab:2e:71:b5:42:c8:5d:36:d1:15:
                    11:4c:df:4e:4e:c6:4b:62:e7:9d:a3:f4:58:e0:78:
                    d9:b0:4f:e0:b5:86:79:fa:5e:94:8b:66:f7:bb:ee:
                    5f:0c:ef:af:e2:05:7e:a6:8d:fd:6e:06:28:9e:78:
                    29:58:d2:f7:eb:9e:71:ad:14:fa:af:29:90:f9:53:
                    e2:6a:2a:22:48:06:c1:28:b0:81:43:86:79:9e:56:
                    e4:77:94:13:b6:d3:35:06:3a:d1:e3:6f:e4:fd:a2:
                    03:4d:60:1e:e6:f2:6a:20:c8:67:d8:4c:ae:77:c3:
                    4d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:7B:DA:D1:B5:32:42:6A:50:B1:B9:7F:6B:B4:2E:6E:52:3A:62:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/6210e133-eb91-305d-b703-1f4e8e26d25b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/f6414b99-bb9f-492a-a1ac-935a49935d9d.crl

            X509v3 Authority Key Identifier:
                keyid:5F:28:E0:AF:74:7D:2B:A5:14:85:04:6C:28:28:ED:ED:D7:F2:BD:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.51.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:8a:59:e5:a6:8a:4f:2a:45:76:81:b0:a7:a0:ac:28:ab:78:
         64:b5:f5:37:bf:ac:95:c9:22:d9:e3:96:ab:c0:1c:5a:56:fe:
         9d:d0:5b:1a:c5:9a:38:7b:c8:18:dc:2f:99:67:15:cb:79:ad:
         7a:8d:9c:26:0f:cf:49:5b:eb:60:db:74:59:a9:a0:94:9b:2f:
         07:0a:f0:2f:f5:cf:1b:ff:a0:90:bb:30:35:00:ce:23:be:55:
         2d:60:e4:0e:00:5e:ef:4e:e8:6e:b3:0d:89:e5:51:6e:f9:39:
         db:68:ee:fc:e2:b9:60:a0:91:3b:31:a2:1e:df:27:6c:de:ba:
         07:b8:f4:42:59:88:45:81:24:35:5c:4e:18:68:ec:03:22:a1:
         02:c0:ae:72:ba:d8:3b:2c:46:ba:84:7d:70:93:14:e6:f3:b2:
         7c:f4:df:7f:72:53:30:a8:cb:6b:e2:ad:9a:31:36:ec:e5:ca:
         96:b6:f5:6d:ed:32:0b:90:ac:9e:6f:9b:e1:3f:75:0a:3d:3c:
         4e:fd:82:a2:22:6a:61:7d:a4:57:35:53:6c:55:51:bc:50:64:
         5a:b7:4a:1f:66:07:69:f1:b1:0d:b1:dd:fa:63:fc:4e:9e:1d:
         cf:61:d7:e2:96:12:f3:08:34:08:4f:f9:6c:48:b1:3a:b9:66:
         ec:7b:c0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 05:28:08 2025 by rpki-client