Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/1f7d990c-09db-355a-a9de-5d66f6acd83c.roa
File:                     1f7d990c-09db-355a-a9de-5d66f6acd83c.roa (raw, json)
Hash identifier:          oaGwzpdtzqPG+lNT1ktzz3a9XKKhou4Ls/+eQtG1ADw=
Subject key identifier:   A2:FD:77:40:7B:22:3A:A3:4D:01:88:72:73:D2:EC:5E:93:2A:C7:CA
Certificate issuer:       /CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
Certificate serial:       010D0C9F4328584A3BA43034B6BBF0F9C3FC5380
Authority key identifier: 80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/1f7d990c-09db-355a-a9de-5d66f6acd83c.roa
Signing time:             Fri 13 Jun 2025 01:00:51 +0000
ROA not before:           Fri 13 Jun 2025 01:00:51 +0000
ROA not after:            Thu 11 Sep 2025 01:00:51 +0000
asID:                     63344
IP address blocks:        206.180.20.0/23 maxlen: 24
                          206.180.32.0/24 maxlen: 24
                          206.180.34.0/24 maxlen: 24
                          206.180.44.0/24 maxlen: 24
                          206.180.46.0/24 maxlen: 24
                          206.180.47.0/24 maxlen: 24
                          206.180.48.0/24 maxlen: 24
                          206.180.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:a4:30:34:b6:bb:f0:f9:c3:fc:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
        Validity
            Not Before: Jun 13 01:00:51 2025 GMT
            Not After : Sep 11 01:00:51 2025 GMT
        Subject: CN=23cab68c-5f8f-4f20-aaa7-1354860416d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0a:6f:5f:8f:4e:a3:39:88:a3:37:56:45:99:
                    a7:64:ef:f4:c6:29:77:79:ed:7f:55:21:d7:6e:e6:
                    f6:7a:97:b0:06:88:71:ca:08:1e:e9:18:6f:8a:3a:
                    35:ba:09:13:9c:e6:3b:64:d3:be:ba:42:b7:59:3d:
                    31:a7:16:27:94:2c:ed:c3:63:89:d6:11:9b:83:16:
                    60:ed:a5:ba:78:69:89:ef:f3:ea:e5:b4:c5:9c:00:
                    d6:47:bf:90:c0:9b:73:e5:b5:ea:7a:47:bf:66:5b:
                    de:49:d7:83:5d:38:4a:41:5e:aa:0e:45:4b:29:fc:
                    5d:ca:4d:98:4b:2d:aa:63:0f:6d:ed:c9:5f:f9:fb:
                    99:63:e0:93:90:21:6a:92:21:03:a7:47:7c:a3:8d:
                    a4:0b:9f:4c:84:a3:eb:ff:c9:76:67:3c:b4:1b:49:
                    be:6c:39:61:46:4e:4f:8d:de:15:55:f7:0f:f5:fc:
                    0d:b3:7c:f4:ca:c7:83:ac:ca:71:88:97:92:e3:a7:
                    36:ca:68:e5:b1:dd:35:99:4e:b3:9a:a7:bd:6c:89:
                    31:8c:fe:33:ba:29:70:8d:8c:06:1d:d1:1b:a3:c0:
                    aa:91:c3:de:b9:e0:04:e2:00:6b:77:a5:a3:fe:c5:
                    bf:60:c7:7c:ed:83:e6:95:92:c5:be:6c:f0:35:de:
                    4d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:FD:77:40:7B:22:3A:A3:4D:01:88:72:73:D2:EC:5E:93:2A:C7:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/1f7d990c-09db-355a-a9de-5d66f6acd83c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.crl

            X509v3 Authority Key Identifier:
                keyid:80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.20.0/23
                  206.180.32.0/24
                  206.180.34.0/24
                  206.180.44.0/24
                  206.180.46.0-206.180.48.255
                  206.180.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:5c:61:1d:c2:0a:09:fc:bc:a6:ee:92:76:0c:12:66:dd:3d:
         6b:19:81:73:08:89:0f:bc:16:f0:cf:a4:8f:b5:b9:5e:53:de:
         c9:2a:3a:b9:3e:ae:a0:32:04:32:25:d4:36:e0:f8:db:f7:29:
         b1:df:23:40:0d:8c:52:dd:45:3a:4a:91:94:b4:1e:5c:bb:16:
         fb:64:9a:97:72:a7:f2:a3:7d:6c:01:63:e0:f1:89:f3:5c:e7:
         d3:2e:36:29:07:83:58:48:a0:a2:87:48:90:c3:ee:db:66:a2:
         58:93:54:1b:79:b2:1a:96:f5:4c:46:9b:91:da:a0:8d:79:25:
         22:f6:85:97:8c:f6:ba:60:fd:2a:d9:01:cd:bf:32:08:f9:9e:
         98:dc:1f:c4:34:8e:fc:1f:db:42:08:32:36:ae:9b:eb:94:d2:
         4a:a1:54:42:22:e3:cb:0f:c2:d0:5c:2b:48:b0:d6:11:28:17:
         bc:98:00:1a:ea:ab:82:55:f2:0e:2c:5d:ca:8e:2c:73:fc:d0:
         1e:b0:9e:0d:5c:08:34:38:3e:c1:74:70:5b:58:45:4f:8e:e8:
         6d:20:39:3f:00:82:89:51:31:62:9b:cb:63:b6:69:04:39:c7:
         3e:9c:49:22:77:0a:9f:36:e5:a0:7d:fd:6b:84:5f:63:50:58:
         64:85:ef:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 21:21:01 2025 by rpki-client