Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/b5bccd91-72af-3e72-9e98-e575bcfa392f.roa
File:                     b5bccd91-72af-3e72-9e98-e575bcfa392f.roa (raw, json)
Hash identifier:          pU3HUPzWE2ZqBjq9DzbcYk5pmJo6rqdk13yvtWd/8hI=
Subject key identifier:   8F:81:A9:1C:DD:9A:EC:81:E4:32:9B:5C:15:AF:30:A9:7C:38:DF:86
Certificate issuer:       /CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
Certificate serial:       010D0C9F4328584A331AF79F8838954491709DC0
Authority key identifier: 80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/b5bccd91-72af-3e72-9e98-e575bcfa392f.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     16410
IP address blocks:        192.112.245.0/24 maxlen: 24
                          205.157.203.0/24 maxlen: 24
                          205.157.204.0/24 maxlen: 24
                          205.157.240.0/24 maxlen: 24
                          205.157.242.0/24 maxlen: 24
                          205.157.244.0/24 maxlen: 24
                          205.157.245.0/24 maxlen: 24
                          205.157.246.0/24 maxlen: 24
                          205.157.247.0/24 maxlen: 24
                          205.157.248.0/24 maxlen: 24
                          205.157.249.0/24 maxlen: 24
                          205.157.250.0/24 maxlen: 24
                          205.157.251.0/24 maxlen: 24
                          205.157.254.0/24 maxlen: 24
                          205.157.255.0/24 maxlen: 24
                          206.180.0.0/23 maxlen: 23
                          206.180.2.0/24 maxlen: 24
                          206.180.3.0/24 maxlen: 24
                          206.180.4.0/24 maxlen: 24
                          206.180.5.0/24 maxlen: 24
                          206.180.6.0/24 maxlen: 24
                          206.180.7.0/24 maxlen: 24
                          206.180.8.0/24 maxlen: 24
                          206.180.10.0/24 maxlen: 24
                          206.180.11.0/24 maxlen: 24
                          206.180.12.0/22 maxlen: 22
                          206.180.18.0/24 maxlen: 24
                          206.180.19.0/24 maxlen: 24
                          206.180.25.0/24 maxlen: 24
                          206.180.27.0/24 maxlen: 24
                          206.180.28.0/24 maxlen: 24
                          206.180.29.0/24 maxlen: 24
                          206.180.30.0/24 maxlen: 24
                          206.180.36.0/24 maxlen: 24
                          206.180.37.0/24 maxlen: 24
                          206.180.38.0/24 maxlen: 24
                          206.180.39.0/24 maxlen: 24
                          206.180.52.0/24 maxlen: 24
                          206.180.53.0/24 maxlen: 24
                          206.180.54.0/24 maxlen: 24
                          206.180.55.0/24 maxlen: 24
                          206.180.56.0/24 maxlen: 24
                          206.180.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:f7:9f:88:38:95:44:91:70:9d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=aebedc90-e545-40d9-8d81-156f84b46933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:75:db:bd:ac:58:79:94:cd:c1:08:19:b6:09:
                    75:bd:da:35:14:fd:22:80:01:f6:33:da:4a:ff:27:
                    d8:28:8b:bc:13:49:0d:58:90:1a:9c:6d:28:22:1e:
                    5f:60:75:a2:cd:be:84:35:c1:47:8c:56:2d:f1:59:
                    38:fd:38:7e:5e:fd:cd:5e:84:8c:64:53:02:07:da:
                    4a:5e:9f:f8:9f:28:94:ce:e2:90:22:a1:42:6f:c5:
                    d2:54:2f:7b:7e:3c:98:71:d5:b3:d1:f8:c6:eb:5f:
                    05:cf:1c:b2:4f:2f:b6:b1:5c:72:31:e2:d8:37:11:
                    02:dd:b3:e3:66:38:72:0b:d1:e4:a5:8b:ee:f4:81:
                    0b:bc:64:fc:46:0a:6b:dc:2d:7a:8d:a9:83:1f:7f:
                    27:ff:69:78:85:ce:1b:d0:e5:07:be:f0:17:ce:3e:
                    47:25:5e:91:69:fe:e6:3e:5f:cf:c5:94:96:c5:37:
                    11:75:7b:5f:67:9c:63:85:23:e3:c4:3d:57:6d:a3:
                    c1:41:3f:2b:43:7f:8a:c9:6e:82:62:cb:08:f1:d2:
                    cd:a5:54:a0:ce:f5:58:09:ce:63:0c:c8:69:d5:7c:
                    e8:ea:73:38:d6:26:57:18:bc:bd:82:5f:db:f4:89:
                    76:46:cd:49:93:85:a9:e1:29:33:c3:eb:18:b5:42:
                    f6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:81:A9:1C:DD:9A:EC:81:E4:32:9B:5C:15:AF:30:A9:7C:38:DF:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/b5bccd91-72af-3e72-9e98-e575bcfa392f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.crl

            X509v3 Authority Key Identifier:
                keyid:80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.112.245.0/24
                  205.157.203.0-205.157.204.255
                  205.157.240.0/24
                  205.157.242.0/24
                  205.157.244.0-205.157.251.255
                  205.157.254.0/23
                  206.180.0.0-206.180.8.255
                  206.180.10.0-206.180.15.255
                  206.180.18.0/23
                  206.180.25.0/24
                  206.180.27.0-206.180.30.255
                  206.180.36.0/22
                  206.180.52.0-206.180.56.255
                  206.180.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:d8:bb:f5:b4:a5:e7:45:9a:16:c8:63:19:0a:0f:88:5d:29:
         9f:ff:69:78:d7:69:7e:b9:bb:9e:d6:e7:a5:14:af:58:f7:b0:
         d1:8c:57:1f:e9:d1:78:35:b9:ba:24:c0:d2:72:0c:25:0b:fe:
         9a:ac:70:01:60:54:aa:12:80:47:23:31:80:f4:f4:9c:28:de:
         90:86:5b:f2:88:c4:3a:c0:d2:d5:ae:d5:23:76:70:13:3a:72:
         13:4b:3c:fa:96:e2:b7:32:f1:29:dc:35:9b:ce:a4:eb:d0:86:
         cb:93:07:59:3f:64:cc:0e:22:26:4a:34:df:ab:58:b4:e4:f2:
         99:d6:f4:0e:69:36:d1:f5:4e:9b:d3:b8:20:90:fc:df:28:61:
         ba:35:80:95:d6:82:67:4f:a6:34:19:24:6e:33:63:25:43:5c:
         16:7e:a2:38:c0:dd:c8:30:19:db:40:d8:2b:02:17:02:c4:70:
         26:57:fd:88:43:29:ea:b1:16:1d:05:8c:c6:ee:ff:b4:9a:33:
         fd:04:04:99:f6:76:ba:79:00:2d:45:92:04:8d:1b:be:b2:0c:
         50:10:5f:5b:33:e1:ad:d4:ac:54:7f:ed:c1:64:f7:32:43:43:
         e6:a5:36:25:38:6c:31:17:e0:27:af:42:f2:bc:f0:50:f8:e1:
         93:dc:19:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 04:37:13 2025 by rpki-client