Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/4e06e6a8-5eb3-3c2d-bcc7-cbebac830e1e.roa
File:                     4e06e6a8-5eb3-3c2d-bcc7-cbebac830e1e.roa (raw, json)
Hash identifier:          /mbOlRxvxjkzXDfYWleGk/EivCAjr2ZPKWeNfwbwCTM=
Subject key identifier:   34:AC:7D:0E:4B:4C:3C:4E:12:54:15:CA:0C:6E:7D:1A:82:00:1B:0E
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584A7780A5193664484FB57A4D00
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/4e06e6a8-5eb3-3c2d-bcc7-cbebac830e1e.roa
Signing time:             Thu 10 Jul 2025 01:00:51 +0000
ROA not before:           Thu 10 Jul 2025 01:00:51 +0000
ROA not after:            Wed 08 Oct 2025 01:00:51 +0000
asID:                     376
IP address blocks:        206.167.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:77:80:a5:19:36:64:48:4f:b5:7a:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Jul 10 01:00:51 2025 GMT
            Not After : Oct  8 01:00:51 2025 GMT
        Subject: CN=04f8816d-a373-47b4-96e6-8e84d12f3c54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a7:10:ab:14:e9:9f:e8:53:e3:26:f4:c3:54:
                    a6:3f:08:99:fe:e0:39:00:18:03:98:1f:65:4f:5d:
                    b2:35:7d:d9:d8:2e:96:bc:7b:e2:44:df:bb:47:fc:
                    f9:96:a1:bd:8d:45:5e:fa:0f:64:4d:b4:2c:1a:1f:
                    e4:a0:57:9c:eb:ef:56:dc:b0:e6:b9:8c:2e:9e:c0:
                    7b:4e:2c:92:d9:a4:2e:ab:a2:ce:66:73:10:2c:da:
                    bf:d1:59:e1:56:93:2c:a8:cd:86:26:7d:84:bc:88:
                    14:9c:31:30:d2:21:62:7d:f4:de:98:36:79:71:af:
                    6c:1e:67:c4:f6:7b:54:93:4c:4b:cd:4a:b2:cb:fe:
                    02:86:a3:c7:fd:4f:de:7e:24:2e:cc:c6:ac:93:b9:
                    8d:aa:58:9e:91:90:3e:5f:43:2f:13:fc:0f:6f:b4:
                    3b:1b:28:7a:63:89:5b:4c:f0:26:a7:17:7b:1a:9b:
                    9b:2e:d8:29:2b:b0:74:d4:55:21:b8:54:e1:18:94:
                    df:a4:1e:c1:b0:9c:19:21:8e:0c:60:bf:13:24:0c:
                    86:97:e9:b9:12:6d:03:62:c7:31:8c:c9:f2:12:36:
                    3e:01:ca:c6:3a:61:a3:68:83:da:4a:29:01:42:99:
                    cb:02:08:ac:85:e5:5a:a3:26:e3:77:60:be:e9:ca:
                    ef:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:AC:7D:0E:4B:4C:3C:4E:12:54:15:CA:0C:6E:7D:1A:82:00:1B:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/4e06e6a8-5eb3-3c2d-bcc7-cbebac830e1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:98:9b:dc:e7:1b:d6:56:8b:71:ce:be:b4:6f:d6:b3:bb:ca:
         5d:2c:0f:47:9e:69:13:6a:10:c5:34:71:bd:79:07:82:a8:fd:
         cb:da:58:49:70:8a:61:27:e1:1d:68:16:28:0c:a8:ff:a7:3f:
         a2:43:d3:31:fc:6b:33:a9:37:17:eb:85:6d:38:14:18:a3:47:
         ea:96:e5:4f:13:95:ba:02:36:4f:fb:16:7b:8b:d6:3a:77:f2:
         68:c7:b1:00:ee:1a:7f:38:0b:b1:96:ad:b1:60:8c:b6:51:f8:
         c9:d5:d0:a7:83:5a:46:5e:0c:1d:db:c5:4a:95:40:09:39:37:
         f1:73:67:4e:21:44:ba:19:ec:b7:1c:f6:83:38:35:02:e2:79:
         74:99:ed:e6:fe:01:b6:15:bc:ee:35:27:2a:c1:22:95:1e:1e:
         1d:15:30:b7:c4:1c:29:f4:ff:6f:fd:0f:f0:0c:7f:12:8f:ea:
         ab:d7:ff:d8:03:70:9d:b2:4f:ec:56:e8:99:ac:fb:10:42:58:
         67:f0:0a:5a:7c:82:df:21:45:34:7b:47:cf:8c:33:e4:57:e9:
         71:0b:07:86:74:73:77:63:4f:56:8a:ae:ac:2f:71:ea:9e:67:
         6b:6e:9c:91:dc:5b:d4:f2:54:c8:99:19:90:3b:b0:71:ca:64:
         00:d9:7b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:59:55 2025 by rpki-client