Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/4ea32607-4100-317f-8206-5f60b746e940.roa
File:                     4ea32607-4100-317f-8206-5f60b746e940.roa (raw, json)
Hash identifier:          Kt8DqhvuXqi4PPUgGfkpbE09kBHfoHeQqRg/SyGxD0U=
Subject key identifier:   24:8A:1B:02:50:4E:D6:AA:FA:36:90:58:93:1D:E5:CB:7C:3C:1C:1E
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584A7780A3832FBA08BA70E55300
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/4ea32607-4100-317f-8206-5f60b746e940.roa
Signing time:             Thu 10 Jul 2025 01:00:51 +0000
ROA not before:           Thu 10 Jul 2025 01:00:51 +0000
ROA not after:            Wed 08 Oct 2025 01:00:51 +0000
asID:                     376
IP address blocks:        206.167.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:77:80:a3:83:2f:ba:08:ba:70:e5:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Jul 10 01:00:51 2025 GMT
            Not After : Oct  8 01:00:51 2025 GMT
        Subject: CN=aeb916fe-02dc-47c7-a438-26c391c5f10f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f4:b5:87:ab:cc:d0:f8:22:45:5a:3a:c0:19:
                    e0:c5:09:03:78:97:c3:69:25:da:67:ac:99:3b:f3:
                    70:04:a4:52:4f:a7:d9:d2:50:9b:4b:0e:72:49:83:
                    70:db:e1:be:98:58:77:ae:69:57:66:c4:dc:f2:89:
                    45:07:d1:83:99:d3:de:44:99:b1:33:5e:ff:b4:28:
                    a7:f4:48:b5:94:58:5b:94:19:2a:71:d3:d3:f0:5b:
                    e4:06:56:cf:39:1e:00:e2:84:5f:fa:68:10:b2:bb:
                    01:6d:00:a1:17:94:2b:31:8f:95:14:3b:83:6d:69:
                    48:5e:e7:95:eb:83:e0:e1:38:97:ea:a9:3b:8a:47:
                    14:0c:18:40:aa:79:30:89:cd:2b:f8:37:e6:f3:ee:
                    c8:87:63:56:43:0c:1a:df:ad:d0:dd:3d:66:ab:af:
                    f9:4c:98:c9:13:3c:c7:be:4e:22:4d:8c:22:e0:46:
                    82:7e:ce:9e:4f:13:22:db:b8:40:21:e2:be:9e:6e:
                    7b:54:3a:77:68:66:ab:37:36:31:21:a0:b8:75:8a:
                    93:27:a4:fa:13:78:df:47:06:65:b0:3e:25:92:6b:
                    65:1a:d2:5c:5e:03:2b:3f:d4:25:8e:78:7c:92:a7:
                    11:2f:1a:13:f3:d8:51:ed:d1:1a:8e:bd:69:75:5c:
                    f8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:8A:1B:02:50:4E:D6:AA:FA:36:90:58:93:1D:E5:CB:7C:3C:1C:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/4ea32607-4100-317f-8206-5f60b746e940.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:dd:48:99:09:24:e7:64:71:70:f3:ce:8f:87:dd:85:a5:e6:
         6d:5b:25:6f:6b:2b:2c:af:69:28:42:5e:fd:14:c1:3d:6c:01:
         4a:d5:46:26:19:49:83:c5:73:ed:38:b4:c7:9c:77:18:a0:f9:
         6b:1f:2e:16:1a:46:31:d3:38:a2:b1:99:1b:2d:e4:6a:6c:e5:
         fb:bf:ca:89:ee:d6:17:07:53:9f:0b:92:4d:1d:4c:87:fa:f6:
         0d:36:75:ee:3b:4d:1f:85:6b:39:88:bf:a0:fc:4b:00:cf:6d:
         9f:18:64:18:48:a7:37:83:21:27:8e:d2:2c:f6:a6:a6:9b:24:
         1f:3a:2a:cf:a5:fe:d4:e9:fc:29:48:9d:af:f4:f4:fb:b2:06:
         d5:fe:26:dd:05:47:6c:82:19:3f:c5:60:d9:d4:46:3d:bb:ae:
         6e:36:43:00:54:46:f8:56:c7:09:e5:d1:c8:87:b0:d3:b6:68:
         39:c0:25:9b:52:cc:de:ef:96:92:be:9c:d6:aa:16:31:d3:21:
         f4:02:e2:55:d8:bf:a4:2d:58:05:2e:56:dc:85:0e:c4:cd:ef:
         e8:3a:82:b2:22:e2:91:e7:69:97:73:4c:ac:f3:f0:cf:7a:cc:
         c8:ba:b8:a2:35:85:a2:3e:1f:3c:8c:ff:3e:95:f3:04:0a:c7:
         3d:1c:86:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:29:07 2025 by rpki-client