Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ca198768-6c90-358d-877c-d83c912d41ab.roa
File:                     ca198768-6c90-358d-877c-d83c912d41ab.roa (raw, json)
Hash identifier:          f17JK7wu4UHyXBP6SrP2xWCpigfPzmbztxXAspo5P2g=
Subject key identifier:   82:0A:92:3A:9A:15:73:87:9F:EC:7D:41:9A:8B:6A:8E:42:6F:05:65
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584A71EB54BBC1F2B399FF912180
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ca198768-6c90-358d-877c-d83c912d41ab.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     137517
IP address blocks:        206.206.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:54:bb:c1:f2:b3:99:ff:91:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=e15074a0-6535-497e-a1f1-059b17e5ff20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:06:26:02:cf:89:ba:fb:f0:b2:d2:8e:15:99:
                    cc:19:9f:45:4a:ee:f2:4c:21:57:13:9e:d8:e3:bd:
                    77:93:03:d1:36:63:36:ab:2b:06:18:8a:6b:f6:02:
                    ab:93:79:3d:4c:4c:ed:cd:5c:59:05:cf:25:a8:0a:
                    b8:9f:1f:8f:c0:66:07:42:2c:57:45:8e:ed:73:9f:
                    bc:92:aa:bc:16:db:fa:53:ce:ff:62:df:a9:03:77:
                    6a:36:d4:cd:4d:8d:20:05:b2:56:94:98:3b:ba:9e:
                    62:65:47:6a:f7:89:41:40:ee:4d:70:a7:39:4e:8b:
                    d0:32:24:d4:99:bb:f2:de:24:e5:4a:3a:74:66:7a:
                    b9:de:dd:9e:75:57:55:a1:b3:cc:4c:c0:62:a3:98:
                    6c:08:7e:f3:87:08:63:70:11:b5:c6:c7:ee:ff:e1:
                    6b:91:bf:ff:6a:30:81:e2:73:8d:07:11:58:e7:28:
                    21:9b:66:bd:07:62:77:fa:12:28:8f:54:a1:38:05:
                    c6:ab:6c:d1:da:d3:1e:7e:7b:be:0b:9f:e9:c6:6f:
                    63:2d:63:a8:f1:86:c3:d1:6f:05:46:dd:7e:b3:56:
                    b3:27:d6:87:ff:a1:f9:89:89:e6:3c:94:5a:37:6b:
                    0d:bd:ac:99:97:c7:2f:c5:a9:b3:c6:4f:71:ac:1e:
                    b2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:0A:92:3A:9A:15:73:87:9F:EC:7D:41:9A:8B:6A:8E:42:6F:05:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ca198768-6c90-358d-877c-d83c912d41ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:c0:2b:1f:f2:ea:2c:d5:51:a3:95:a0:05:07:9e:d4:76:9e:
         21:b0:35:e2:f7:83:e4:21:3f:b5:50:d2:77:28:3f:09:1b:25:
         47:e8:37:3b:9d:64:67:12:c6:32:ad:14:26:db:d7:e8:20:4e:
         33:6e:5c:20:d4:39:98:4e:19:34:af:31:4c:8e:9a:cc:99:c4:
         14:66:5e:ca:fc:76:3a:f8:d7:31:ad:35:c8:35:8c:f5:ef:09:
         98:f4:0d:8a:00:4c:4e:c5:cb:7c:d5:11:49:72:3f:73:6d:2c:
         c9:ea:7f:8c:ba:9b:9a:f9:53:4d:95:37:f4:36:aa:6c:c7:fd:
         4c:c1:61:cd:0b:a2:a6:73:3b:6d:d3:51:f1:51:ee:37:d1:67:
         18:10:fe:91:f9:3f:48:09:e0:4b:15:ba:7b:27:62:4e:18:e2:
         fe:cf:e5:bb:20:44:34:31:be:e9:6d:92:ff:48:8c:73:28:9d:
         40:80:d0:89:df:a9:74:f1:ef:a7:1e:8c:2a:32:7e:51:9d:4c:
         74:87:0b:1e:e2:89:fd:e3:02:59:ff:76:88:a9:85:07:47:dc:
         33:1a:bb:a3:c3:e8:6c:8a:ee:24:50:c4:0e:39:f0:0b:50:5c:
         55:79:55:b0:55:e2:12:bf:42:e5:32:e4:60:e1:af:59:61:bf:
         4f:82:9d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:23:02 2025 by rpki-client