Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/a7f7373c-f50c-38d5-97db-f1a0ba3600db.roa
File:                     a7f7373c-f50c-38d5-97db-f1a0ba3600db.roa (raw, json)
Hash identifier:          p+7yy6yH0cjeQXH53gNt8Wg47DorR1k0WiwK8pjD9KU=
Subject key identifier:   37:68:22:E7:BE:8D:CF:A6:E1:34:39:A9:5F:1D:1F:B1:25:1E:A7:9A
Certificate issuer:       /CN=61078829-6930-46b0-9ac8-91898d36b056
Certificate serial:       010D0C9F4328584A62909F661639784C2B232100
Authority key identifier: 20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/a7f7373c-f50c-38d5-97db-f1a0ba3600db.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     33548
IP address blocks:        206.162.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:9f:66:16:39:78:4c:2b:23:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61078829-6930-46b0-9ac8-91898d36b056
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=2ab2ddc7-0354-47c3-81e9-1fb48c33f70d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:67:7d:b0:70:d4:67:f7:c1:61:82:7e:bc:c3:
                    be:f8:2f:98:52:0d:9c:bb:05:f1:51:41:93:61:e2:
                    2d:32:9d:1c:e1:1c:8e:59:c4:09:29:72:c5:09:a3:
                    94:23:de:55:34:92:40:90:40:1d:87:6d:84:d4:d5:
                    65:53:d7:43:f4:3d:a6:01:61:70:10:76:fb:ee:b9:
                    72:0c:93:62:eb:38:bb:45:6a:83:41:05:c6:74:5b:
                    31:8b:b3:88:ae:60:d0:78:f5:54:98:1f:66:6b:8c:
                    ac:5a:4e:5f:e6:61:ff:24:70:9b:8d:d9:34:ad:f0:
                    38:d8:93:1d:98:87:32:8d:9e:98:cf:e4:9c:a8:25:
                    b2:62:e3:d1:9d:34:ca:65:e7:31:d8:4c:15:8e:7c:
                    ba:5d:53:05:87:d3:11:85:ee:6a:fc:6e:7f:4a:39:
                    b6:04:8c:9b:a7:cc:a4:0c:53:3a:63:2a:4f:49:0f:
                    a9:a9:20:13:f5:9e:ef:23:8a:8f:0d:27:63:9b:75:
                    39:ba:c3:1a:47:8c:f4:06:5a:3a:ba:98:de:2e:89:
                    8e:d6:6b:02:15:94:56:c2:a3:04:26:36:7a:7c:11:
                    bb:2d:d0:6d:b0:cb:a2:92:75:7f:d6:5e:8f:83:8a:
                    2c:67:7f:4d:69:7b:74:c1:87:f4:f4:ec:e1:4b:bd:
                    60:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:68:22:E7:BE:8D:CF:A6:E1:34:39:A9:5F:1D:1F:B1:25:1E:A7:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/a7f7373c-f50c-38d5-97db-f1a0ba3600db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl

            X509v3 Authority Key Identifier:
                keyid:20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.162.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:8c:eb:b2:be:90:bc:6d:03:44:43:fe:ff:47:d8:c3:e1:bd:
         df:0b:33:aa:51:e5:c1:81:2d:7d:ec:e0:21:27:f0:e1:0b:ad:
         7f:67:42:06:62:79:49:4f:10:49:eb:24:2e:93:ea:12:82:ac:
         cf:87:ab:92:d6:4d:80:9c:1e:30:09:79:dc:a5:ae:49:e7:35:
         26:47:2f:25:ab:91:26:fe:5b:83:68:c4:0b:bd:f0:14:b6:78:
         03:49:53:c9:a4:a9:b3:8b:60:a6:00:88:51:5d:bb:b5:07:a8:
         97:aa:97:24:36:d4:83:ba:15:7f:d3:72:92:0f:32:93:85:54:
         99:e1:18:3c:e9:07:4c:b5:3c:9f:50:31:3f:1a:0b:84:5a:e5:
         cd:e3:36:4b:e4:a2:8c:9d:20:2e:4b:9f:47:57:8f:d7:39:c4:
         0d:c8:81:19:5c:9d:ba:fb:65:1e:31:1b:0e:36:e8:34:ee:d4:
         a2:75:4a:b5:a3:21:03:f8:b8:a9:23:0c:bd:d3:05:53:82:26:
         62:f0:1b:be:6a:82:ef:66:2f:f5:82:13:37:e9:50:ff:a6:c0:
         38:d6:15:ce:ae:ca:55:bf:7f:8c:8d:c6:08:15:c2:ae:a6:4c:
         ea:5c:97:e2:0d:3e:23:bc:23:d3:9d:bf:ed:25:bf:cf:be:59:
         b1:90:d3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 20:05:15 2025 by rpki-client