Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/05b1b493-9d94-3e6b-81eb-2cf069390bb0.roa
File:                     05b1b493-9d94-3e6b-81eb-2cf069390bb0.roa (raw, json)
Hash identifier:          zHUYwpG9CgF39S+yohZ5RaNie5t1qwADUKIZJRRXLBk=
Subject key identifier:   00:69:E5:3B:47:05:2E:B7:08:CC:C0:EA:10:0D:8C:B0:11:AD:5A:56
Certificate issuer:       /CN=a2d891cb-6de8-4437-8155-3741bf9d4144
Certificate serial:       010D0C9F4328584B0746BB571CA2A766546B8380
Authority key identifier: 35:18:CE:6D:B2:C6:46:71:A0:E5:1A:1A:37:BE:E2:69:AB:CC:0C:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/05b1b493-9d94-3e6b-81eb-2cf069390bb0.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     7029
IP address blocks:        206.183.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/a2d891cb-6de8-4437-8155-3741bf9d4144.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/a2d891cb-6de8-4437-8155-3741bf9d4144.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:bb:57:1c:a2:a7:66:54:6b:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2d891cb-6de8-4437-8155-3741bf9d4144
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=fb50ce41-8343-4926-b6f2-f6e953c00722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:aa:48:47:7b:a0:31:11:39:ea:e3:28:16:c7:
                    ba:04:65:91:41:4e:b1:bc:8d:71:d8:f1:4d:29:8e:
                    a1:46:87:bd:45:1d:37:18:e7:17:d2:8f:f5:30:01:
                    9c:96:3f:e3:26:0a:5d:15:88:10:4e:b0:ed:ad:b8:
                    79:9b:be:28:88:40:01:36:1d:76:b0:93:64:9f:09:
                    d7:93:0d:94:12:4d:bb:92:32:26:7f:36:45:5e:46:
                    da:83:b8:71:f4:41:87:c0:be:44:2f:7e:5c:30:98:
                    53:1a:49:93:b7:05:63:74:3c:d6:f4:22:f7:af:86:
                    c1:e7:23:9a:c3:dd:8c:c8:3e:ba:fb:2d:af:ed:43:
                    74:7e:7a:1b:8d:45:cb:64:d1:2a:d8:bf:79:44:8c:
                    29:e0:93:e6:19:e9:1d:f9:31:2b:d1:0a:c8:b9:ce:
                    0b:6d:85:bd:62:fe:27:48:e4:98:e9:d1:91:85:7b:
                    7c:f7:72:fa:59:a7:11:04:3b:47:23:7c:dc:84:21:
                    f8:17:f4:3c:07:6e:98:70:26:91:f5:1b:f4:15:7b:
                    40:59:71:e5:19:ee:8b:8c:0d:5a:6b:62:fc:92:49:
                    d6:82:c9:dc:2c:47:93:44:53:51:d6:cf:5e:3c:c8:
                    71:3e:33:c1:8d:7b:dc:18:94:4d:14:3c:0f:78:41:
                    1e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:69:E5:3B:47:05:2E:B7:08:CC:C0:EA:10:0D:8C:B0:11:AD:5A:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/05b1b493-9d94-3e6b-81eb-2cf069390bb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/a2d891cb-6de8-4437-8155-3741bf9d4144.crl

            X509v3 Authority Key Identifier:
                keyid:35:18:CE:6D:B2:C6:46:71:A0:E5:1A:1A:37:BE:E2:69:AB:CC:0C:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.183.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:56:1c:47:69:77:9d:2a:2d:94:5c:94:9a:39:4d:a0:ef:4a:
         d7:05:de:57:c1:dc:fa:7d:3e:e2:67:90:9e:6e:7e:d0:19:44:
         82:63:1c:d6:bc:e1:3c:d7:2f:91:2e:9d:a8:40:c7:1c:9e:57:
         c1:0e:cc:d5:f7:04:8e:88:b2:32:48:20:b2:1b:18:f1:21:36:
         19:b2:8d:81:1c:24:48:6b:e3:d5:0a:1a:7f:29:47:eb:79:57:
         f8:95:2b:58:ff:c5:20:e5:ef:06:95:88:65:0f:07:70:e6:50:
         c4:a6:16:69:ec:6e:c8:68:eb:65:b2:d7:3e:13:da:3a:ba:9a:
         87:e2:fc:bf:95:fc:a9:a7:a1:57:e8:72:27:14:ff:b0:d7:d9:
         18:91:b5:ba:7e:7f:45:a2:b9:68:ab:ad:ed:9c:f7:1c:4e:a9:
         4b:ce:05:a7:72:f3:0b:02:c3:dd:1d:40:46:bd:04:a6:69:87:
         0e:2b:b2:e2:15:fb:ac:13:89:9d:5d:04:9e:e6:a9:f2:9c:00:
         db:7b:74:48:96:d6:03:24:bc:66:c7:f8:db:6f:89:47:18:9c:
         55:2f:09:d8:e6:50:76:ec:7c:e0:04:72:75:2a:64:a0:6e:91:
         8a:a2:68:e0:60:9b:2c:7e:a4:6b:fe:a0:f4:87:d0:6a:65:08:
         82:0a:3c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 08:39:35 2025 by rpki-client