Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/1a554d21-9e17-3f96-a94b-91c96fdfa6bb.roa
File:                     1a554d21-9e17-3f96-a94b-91c96fdfa6bb.roa (raw, json)
Hash identifier:          KDB4+saeKHyTtyuzIWblk4xm/yB2/ihs3wTbs3TUqw4=
Subject key identifier:   F9:06:3A:26:BA:41:80:39:8E:F8:E8:47:78:E5:5B:6B:8B:2B:46:7F
Certificate issuer:       /CN=a2d891cb-6de8-4437-8155-3741bf9d4144
Certificate serial:       010D0C9F432858494733FBBE0EFAA3874E5A6380
Authority key identifier: 35:18:CE:6D:B2:C6:46:71:A0:E5:1A:1A:37:BE:E2:69:AB:CC:0C:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/1a554d21-9e17-3f96-a94b-91c96fdfa6bb.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     7018
IP address blocks:        206.183.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/a2d891cb-6de8-4437-8155-3741bf9d4144.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/a2d891cb-6de8-4437-8155-3741bf9d4144.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:fb:be:0e:fa:a3:87:4e:5a:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2d891cb-6de8-4437-8155-3741bf9d4144
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=fa2f606b-7c57-45d2-8909-0c57e6b03dec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:05:29:36:87:3a:c7:44:81:5a:13:3d:79:1a:
                    f6:23:d0:01:dc:58:de:c2:c3:58:e9:33:a5:90:be:
                    9d:ca:4b:b8:7e:28:2d:8c:e9:11:26:5d:0a:ba:1c:
                    e9:54:eb:44:50:5e:4f:53:48:ef:aa:e9:52:07:a9:
                    e8:61:64:ed:77:f6:5f:cb:35:db:d2:f4:54:dd:dd:
                    61:58:19:9e:61:fd:53:c2:fb:1f:6d:1b:c5:33:fe:
                    de:27:73:08:c3:12:6c:0a:43:7d:d3:1b:a5:e3:fe:
                    84:b3:8d:23:b2:d3:ce:47:3b:6d:66:22:9f:10:87:
                    a3:34:87:20:2d:fb:99:3d:e3:6a:74:af:b3:3e:67:
                    3e:57:ba:56:f2:c6:60:19:e0:a0:4d:2a:e8:09:30:
                    01:eb:2b:ca:66:6c:45:35:5d:45:34:ad:c5:02:21:
                    94:96:b5:57:4c:73:3d:2c:35:5f:cc:2f:f6:26:97:
                    91:14:f2:57:7c:9e:57:0f:af:90:cb:41:80:0f:d2:
                    67:b5:41:87:79:19:f9:dd:eb:9d:e2:53:94:32:e0:
                    09:8d:5d:ec:26:6d:52:0d:f5:ab:f0:61:d9:5c:df:
                    1e:42:d2:2c:5d:40:11:d4:85:54:07:4b:2a:de:80:
                    68:b7:ff:13:89:b3:d9:57:dd:d0:2d:a1:f0:c6:2c:
                    e3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:06:3A:26:BA:41:80:39:8E:F8:E8:47:78:E5:5B:6B:8B:2B:46:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/1a554d21-9e17-3f96-a94b-91c96fdfa6bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/a2d891cb-6de8-4437-8155-3741bf9d4144.crl

            X509v3 Authority Key Identifier:
                keyid:35:18:CE:6D:B2:C6:46:71:A0:E5:1A:1A:37:BE:E2:69:AB:CC:0C:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.183.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:a6:4c:6d:7d:a3:90:70:7d:78:5d:50:d9:20:84:b6:d7:52:
         d3:bd:77:76:52:5d:69:9c:f9:e1:cf:47:97:d0:72:76:e2:be:
         25:c6:34:17:de:65:5c:f9:3f:26:3b:98:5a:98:85:cd:37:03:
         ca:69:b9:eb:5f:f3:5b:9a:73:7a:66:46:18:20:cf:38:79:df:
         5b:6b:5a:dd:67:dd:41:ee:30:13:fe:7c:ac:0b:1d:4c:c1:05:
         ab:e0:34:c1:cf:14:4d:74:e5:01:38:72:7a:75:65:fd:1c:49:
         c9:d9:6e:e2:d5:2b:1a:e1:97:44:6a:46:7a:65:a9:ae:a7:2e:
         3f:6e:8d:81:b6:dc:28:24:3c:cf:a8:0b:b0:a2:4f:b8:8e:2c:
         54:40:fb:8e:ab:3d:22:8e:71:56:33:3b:bc:6a:da:24:28:aa:
         29:38:2c:c3:e1:4a:d7:4d:17:84:a1:92:a6:4a:db:d8:5f:47:
         23:99:45:55:e4:28:86:4d:b2:5d:fe:79:ea:c6:bf:93:fe:0b:
         6a:ff:70:51:be:e4:58:14:74:be:d4:65:2c:c6:26:c2:c6:5b:
         fb:40:6b:1f:3e:e9:97:fb:fd:a2:25:e0:92:50:0f:2f:b8:b4:
         01:ca:32:ac:f4:99:7a:4d:ed:85:4a:a8:79:6d:65:3a:02:10:
         a6:50:c0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:16 2025 by rpki-client