Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/0d8e67f0-b29b-3bc9-9671-8f3a17955443.roa
File:                     0d8e67f0-b29b-3bc9-9671-8f3a17955443.roa (raw, json)
Hash identifier:          8BjXGwfaRk0PPloqRF/P/jK3u1E6sERvL0qVI55ar9Q=
Subject key identifier:   B5:E9:20:28:C6:5E:F9:F2:40:FE:FB:08:27:CB:16:04:EF:30:7E:D7
Certificate issuer:       /CN=6c7a9179-b71c-4608-b6ad-37c021ece676
Certificate serial:       010D0C9F4328584A6C55DD8AD6F4101D9B5FCC80
Authority key identifier: A4:AA:05:6E:EC:2E:BF:7A:43:54:F8:C6:CF:73:36:6C:C3:8D:26:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/0d8e67f0-b29b-3bc9-9671-8f3a17955443.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     208889
IP address blocks:        206.168.135.0/24 maxlen: 24
                          2602:fbd9:ff0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/6c7a9179-b71c-4608-b6ad-37c021ece676.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/6c7a9179-b71c-4608-b6ad-37c021ece676.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:dd:8a:d6:f4:10:1d:9b:5f:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c7a9179-b71c-4608-b6ad-37c021ece676
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=89219378-b427-4cb2-9494-d333f339689b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f1:0b:eb:17:f6:67:8d:ce:b2:cd:95:2f:63:
                    54:6d:4b:0e:6b:3f:e3:59:6d:39:9a:d0:a7:64:6b:
                    b2:ae:4f:ba:b2:9d:1d:c9:1c:ad:34:5b:42:c5:e4:
                    d4:da:bb:73:ca:87:63:42:ff:03:58:37:fb:67:20:
                    9e:51:fb:97:a0:9b:a3:57:59:e2:36:ac:24:89:ea:
                    fd:b2:80:5a:aa:56:1c:47:f3:2b:7d:63:b0:59:38:
                    3e:ad:25:bb:58:0d:fe:e1:19:ab:12:36:6c:e0:a7:
                    96:38:25:5f:7f:02:b9:8b:18:23:6d:25:33:a1:67:
                    9a:de:c7:81:5b:3c:12:8f:63:34:54:e5:d0:cc:5b:
                    14:48:ec:72:a5:bc:c5:c0:09:48:0f:de:60:52:e4:
                    f1:d4:8f:5b:2b:d4:0d:f4:3e:a1:94:1d:6d:51:88:
                    d2:34:77:46:72:7e:bb:c2:26:d1:f6:b4:59:37:75:
                    a3:42:f8:8a:70:34:20:d4:6e:73:0a:29:92:97:c5:
                    58:39:02:af:64:a9:17:10:d3:e8:48:67:c3:14:85:
                    b1:f4:05:f4:11:60:cc:85:40:dd:53:71:52:d8:04:
                    9c:43:52:9c:67:cf:63:e9:72:b3:cc:08:f1:e1:14:
                    ab:0d:90:6e:b6:35:8e:e6:d7:69:dd:f0:61:e6:46:
                    fb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E9:20:28:C6:5E:F9:F2:40:FE:FB:08:27:CB:16:04:EF:30:7E:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/0d8e67f0-b29b-3bc9-9671-8f3a17955443.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/6c7a9179-b71c-4608-b6ad-37c021ece676.crl

            X509v3 Authority Key Identifier:
                keyid:A4:AA:05:6E:EC:2E:BF:7A:43:54:F8:C6:CF:73:36:6C:C3:8D:26:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.135.0/24
                IPv6:
                  2602:fbd9:ff0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:6a:7a:1b:c0:1a:56:b8:8c:d9:6d:41:be:49:d3:ed:c3:59:
         9a:41:10:87:ab:0f:21:7c:25:87:d1:f2:e0:d2:59:da:94:07:
         39:cd:9e:7b:61:1b:ad:cf:1b:26:7b:ef:b6:4f:84:5a:ea:37:
         14:80:1b:b2:3d:23:1e:3e:7d:d7:a1:ec:db:7d:6f:95:d1:88:
         a2:6f:cd:30:c6:38:6b:9c:37:8d:d6:ee:77:6a:7a:40:ea:6e:
         c8:7c:fd:5d:47:c5:78:8f:2f:2a:22:9a:ba:49:f0:3b:2b:fc:
         47:c4:03:5d:a3:84:bc:09:32:6c:8b:85:22:a9:21:f2:fa:3e:
         ce:c7:04:6b:9a:82:20:a2:38:08:be:e3:b1:0a:39:ef:4d:b1:
         fe:cf:c5:51:47:23:d5:e4:f3:41:db:8b:86:5c:8c:15:ce:59:
         9d:ef:24:13:5e:08:90:20:35:4e:d7:30:c0:25:87:12:3e:93:
         aa:a5:11:eb:2b:1d:b3:8d:9b:27:e6:6d:a7:98:78:c7:ca:92:
         f9:28:34:55:8e:f5:15:2a:a5:7a:44:01:51:ac:62:11:da:8d:
         29:b9:ae:ee:24:45:71:8e:13:bb:8e:c4:77:73:f1:31:a5:20:
         af:c5:82:6a:18:67:c1:fd:74:94:69:fd:06:64:b5:6c:b1:b3:
         8a:0e:98:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:14:26 2025 by rpki-client