Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/fc2beedf-cafc-3658-b3dd-125f2ba3d10d.roa
File:                     fc2beedf-cafc-3658-b3dd-125f2ba3d10d.roa (raw, json)
Hash identifier:          P6EqG+UoVXa/WjhtyPwkEta3G6vyzMCeYwFU9qc8A4Q=
Subject key identifier:   62:ED:2E:26:95:83:17:0F:59:A7:29:E7:40:1D:36:0E:4C:92:3C:6A
Certificate issuer:       /CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99
Certificate serial:       010D0C9F43285849E91FA7103D440655D7BB9660
Authority key identifier: B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/fc2beedf-cafc-3658-b3dd-125f2ba3d10d.roa
Signing time:             Tue 20 May 2025 01:00:49 +0000
ROA not before:           Tue 20 May 2025 01:00:49 +0000
ROA not after:            Mon 18 Aug 2025 01:00:49 +0000
asID:                     0
IP address blocks:        206.41.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Jun 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e9:1f:a7:10:3d:44:06:55:d7:bb:96:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99
        Validity
            Not Before: May 20 01:00:49 2025 GMT
            Not After : Aug 18 01:00:49 2025 GMT
        Subject: CN=2db671c6-27d3-4818-a3c1-054e6b528fde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:14:9f:b1:66:93:89:f2:cd:fb:22:f0:b0:90:
                    77:f6:70:0d:24:ef:88:7c:0b:3b:cf:4b:2b:77:79:
                    c7:d5:b8:cc:4d:45:0e:ed:9e:80:a8:26:89:e5:9b:
                    ad:1f:c0:4a:56:3a:db:f6:f2:d5:95:a0:4e:a7:61:
                    50:dd:c3:ac:fc:86:c1:9a:42:8a:31:c4:65:c7:e6:
                    21:82:c2:87:f6:55:af:e4:2b:9e:72:90:7c:05:76:
                    c8:fe:46:dc:43:10:ef:f9:7e:a5:51:e4:18:ac:1a:
                    2a:ab:5b:68:bc:fc:f8:f0:63:20:cd:64:dc:b9:a3:
                    21:53:ca:ad:b0:fa:57:c3:d0:45:cc:75:5d:b6:d7:
                    07:c9:a2:54:2c:75:ba:29:50:39:02:e4:7d:49:c8:
                    13:2d:82:bf:ae:a5:91:5a:e8:64:33:93:8e:3f:49:
                    85:ad:8e:41:95:cd:9e:10:53:ed:b1:ab:3a:0a:8f:
                    ee:ff:c1:1d:14:ea:45:66:25:e0:91:66:d0:b8:4f:
                    ee:3f:58:d7:01:fb:e4:1c:3b:87:b1:74:4a:63:f9:
                    09:4a:81:ba:f2:af:2a:eb:71:73:4d:c6:19:fc:b7:
                    6c:ca:bf:59:d0:70:64:7c:25:91:21:2f:6a:6c:5c:
                    3d:18:3a:be:63:1f:7e:bc:fa:ad:2d:a3:04:f6:23:
                    07:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:ED:2E:26:95:83:17:0F:59:A7:29:E7:40:1D:36:0E:4C:92:3C:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/fc2beedf-cafc-3658-b3dd-125f2ba3d10d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl

            X509v3 Authority Key Identifier:
                keyid:B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.41.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:a4:d0:4b:88:7f:9f:3e:29:7f:a8:5a:07:de:c1:19:7b:65:
         28:e1:7d:bd:ce:48:7b:c0:aa:2c:cc:93:55:8b:5f:97:45:6a:
         62:da:db:ef:9c:bb:40:80:f4:95:c8:15:6f:a8:d2:a0:f1:d4:
         4d:f1:1c:85:b7:b1:f9:81:ef:73:3d:67:ee:78:f8:c0:b3:91:
         46:e9:7a:26:82:21:89:0c:3c:9e:d9:c7:57:ad:54:e5:31:b6:
         75:03:67:c9:dc:10:b5:27:0e:e2:58:cb:a7:59:33:fb:52:2a:
         c1:8a:b4:c9:e6:56:62:35:e9:a0:18:71:e5:97:82:15:4a:85:
         2c:fa:69:59:2a:4e:1d:f2:1b:1b:1f:d0:b1:83:ff:38:f5:d7:
         88:9a:2e:c6:ab:4e:53:89:c9:b5:9a:d0:cc:8e:a2:47:65:43:
         29:d5:8f:57:5c:c7:c1:12:57:1e:23:da:bb:78:c7:6f:30:ea:
         56:a1:e6:ea:fd:ea:10:e0:ed:35:d8:d0:55:e3:6f:a1:58:39:
         5a:1c:47:62:76:50:fb:bf:e4:1f:5e:6a:0e:81:02:74:57:24:
         a1:75:ac:45:a8:cb:61:18:52:f2:a2:f7:28:f0:76:14:3f:86:
         00:2c:55:0d:7f:c9:cb:e8:74:af:5c:0f:ce:38:61:f1:dd:b6:
         a8:9c:f3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 03:26:41 2025 by rpki-client