Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/d08be9f7-10a8-3b17-8ee4-3bac02c49038.roa
File:                     d08be9f7-10a8-3b17-8ee4-3bac02c49038.roa (raw, json)
Hash identifier:          o8K7KZyJQNfY4girvHghmLAZ8VBlaBTlFUNu6HF4hOM=
Subject key identifier:   0E:E1:A0:84:97:C7:42:FE:D2:E9:B8:AF:DA:C4:93:FA:93:79:D7:BF
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F432858492CB21B8F371C2627F5E6B0C0
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/d08be9f7-10a8-3b17-8ee4-3bac02c49038.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     393740
IP address blocks:        206.180.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b2:1b:8f:37:1c:26:27:f5:e6:b0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=89237b0f-ecb5-421c-ab1b-fffc88d4fdd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2e:98:cd:a8:c2:eb:6d:71:86:d9:ca:eb:3e:
                    39:5e:a1:b0:d7:ee:10:7e:7b:df:07:e2:45:7d:3e:
                    62:e5:d7:62:ad:40:9c:11:32:9f:d7:f7:97:da:3c:
                    1b:28:70:8c:d3:a1:61:f6:09:cc:8b:2b:fd:a0:c2:
                    8b:38:c4:d6:8f:b7:b1:8a:2b:09:55:71:92:2a:eb:
                    0d:37:6d:78:3a:72:b1:c6:60:a4:ff:5b:f9:86:9b:
                    5b:3c:59:6f:57:ac:86:9d:eb:9a:c9:28:56:1a:01:
                    c7:15:51:4a:48:db:0e:b4:41:e3:5d:f8:c7:ce:1d:
                    cb:ac:12:49:d2:5c:97:14:30:ad:9a:0b:a1:4e:4c:
                    63:0b:9c:0d:5b:3c:9c:27:9a:09:4e:bf:4e:18:8f:
                    a4:96:d2:b2:8c:4c:df:da:56:d1:86:92:18:67:9c:
                    28:b5:65:57:82:43:73:77:2d:96:71:ce:57:b4:2b:
                    e4:4b:fd:0b:fd:e9:61:0f:a9:41:8c:ed:9f:51:84:
                    62:4a:6c:f5:17:da:33:4b:96:e1:4c:ec:3b:fc:6c:
                    86:d7:0a:1c:c9:dc:10:7c:1c:91:07:11:60:3d:81:
                    29:18:e1:5a:4a:59:63:a4:12:9a:2a:78:81:0b:5e:
                    12:ef:c0:f0:e7:ec:ab:2e:8f:c4:64:ea:d3:20:e5:
                    b7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E1:A0:84:97:C7:42:FE:D2:E9:B8:AF:DA:C4:93:FA:93:79:D7:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/d08be9f7-10a8-3b17-8ee4-3bac02c49038.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:a0:26:0c:ab:df:be:30:4f:5b:a2:33:aa:5e:da:d8:2c:c5:
         dc:9b:85:d8:e4:32:72:72:ff:37:18:79:26:68:10:77:39:25:
         87:eb:35:85:11:09:5d:34:c4:ac:e0:13:2d:f6:df:97:87:12:
         32:ca:e1:15:ee:92:7b:3e:ce:0b:b2:04:54:3d:be:0a:69:f3:
         52:d1:67:8e:94:18:da:10:e5:9e:be:8b:c3:c9:aa:eb:79:d8:
         f6:cf:c4:87:5e:5c:0e:1e:2f:0c:ca:3b:cc:1c:7b:f3:98:cf:
         39:f0:63:37:2b:ec:ad:58:e7:3e:4d:3f:81:6f:cb:f3:a2:71:
         d7:46:55:4e:8a:87:ce:e3:90:18:58:3d:b0:cf:10:22:48:f6:
         45:b3:9b:dd:82:2f:d8:fd:01:ea:29:69:39:9f:04:0a:1e:50:
         28:fe:c8:ac:9b:6e:a7:27:1c:b8:c4:fa:95:dc:76:5e:96:39:
         c7:ad:80:79:32:3e:4d:b9:6d:97:f1:91:b7:cb:20:a9:11:30:
         29:03:1a:5c:aa:3a:9b:de:4e:57:9f:af:9c:d8:8b:80:21:e9:
         9d:1f:c8:48:e7:d5:4e:7b:56:b6:0d:6a:b5:b6:4e:37:c7:60:
         a0:fe:a1:5a:23:a1:6d:b9:c3:05:07:25:3e:ef:5c:ef:5f:4b:
         b7:b4:80:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:30:15 2025 by rpki-client