Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ddd7db4f-a91f-35b8-921d-6b300e5156e4.roa
File:                     ddd7db4f-a91f-35b8-921d-6b300e5156e4.roa (raw, json)
Hash identifier:          v9ABvpyAbz8iPOK5pF1v9itMGsW52+6K+7m/J3w8v68=
Subject key identifier:   EE:6E:16:5D:99:07:2C:F9:86:60:1B:3C:35:3D:EB:EC:DB:26:C4:0C
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F432858492CB21BC568255432AE9FBBD0
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ddd7db4f-a91f-35b8-921d-6b300e5156e4.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     393740
IP address blocks:        206.180.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b2:1b:c5:68:25:54:32:ae:9f:bb:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=0952cc65-b9c3-46af-9174-9c907d5508c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ca:e5:5a:9e:8d:e9:6d:05:7c:7c:80:4d:32:
                    9d:5e:44:5d:e8:07:5e:10:cc:f9:c5:46:26:b5:a0:
                    3a:79:5e:37:d5:14:e3:74:f9:29:4c:d0:65:e1:f4:
                    69:a8:4c:5e:53:57:a6:8b:ad:a3:28:01:31:40:ad:
                    e4:3c:39:36:62:12:ea:14:cd:4e:f0:bb:21:f3:17:
                    03:ed:57:72:6a:43:10:31:4e:e7:15:b3:dd:63:e6:
                    e0:c8:ea:95:08:01:82:e4:89:6c:6e:b3:70:c6:ec:
                    9e:25:50:9b:5b:b7:f1:8d:51:f9:a8:68:09:99:26:
                    3b:b3:b4:be:d8:36:56:e6:06:89:a7:1e:39:7c:7f:
                    10:e8:0e:61:bc:85:78:5d:c4:d2:6d:c6:66:0f:70:
                    66:de:b7:e0:22:e1:ac:26:1a:0a:30:ae:29:08:4b:
                    e3:ca:06:9d:f2:85:c9:a2:b2:64:e9:0f:06:46:f8:
                    29:64:9f:4f:0c:c7:c8:1b:21:b8:50:77:bd:52:2a:
                    99:81:73:97:25:29:34:9b:1b:28:50:e1:8e:16:60:
                    c6:eb:bc:a8:2f:44:95:d3:23:7a:c9:d4:53:f3:23:
                    29:fe:8a:a5:5b:e9:5e:e5:41:2e:35:74:2b:7a:f4:
                    47:66:93:7d:41:a1:70:60:37:3b:b8:02:c8:8b:24:
                    ba:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:6E:16:5D:99:07:2C:F9:86:60:1B:3C:35:3D:EB:EC:DB:26:C4:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ddd7db4f-a91f-35b8-921d-6b300e5156e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:83:c5:02:6f:07:57:e9:ae:88:dc:23:e7:47:19:70:e8:c6:
         37:6e:44:36:21:03:8c:fe:e8:69:94:59:04:06:9d:8b:48:8e:
         cf:fb:f3:40:71:78:6d:7a:83:b7:eb:84:7e:35:3c:5b:8c:e6:
         75:94:30:aa:e4:e7:ab:d1:c2:2d:b4:24:a6:e5:dc:1c:2a:6a:
         09:62:b5:fd:18:ce:fb:b9:f0:60:cc:98:e0:c1:1a:68:68:57:
         f5:f6:a1:3f:3a:d4:d5:f1:f1:7f:de:a6:52:71:7c:ae:9d:13:
         75:5a:f7:33:6a:8a:e1:13:ef:8a:b7:c0:f5:7b:41:9c:27:3a:
         ff:a5:ba:c8:3e:86:76:53:c4:74:66:03:51:de:d4:53:ac:a5:
         77:13:b8:7b:cc:5d:5b:37:4d:db:73:61:9e:af:82:f1:04:d1:
         b7:62:af:9c:0a:31:11:34:4f:b8:60:37:2c:a9:f7:50:f6:0b:
         65:f4:86:f1:d4:98:14:6e:4f:5e:11:00:d3:82:e6:8a:b6:90:
         ff:8b:b9:f2:61:56:f6:37:31:93:a9:8a:a9:a8:78:1b:7d:8a:
         18:c2:51:65:2d:2b:1c:53:11:3b:d9:c0:be:38:7a:f4:be:5d:
         dd:2c:ab:d6:dc:e6:bd:a4:06:4b:95:24:a3:6a:b6:58:37:f3:
         7a:5b:88:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:00:14 2025 by rpki-client