Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/36223146-bafc-3193-9afe-82d35479db64.roa
File:                     36223146-bafc-3193-9afe-82d35479db64.roa (raw, json)
Hash identifier:          WYCsqD0FqaJ80B2lWujUgBkNhX6NzElTUh+mCsYfj2o=
Subject key identifier:   EB:62:3F:06:5F:A7:BF:FC:EC:81:18:32:AA:C3:16:EB:28:09:4B:56
Certificate issuer:       /CN=48c974e9-82f6-4ede-812c-5b9302f0c7cc
Certificate serial:       010D0C9F4328584A19FAB4003017243096851B00
Authority key identifier: C4:16:34:F3:51:6F:6B:E6:30:BB:50:16:8D:70:1D:08:1A:18:28:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/36223146-bafc-3193-9afe-82d35479db64.roa
Signing time:             Fri 06 Jun 2025 13:01:04 +0000
ROA not before:           Fri 06 Jun 2025 13:01:04 +0000
ROA not after:            Thu 04 Sep 2025 13:01:04 +0000
asID:                     54103
IP address blocks:        206.246.104.0/24 maxlen: 24
                          207.199.178.0/24 maxlen: 24
                          216.155.4.0/24 maxlen: 24
                          216.155.6.0/24 maxlen: 24
                          216.155.7.0/24 maxlen: 24
                          216.155.9.0/24 maxlen: 24
                          216.155.10.0/24 maxlen: 24
                          216.155.30.0/24 maxlen: 24
                          216.155.32.0/24 maxlen: 24
                          216.155.37.0/24 maxlen: 24
                          216.155.43.0/24 maxlen: 24
                          216.155.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/48c974e9-82f6-4ede-812c-5b9302f0c7cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/48c974e9-82f6-4ede-812c-5b9302f0c7cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:19:fa:b4:00:30:17:24:30:96:85:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48c974e9-82f6-4ede-812c-5b9302f0c7cc
        Validity
            Not Before: Jun  6 13:01:04 2025 GMT
            Not After : Sep  4 13:01:04 2025 GMT
        Subject: CN=841e1b2d-ba64-4ea1-aed4-71cebf908388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:01:94:76:dd:37:37:7b:34:05:48:42:9b:8a:
                    a7:8f:6d:76:7a:9d:5e:04:2e:b2:1e:cb:8c:b5:0e:
                    a1:fb:f2:5f:7e:49:63:49:34:24:16:a4:1b:ae:38:
                    51:99:b3:eb:d6:20:02:24:fe:15:35:2c:4a:f8:df:
                    49:81:48:4f:a5:30:8c:83:18:d1:2e:9c:7b:92:eb:
                    d7:27:6e:ab:70:96:9c:b0:9c:78:d7:c3:9b:e9:41:
                    3e:6d:83:f1:8d:62:51:5c:cb:30:2e:4e:ef:c9:d3:
                    55:ce:de:0b:7b:ce:ea:0b:28:10:6c:73:57:9e:11:
                    6a:06:79:ef:04:8c:a3:8b:52:e2:80:07:b1:53:b0:
                    77:6f:64:6a:f1:ac:a4:55:48:18:62:f2:95:0f:39:
                    b7:fc:7d:66:c2:18:44:85:3f:d1:68:85:7f:fc:b2:
                    dc:23:5a:ad:56:f4:2d:ff:13:af:27:84:10:bb:c3:
                    2d:66:22:b8:99:ee:aa:e3:de:c4:ad:4d:aa:1d:e6:
                    ce:62:c9:07:ec:0b:45:86:28:c5:34:43:dd:f6:9b:
                    45:50:3e:29:58:a0:19:1e:c1:8d:0d:92:55:fa:b7:
                    44:31:27:d6:92:dc:34:67:8b:ba:a5:f4:49:52:71:
                    9a:a1:08:75:e6:85:58:e9:19:65:6f:20:62:53:43:
                    e6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:62:3F:06:5F:A7:BF:FC:EC:81:18:32:AA:C3:16:EB:28:09:4B:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/36223146-bafc-3193-9afe-82d35479db64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/48c974e9-82f6-4ede-812c-5b9302f0c7cc.crl

            X509v3 Authority Key Identifier:
                keyid:C4:16:34:F3:51:6F:6B:E6:30:BB:50:16:8D:70:1D:08:1A:18:28:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.246.104.0/24
                  207.199.178.0/24
                  216.155.4.0/24
                  216.155.6.0/23
                  216.155.9.0-216.155.10.255
                  216.155.30.0/24
                  216.155.32.0/24
                  216.155.37.0/24
                  216.155.43.0/24
                  216.155.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:14:96:1b:44:aa:a3:55:90:66:b6:df:d8:92:24:01:a5:a5:
         fa:13:10:19:4c:63:cf:57:3a:d8:0e:98:17:6f:23:51:1f:0b:
         46:78:fa:9a:08:ae:f9:3d:d7:d8:57:9d:f2:e8:68:71:1d:08:
         23:b6:12:bb:b0:2c:6c:70:25:c5:2f:9a:78:60:6a:3e:58:52:
         4c:30:b2:4d:d3:13:a9:36:5e:4a:b5:53:8b:f4:3a:67:91:c3:
         74:29:50:e5:9f:26:b6:05:ab:4c:0e:49:d7:47:dd:78:73:8d:
         02:e6:e5:21:ff:72:eb:1f:f7:8e:2a:df:bd:d4:3f:bc:04:65:
         1c:8c:dd:2c:67:28:b2:e3:08:48:59:72:b4:5e:7f:16:ee:79:
         0d:ac:7b:af:0c:2c:a7:e7:80:1f:4c:0c:81:7a:e5:15:ed:ec:
         58:1c:c3:14:4f:ec:dd:4f:a7:4a:08:a0:1d:36:9a:66:bd:a6:
         5f:42:9f:ac:a8:4b:c4:40:0c:06:3e:ef:81:92:e6:66:2f:58:
         6a:1a:b1:4e:d3:e1:18:d2:bc:15:82:ad:78:f3:2a:59:e9:52:
         db:08:59:0f:60:1f:74:bd:ba:70:b3:46:42:79:47:5c:ba:05:
         06:70:b2:57:5d:41:4c:d7:79:f9:94:41:49:b7:be:0c:4a:bc:
         2c:9f:db:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:50:32 2025 by rpki-client