Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/44c02d8d-7e4e-3854-bd23-8b27d39f4c57.roa
File:                     44c02d8d-7e4e-3854-bd23-8b27d39f4c57.roa (raw, json)
Hash identifier:          LdpxQgTirasS8kHsdhs8EFPwC2AsacEpNUB4KtcOqMM=
Subject key identifier:   13:FB:7F:B2:3C:38:8F:85:74:4E:16:D2:1B:C8:1A:D9:EA:27:F2:85
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858493C092B951E5E618E6972D700
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/44c02d8d-7e4e-3854-bd23-8b27d39f4c57.roa
Signing time:             Wed 19 Mar 2025 01:00:40 +0000
ROA not before:           Wed 19 Mar 2025 01:00:40 +0000
ROA not after:            Tue 17 Jun 2025 01:00:40 +0000
asID:                     13332
IP address blocks:        206.206.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3c:09:2b:95:1e:5e:61:8e:69:72:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar 19 01:00:40 2025 GMT
            Not After : Jun 17 01:00:40 2025 GMT
        Subject: CN=ae2166c1-7989-4f08-84c4-56a87e5810ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1d:a6:58:57:a7:91:3f:71:10:3f:c6:1b:4e:
                    42:ef:a9:aa:62:e5:20:0f:b1:63:37:12:11:36:67:
                    ca:ca:a9:03:bd:57:bb:19:5b:ff:d0:69:86:24:b7:
                    37:70:46:f6:60:9d:67:fc:ba:e1:ba:8b:a9:6e:93:
                    ae:b3:34:85:e5:80:6a:fe:49:18:17:84:87:f5:34:
                    99:ba:67:38:6e:fd:b3:37:46:51:ed:6e:79:d3:ad:
                    c9:d4:4a:3b:c3:9a:5a:9d:48:9e:0c:50:2e:a7:79:
                    40:7f:9f:6a:6d:81:71:fa:14:9e:63:7f:59:49:cc:
                    69:9c:0f:7c:c7:8b:e6:43:de:48:a3:5f:62:e5:2b:
                    8a:93:8b:82:af:10:09:f9:95:d5:43:56:49:bd:2a:
                    8e:2a:bf:86:56:1a:15:c4:41:bc:d6:e3:24:b3:ba:
                    32:34:da:df:98:f0:e9:c7:38:58:8d:b2:74:cc:fe:
                    03:c8:93:d7:d7:12:a4:b6:8a:f9:bf:dd:96:ec:ec:
                    8e:c2:a9:45:11:93:5a:c8:bc:55:8b:e4:32:2c:e3:
                    4c:37:f5:d0:db:97:84:41:72:de:79:39:13:11:58:
                    f1:dd:f2:0a:56:43:d9:e7:b5:ff:c9:06:c0:d6:be:
                    cc:e7:d2:7a:11:5b:55:50:33:f1:9c:5c:d0:4f:92:
                    03:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:FB:7F:B2:3C:38:8F:85:74:4E:16:D2:1B:C8:1A:D9:EA:27:F2:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/44c02d8d-7e4e-3854-bd23-8b27d39f4c57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:63:3e:21:cb:ed:28:cc:73:2e:ef:f8:b8:e2:4b:19:4b:e9:
         bb:74:48:e7:18:f2:4f:a3:26:4e:32:dc:5a:5a:6b:1d:06:7b:
         58:af:42:34:85:58:98:2b:fd:e7:2e:cd:67:70:44:7d:b1:84:
         02:69:83:5a:a2:98:a2:ed:58:66:64:c7:20:0d:38:6b:86:33:
         ec:ed:26:24:d7:32:3f:39:ba:d5:98:04:97:7c:ae:4c:d7:0d:
         4a:10:e5:cf:14:7e:d6:b1:53:a7:7b:cd:9d:b7:5f:55:e1:72:
         5e:2e:61:a6:ca:b4:f3:3f:a3:70:de:08:bc:c4:9a:6b:c8:b8:
         49:20:de:5b:8b:e7:59:8c:62:b3:55:7e:73:b2:64:af:1d:ff:
         19:f4:3d:df:77:15:c1:e4:59:45:cd:c8:3a:e0:cf:85:26:fb:
         c8:3a:60:c2:fc:a7:c7:da:1d:e7:22:c6:2c:ad:a5:0f:90:21:
         60:20:7e:9c:f8:5b:80:eb:74:ce:9e:ac:10:22:b3:0e:36:05:
         77:f8:e7:65:1d:ff:64:f2:36:b0:b1:1d:4d:b9:02:a3:9f:f1:
         e4:ec:d5:75:0d:fe:ef:57:1f:fc:21:c8:ac:e2:c9:ef:d1:73:
         6f:22:eb:3a:4e:df:2e:2c:e3:7d:54:82:31:f7:01:ca:f1:63:
         42:78:44:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:01 2025 by rpki-client