Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8/6d52598c-853a-33f7-b184-caa86dfc7a61.roa
File:                     6d52598c-853a-33f7-b184-caa86dfc7a61.roa (raw, json)
Hash identifier:          0jwBrdh08UHN2zGDEMyP61xVQrtZNBVlO08ieZLhnBo=
Subject key identifier:   BC:6A:BF:D3:F8:39:98:08:DC:3E:38:5A:A3:C4:02:74:E8:E5:EB:7D
Certificate issuer:       /CN=6cb6bf07-4e00-444e-a404-d3174fa94ce8
Certificate serial:       010D0C9F43285849780F0E85168ED2D1D854F100
Authority key identifier: 18:2D:6E:FB:F8:F8:70:25:A4:EB:BC:6F:AE:84:94:14:62:7B:58:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8/6d52598c-853a-33f7-b184-caa86dfc7a61.roa
Signing time:             Wed 09 Apr 2025 13:01:01 +0000
ROA not before:           Wed 09 Apr 2025 13:01:01 +0000
ROA not after:            Tue 08 Jul 2025 13:01:01 +0000
asID:                     36515
IP address blocks:        199.68.56.0/21 maxlen: 21
                          209.240.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8/6cb6bf07-4e00-444e-a404-d3174fa94ce8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8/6cb6bf07-4e00-444e-a404-d3174fa94ce8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:78:0f:0e:85:16:8e:d2:d1:d8:54:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cb6bf07-4e00-444e-a404-d3174fa94ce8
        Validity
            Not Before: Apr  9 13:01:01 2025 GMT
            Not After : Jul  8 13:01:01 2025 GMT
        Subject: CN=cadb7964-97ad-4444-87d6-9d27111f83a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d8:68:0e:f0:08:5a:9a:ff:21:c9:3a:92:68:
                    95:26:4c:bd:c1:45:d4:d9:bf:0b:cb:96:96:f0:f3:
                    5c:c2:ae:0d:2e:92:ed:85:4a:23:90:ca:6a:12:0c:
                    0a:80:1a:e0:c6:ff:8f:94:10:a5:5a:b8:94:75:50:
                    03:09:ee:ff:5c:5b:24:26:4f:57:06:03:8b:a0:4b:
                    5a:43:6b:56:16:86:d1:7d:56:b5:01:98:75:23:9b:
                    f8:cd:e3:9b:c3:8d:97:cc:23:9b:c7:26:a6:f3:56:
                    81:36:a8:85:5c:98:99:f8:02:8e:6d:55:27:47:89:
                    a6:42:9d:44:03:27:63:8b:c8:84:70:36:44:5c:8d:
                    f3:25:a4:cd:67:a5:c6:40:eb:43:34:4f:28:e1:70:
                    90:6a:ee:31:e9:69:50:3f:bf:41:1d:4e:98:74:e4:
                    25:21:7f:9c:03:ef:ee:b1:a3:a2:d1:af:c2:65:f0:
                    a4:e0:df:b7:d2:71:da:d3:c3:3d:87:5a:ad:0c:71:
                    fc:76:1c:f0:cf:74:22:a8:f2:8b:8e:a6:92:14:4f:
                    97:90:80:d8:d3:36:d7:5d:72:ce:5e:d8:63:ae:c6:
                    aa:7d:6e:49:d8:5b:ca:a0:56:07:b6:b4:8b:81:dc:
                    f9:9b:5d:9f:a9:6a:88:62:8a:b7:65:76:06:b8:07:
                    60:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:6A:BF:D3:F8:39:98:08:DC:3E:38:5A:A3:C4:02:74:E8:E5:EB:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8/6d52598c-853a-33f7-b184-caa86dfc7a61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8/6cb6bf07-4e00-444e-a404-d3174fa94ce8.crl

            X509v3 Authority Key Identifier:
                keyid:18:2D:6E:FB:F8:F8:70:25:A4:EB:BC:6F:AE:84:94:14:62:7B:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.68.56.0/21
                  209.240.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:d0:b5:68:6b:7e:9f:6f:bc:c3:8f:bc:a7:90:00:76:3d:09:
         e8:8f:c0:8a:f1:3e:05:bd:59:94:b3:dd:09:e8:c6:3f:d0:67:
         17:ae:85:7a:f4:7f:e0:a2:4f:a1:47:0f:47:b7:d9:2f:5d:62:
         2f:d9:f8:f9:d4:4c:a3:68:8d:ca:b7:d3:ca:25:8e:39:14:8f:
         5c:74:f0:13:13:52:5c:3b:14:45:7b:38:d9:f1:b5:72:a7:e0:
         3c:46:06:31:dc:6b:8a:47:2b:f9:8f:5c:21:6c:e3:07:d3:c0:
         35:aa:04:3f:af:66:7b:88:94:09:49:e9:28:4f:c5:21:4b:23:
         64:40:69:76:8b:e9:64:48:fe:1b:80:0d:85:9d:f2:73:e4:b8:
         1e:0f:74:84:09:66:3d:72:61:77:c4:ed:36:63:6b:03:e8:78:
         d2:87:c6:cb:15:78:ba:31:6f:7a:d9:0f:33:3f:13:10:d1:cf:
         15:75:cc:29:40:90:f5:84:90:1d:d9:b7:2c:c6:a3:4e:f4:db:
         34:1c:9a:6f:59:d6:ec:a4:b0:24:fc:c5:9f:ca:e6:8f:1e:17:
         0e:0c:65:7a:b1:f6:05:c2:de:bb:82:98:dd:4d:2a:76:f6:d9:
         e8:99:ba:a4:11:12:a5:a5:ab:c8:3d:e3:82:7a:7d:f9:80:aa:
         6e:d6:e6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:35:04 2025 by rpki-client