Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5/20a6cdfc-5c18-3cd8-b147-07a75c9f86bd.roa
File:                     20a6cdfc-5c18-3cd8-b147-07a75c9f86bd.roa (raw, json)
Hash identifier:          3W7mSvev+tBAoKwkSA7faG04AKGNOiPlHhFt+HnaijA=
Subject key identifier:   E6:67:67:3D:25:53:89:1C:3B:64:62:0C:C0:7F:82:40:23:EF:7C:33
Certificate issuer:       /CN=4215bba6-51b0-41f8-9185-dda3367a8df5
Certificate serial:       010D0C9F43285849473400D0EC899755F13A3C00
Authority key identifier: 24:C8:C3:14:4D:D8:66:CE:23:E6:39:48:AB:CA:C4:45:62:CF:31:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5/20a6cdfc-5c18-3cd8-b147-07a75c9f86bd.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     11071
IP address blocks:        206.81.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5/4215bba6-51b0-41f8-9185-dda3367a8df5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5/4215bba6-51b0-41f8-9185-dda3367a8df5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:34:00:d0:ec:89:97:55:f1:3a:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4215bba6-51b0-41f8-9185-dda3367a8df5
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=bbaf3e33-9e9e-476c-9723-04c4ae7f2aac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1b:a9:03:a5:12:50:82:59:57:42:09:27:4b:
                    8c:29:8a:9c:ca:63:78:50:dd:ea:36:aa:04:4a:e1:
                    0b:3e:01:c8:a8:c8:0d:dd:49:0a:a1:e9:73:7d:c3:
                    17:df:e6:52:05:d8:4a:13:85:28:08:57:a1:84:e4:
                    f3:19:54:1d:e6:27:8a:69:35:a9:8e:cc:d0:52:35:
                    26:56:49:b2:c9:f2:6a:f5:22:7a:61:8f:49:93:4b:
                    75:80:74:55:99:4b:6d:93:c2:82:65:b1:9a:2c:d4:
                    2d:5a:2a:61:37:f5:b9:da:ca:6d:45:8b:4f:bf:33:
                    21:6f:42:1f:a8:92:07:f5:5e:c6:e6:70:06:39:14:
                    d4:8c:68:bd:04:da:9b:62:06:2d:3d:72:96:0e:3c:
                    99:19:9b:72:43:73:b2:c8:c4:c6:a9:46:5e:d9:f9:
                    a6:f8:c5:0b:97:4d:4b:de:24:14:8a:77:72:dc:4b:
                    54:fe:0a:90:33:51:36:3b:70:bd:68:bc:83:b4:4e:
                    84:7d:fd:cb:bc:38:62:25:12:6a:a5:ad:fe:96:07:
                    e3:fe:3a:d0:16:38:3f:8d:33:85:c9:2a:16:17:62:
                    18:0a:02:5e:d8:ca:2d:48:c6:29:aa:53:bc:75:9b:
                    14:6a:82:c8:7d:56:91:7a:5c:c5:b5:69:ad:c6:3d:
                    4b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:67:67:3D:25:53:89:1C:3B:64:62:0C:C0:7F:82:40:23:EF:7C:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5/20a6cdfc-5c18-3cd8-b147-07a75c9f86bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5/4215bba6-51b0-41f8-9185-dda3367a8df5.crl

            X509v3 Authority Key Identifier:
                keyid:24:C8:C3:14:4D:D8:66:CE:23:E6:39:48:AB:CA:C4:45:62:CF:31:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.81.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:1e:c6:f2:6d:71:66:25:e2:88:d8:0a:79:f9:e8:57:f1:6b:
         17:91:16:38:0f:23:d0:ea:79:60:38:54:af:62:fd:a2:f1:35:
         51:04:80:d8:22:12:48:b8:a3:a8:69:54:40:ab:5b:ae:f9:1b:
         77:48:d6:04:67:20:90:26:8d:be:cc:d5:28:01:d3:4d:e2:90:
         32:95:5f:c4:ab:be:26:47:53:66:9c:ee:f5:fa:5b:88:76:48:
         a3:72:62:ef:40:77:b6:32:a3:bc:b1:b5:eb:db:b2:85:78:0c:
         5d:c2:50:b7:85:d8:cb:5f:0b:66:f9:91:ef:82:c7:ae:81:99:
         46:1f:99:07:fa:6c:5c:7a:a1:26:dc:92:c9:d1:9a:b2:e4:e1:
         d5:ec:b2:40:ae:75:d7:f8:50:bf:97:d6:db:a6:ff:b1:4f:70:
         d7:0a:bd:a1:76:23:c6:ae:aa:a6:5a:85:39:d5:ee:b1:cd:28:
         17:f9:fd:14:24:91:bc:49:c3:ac:c0:c7:3a:fc:98:21:4d:4c:
         1e:91:e0:47:63:8c:2a:7e:e2:80:22:85:26:01:58:09:cc:29:
         99:23:4f:21:60:04:d1:94:27:49:13:88:97:7d:28:8f:61:f9:
         3b:b3:88:81:a8:ff:7a:49:da:e7:a4:40:4d:77:0d:4e:77:84:
         47:5e:db:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:43:28 2025 by rpki-client