Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60eb98ca-c6d1-4011-9f72-62c1d16a0ec8/bdd1e53f-ea79-38c5-a815-0d055865f047.roa
File:                     bdd1e53f-ea79-38c5-a815-0d055865f047.roa (raw, json)
Hash identifier:          Nnkv9P9rzatCX0T6DvNyRBQeY9CKQtkrJVMgPRcKLQk=
Subject key identifier:   76:71:20:C8:95:D7:A9:D8:F8:D5:56:0F:51:7F:67:55:AB:D0:B9:14
Certificate issuer:       /CN=60eb98ca-c6d1-4011-9f72-62c1d16a0ec8
Certificate serial:       010D0C9F43285849CBCF8A595F502A6CF2A9FE40
Authority key identifier: BA:C6:BB:4D:F4:5D:FC:70:80:98:71:5C:B0:0A:68:12:51:20:81:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60eb98ca-c6d1-4011-9f72-62c1d16a0ec8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60eb98ca-c6d1-4011-9f72-62c1d16a0ec8/bdd1e53f-ea79-38c5-a815-0d055865f047.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     4181
IP address blocks:        134.215.0.0/16 maxlen: 24
                          204.246.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60eb98ca-c6d1-4011-9f72-62c1d16a0ec8/60eb98ca-c6d1-4011-9f72-62c1d16a0ec8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60eb98ca-c6d1-4011-9f72-62c1d16a0ec8/60eb98ca-c6d1-4011-9f72-62c1d16a0ec8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60eb98ca-c6d1-4011-9f72-62c1d16a0ec8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:8a:59:5f:50:2a:6c:f2:a9:fe:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60eb98ca-c6d1-4011-9f72-62c1d16a0ec8
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=decd4af6-6408-481a-ace8-1f02eba08118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fe:8c:28:ea:91:2b:eb:09:82:15:df:16:b6:
                    43:f5:dd:f0:6c:99:1b:36:ed:c4:fb:29:ad:11:35:
                    9c:b8:07:12:6f:86:29:8d:7f:15:7d:08:6e:e4:e6:
                    11:51:4a:f2:c3:b9:b6:78:80:fd:c2:d6:7d:2b:a2:
                    2e:e2:1c:8b:2d:2c:90:6a:6f:43:f8:25:7c:ca:45:
                    d0:ab:ea:4c:58:5d:67:72:2e:25:cf:c1:0d:90:b8:
                    44:a9:2c:56:0b:cb:c9:64:21:c4:30:2d:57:45:59:
                    78:4c:7b:3b:90:bb:55:ab:b1:02:2e:21:bc:c1:6a:
                    db:98:8b:31:2a:20:86:51:4a:2c:81:75:d6:85:34:
                    29:55:4f:50:55:22:cd:96:6e:68:38:4d:86:ae:24:
                    2a:f0:c4:26:b7:48:6e:36:e2:98:ca:69:71:91:8e:
                    a1:1d:15:60:80:b1:bc:d0:a9:c1:c6:e3:6d:c3:18:
                    91:ca:50:28:e8:b2:4d:7f:3b:2f:17:e7:8e:19:3f:
                    43:2e:61:3b:54:3a:8e:12:3a:2f:7b:87:ea:6a:cb:
                    fb:3f:41:b4:10:d7:56:8f:ff:41:6f:f7:bc:d4:5c:
                    c4:25:97:a3:72:97:c2:50:94:3e:d8:08:17:62:75:
                    25:80:0b:93:c9:e2:78:6f:c5:bd:3d:ac:35:ce:61:
                    36:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:71:20:C8:95:D7:A9:D8:F8:D5:56:0F:51:7F:67:55:AB:D0:B9:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60eb98ca-c6d1-4011-9f72-62c1d16a0ec8/bdd1e53f-ea79-38c5-a815-0d055865f047.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60eb98ca-c6d1-4011-9f72-62c1d16a0ec8/60eb98ca-c6d1-4011-9f72-62c1d16a0ec8.crl

            X509v3 Authority Key Identifier:
                keyid:BA:C6:BB:4D:F4:5D:FC:70:80:98:71:5C:B0:0A:68:12:51:20:81:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60eb98ca-c6d1-4011-9f72-62c1d16a0ec8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.215.0.0/16
                  204.246.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:f6:28:43:de:6e:36:e5:9a:38:a8:50:8d:2f:c5:ca:4f:c9:
         79:30:5b:19:ef:35:1a:92:c1:4b:57:29:ed:bc:32:74:db:2a:
         8b:26:c5:38:95:cd:d7:03:a4:32:10:7c:6e:7f:bf:5f:be:ec:
         c2:22:53:28:fd:bf:63:e1:75:5b:3c:b0:56:45:97:a3:35:21:
         19:b5:b0:f9:eb:f4:36:4d:c8:2e:a9:15:ff:50:b6:55:1f:c7:
         27:94:1e:b0:8c:66:b9:de:c2:c9:b4:e1:36:65:3e:6c:6f:b7:
         bf:7b:d4:92:95:ff:b8:23:cb:b3:6d:2f:fe:2d:14:20:49:5b:
         24:bc:d0:7e:b9:86:73:4a:2f:95:a4:df:33:fb:fb:c9:98:dd:
         bd:5d:e0:9b:e2:62:26:55:ee:ed:ab:05:3f:73:e7:26:81:99:
         23:30:66:9f:5a:b7:0a:8c:8e:8f:e4:2d:9b:80:31:03:55:89:
         da:74:77:27:d6:93:65:29:74:fc:cb:9c:16:d4:0b:ca:05:ad:
         d6:5d:62:4a:52:94:b5:ed:4b:20:d3:2d:04:fb:be:78:4c:4e:
         ae:66:6a:70:c9:5e:9d:d8:70:5b:eb:9f:af:db:ed:8a:94:66:
         14:c3:8c:d8:97:0d:9f:5b:40:02:47:0a:bf:c2:25:20:35:fc:
         69:78:3b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:48:33 2025 by rpki-client