Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/95fc225f-49cd-3f09-8262-4c80ae5414b9.roa
File:                     95fc225f-49cd-3f09-8262-4c80ae5414b9.roa (raw, json)
Hash identifier:          y92SSM6S7rMr9YBB3j+eH8jjU4PhePNTY1CnKtMR1rw=
Subject key identifier:   CF:A4:0D:23:8E:0E:8E:B1:E8:22:87:0F:0C:5D:FB:66:F9:97:1B:C9
Certificate issuer:       /CN=d426c818-fe62-465f-8184-d4f8176e2692
Certificate serial:       010D0C9F4328584A73509B1AF7A47FA83A0281E0
Authority key identifier: F0:5F:A9:A7:39:32:76:56:38:8F:91:60:69:64:D6:40:25:0E:3C:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/95fc225f-49cd-3f09-8262-4c80ae5414b9.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     6507
IP address blocks:        151.106.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:9b:1a:f7:a4:7f:a8:3a:02:81:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d426c818-fe62-465f-8184-d4f8176e2692
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=52006038-2b3a-431b-9af7-4339a9ecf8ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c9:23:26:95:e2:17:61:95:ea:1a:7b:d4:55:
                    04:a7:01:a0:13:40:b3:2d:ad:af:a9:21:85:52:44:
                    90:4d:e0:b7:71:cd:01:f3:81:9a:d5:70:e9:2e:66:
                    25:a4:a4:c0:b1:a0:a8:a0:f7:6a:21:80:4e:02:6c:
                    44:4f:59:b3:25:25:81:30:a7:e9:f6:11:57:93:6b:
                    e6:15:f4:94:b2:c2:83:11:17:4a:64:d5:b1:fb:de:
                    18:58:07:6a:8b:79:94:8b:4e:c6:f2:1b:53:6b:99:
                    e1:2c:f2:e0:2b:e6:50:c6:1e:4c:65:86:7f:11:d0:
                    7c:23:78:68:80:70:31:d7:79:46:58:35:2f:e5:37:
                    4b:2b:32:28:4f:da:2b:fa:4d:d1:17:27:f4:ee:9c:
                    73:25:e1:6f:bf:19:b2:14:f0:92:74:5d:2a:ec:33:
                    a1:f4:e6:9d:6e:0c:5d:3d:66:c7:1e:7e:4f:a6:ac:
                    1f:4b:7b:86:38:9c:10:8d:35:d2:e2:4f:15:37:4b:
                    a5:7b:02:c4:25:93:6d:20:cf:63:c9:62:a0:db:eb:
                    33:d4:82:65:d9:b7:fa:22:a6:a2:aa:fc:ac:cf:f1:
                    ae:c9:2b:b7:c9:d7:6b:0c:8d:3d:c0:9d:fe:8c:29:
                    39:34:97:8d:75:44:56:04:fe:21:88:18:d3:ed:7a:
                    ee:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A4:0D:23:8E:0E:8E:B1:E8:22:87:0F:0C:5D:FB:66:F9:97:1B:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/95fc225f-49cd-3f09-8262-4c80ae5414b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.crl

            X509v3 Authority Key Identifier:
                keyid:F0:5F:A9:A7:39:32:76:56:38:8F:91:60:69:64:D6:40:25:0E:3C:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.106.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:c9:5f:c2:5d:c3:9d:ec:e2:58:43:94:7c:13:6a:d8:31:63:
         9a:c4:53:d9:78:28:3c:5e:6b:1b:83:c4:60:62:e8:a8:fc:d5:
         d4:ea:49:69:5d:f1:23:5a:14:e1:12:c6:f7:c3:49:4c:d3:a3:
         65:5d:12:d6:9c:b8:a0:7c:cb:f2:0d:b7:3b:ce:47:05:00:e5:
         00:d6:32:a6:21:19:99:2c:3c:c0:ad:30:b6:45:d6:78:16:a8:
         87:71:fd:8c:b3:8a:ad:f4:41:ee:33:d8:db:13:64:2e:b3:9f:
         df:49:37:bd:a6:18:be:04:f0:fe:74:66:35:8f:12:6c:7a:f7:
         6a:27:97:0c:ce:db:8f:5b:24:50:80:2b:81:ea:0c:0a:33:65:
         9c:b4:b8:ae:6d:e6:85:c4:c1:ef:1e:d3:d4:c8:94:cd:21:b6:
         a2:f3:4a:79:d6:b7:b2:a9:4c:73:cc:16:82:da:8a:77:20:13:
         6a:e3:68:84:bf:e2:f0:85:00:43:fd:f2:08:81:77:76:07:cb:
         6e:9f:3c:ab:09:4b:a7:61:ad:bd:5d:5a:13:a9:8b:d1:3a:18:
         c5:27:ee:9a:3e:6a:55:7b:27:a6:47:6e:e3:22:64:21:bb:9c:
         9f:39:31:90:f8:20:a8:ee:fa:61:cd:b1:0d:b8:76:86:70:2d:
         af:b1:38:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 03:34:49 2025 by rpki-client