Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/c1ef0eee-19de-307f-8352-756662d48fb6.roa
File:                     c1ef0eee-19de-307f-8352-756662d48fb6.roa (raw, json)
Hash identifier:          4IazEeWyfmMWUkdqj76iNEfLpMTXUXdjZgAeHm4C1w8=
Subject key identifier:   9F:8C:55:27:B1:FE:DB:1D:96:1D:97:68:49:6D:06:34:7D:08:94:54
Certificate issuer:       /CN=a288b4bb-60c5-4f54-8c7d-75bba8d4b059
Certificate serial:       010D0C9F4328584AAB264784DB516FA920C9C900
Authority key identifier: ED:2D:24:6E:34:BA:A1:7A:E7:A9:EA:3F:A6:D1:B7:6F:61:96:9E:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/c1ef0eee-19de-307f-8352-756662d48fb6.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     25625
IP address blocks:        206.220.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:47:84:db:51:6f:a9:20:c9:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a288b4bb-60c5-4f54-8c7d-75bba8d4b059
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=7968f1aa-5e31-4532-80ea-8b90c48bab1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ac:cb:9f:6b:a0:16:79:87:85:4c:1e:bf:3c:
                    a4:e8:7d:31:64:b1:5b:41:33:5e:c3:ed:a3:c5:0e:
                    22:4a:ce:fc:72:34:5e:be:2d:69:50:f7:ab:ff:a5:
                    4e:97:54:51:93:7b:01:3b:e6:d4:33:5d:c5:60:31:
                    0b:a6:9c:df:ec:53:98:7f:72:57:94:9d:b8:6a:98:
                    51:38:34:4f:10:46:7a:08:f4:32:56:ef:6f:1f:6c:
                    94:0d:55:ca:6c:4b:5d:06:3a:ff:1e:fc:a3:01:4a:
                    b3:22:9a:58:a3:78:6f:a3:85:3c:f2:59:c5:0c:bc:
                    8f:b6:0d:b4:db:cf:c0:18:42:02:31:e5:b7:3b:b8:
                    c3:77:1f:7c:df:26:2d:d3:8a:91:96:c2:13:94:f5:
                    75:21:c5:fd:9d:2d:21:16:d1:6e:88:4a:ef:34:1a:
                    bb:ad:e3:4f:61:7c:32:f0:03:0f:20:01:9f:ff:4e:
                    81:78:d0:71:39:0b:a1:1e:3d:dd:f8:e9:94:79:49:
                    f0:4e:dc:7e:58:78:a9:fd:78:33:59:49:dd:97:e1:
                    cd:3b:06:4d:e2:20:65:6f:47:73:66:06:4b:2f:de:
                    b4:01:92:6d:ac:e0:88:47:21:cd:90:2b:bb:f8:f9:
                    70:de:a7:61:80:2b:97:07:72:13:c2:36:fe:59:90:
                    4a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:8C:55:27:B1:FE:DB:1D:96:1D:97:68:49:6D:06:34:7D:08:94:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/c1ef0eee-19de-307f-8352-756662d48fb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.crl

            X509v3 Authority Key Identifier:
                keyid:ED:2D:24:6E:34:BA:A1:7A:E7:A9:EA:3F:A6:D1:B7:6F:61:96:9E:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.220.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:9a:49:62:a5:a3:40:d1:71:ce:4a:8f:bd:f2:e8:47:5e:0e:
         f4:70:6e:5f:c1:dd:92:90:f9:29:4f:e0:96:79:fb:cc:9e:c3:
         ad:5f:8d:b4:dc:f2:b2:af:c7:4a:fe:e2:5d:7e:df:f9:9f:0f:
         79:8c:83:48:11:96:64:4c:53:01:9c:06:1c:a6:99:ae:fc:ea:
         4c:b2:e8:5f:72:ae:4c:d0:63:eb:bd:93:b4:94:b1:00:89:44:
         46:06:12:27:89:9c:a3:e4:23:cc:e4:ff:95:a4:09:f7:33:f9:
         d4:b9:e1:3a:65:4e:d2:44:c7:71:85:da:79:58:0f:bd:8a:f8:
         b2:4a:48:2f:9b:cd:2b:37:a7:b6:56:0f:e3:5a:5c:ac:f7:a4:
         0e:36:c0:6b:36:0a:66:3e:0c:2a:22:9e:eb:0b:47:ac:61:d7:
         eb:bc:3f:c0:a5:0d:d6:d0:b5:9f:01:1a:a1:0d:de:91:af:3c:
         37:f5:b5:28:83:49:9b:85:29:f9:42:0f:2b:79:96:22:32:fd:
         e5:48:36:35:a3:84:f6:15:ac:22:5a:e4:69:04:05:97:bf:6e:
         4f:dc:f2:85:d1:7e:28:97:a2:89:be:b4:03:0d:ec:8f:c2:7e:
         2c:4e:ca:32:63:3a:e1:00:f2:61:f6:e2:7e:2c:ca:99:dd:c7:
         95:4e:ee:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:39:40 2025 by rpki-client