Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/6c1fd14a-e860-399a-a7cf-7f5ce5544531.roa
File:                     6c1fd14a-e860-399a-a7cf-7f5ce5544531.roa (raw, json)
Hash identifier:          s9jOb7DHMHNeZbFjjvHpuuKJdcdS20vK4v1DTACyxjI=
Subject key identifier:   2A:58:2A:DB:5F:8D:F7:93:7E:FD:0F:BE:F9:7A:75:E6:BE:E6:81:6B
Certificate issuer:       /CN=28635d6a-8623-4918-823a-dc1ad56ec1bd
Certificate serial:       010D0C9F4328584A9D30E3800221D59A142B9180
Authority key identifier: ED:8F:C6:46:23:EE:FA:95:EA:3C:2C:29:2D:0C:C2:D0:6D:1E:66:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/6c1fd14a-e860-399a-a7cf-7f5ce5544531.roa
Signing time:             Wed 23 Jul 2025 13:01:02 +0000
ROA not before:           Wed 23 Jul 2025 13:01:02 +0000
ROA not after:            Tue 21 Oct 2025 13:01:02 +0000
asID:                     53429
IP address blocks:        199.180.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/28635d6a-8623-4918-823a-dc1ad56ec1bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/28635d6a-8623-4918-823a-dc1ad56ec1bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9d:30:e3:80:02:21:d5:9a:14:2b:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28635d6a-8623-4918-823a-dc1ad56ec1bd
        Validity
            Not Before: Jul 23 13:01:02 2025 GMT
            Not After : Oct 21 13:01:02 2025 GMT
        Subject: CN=37f086f6-ed14-4c46-84be-621530f25cc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:cc:73:c4:ee:2c:86:61:99:79:b8:cd:54:99:
                    ed:59:70:37:0b:d8:40:57:c1:e3:fb:47:b0:3c:2a:
                    0f:d4:92:09:60:bc:51:47:85:e7:e9:74:c1:01:bd:
                    35:9c:95:56:bb:dc:0e:13:e3:47:94:01:51:a0:a9:
                    98:d0:98:f8:76:48:e1:26:44:9b:65:ed:ef:eb:41:
                    ee:1c:12:0d:52:5a:fa:71:15:ad:5f:33:2f:f6:b4:
                    23:6c:78:c9:a8:d8:10:f4:9c:56:fa:e1:ce:ec:52:
                    eb:58:4c:40:bb:ec:e6:4f:c5:87:65:5d:08:d9:8a:
                    d2:bd:53:ca:72:fe:9e:05:ee:6b:da:d2:9b:70:9b:
                    7e:f1:cf:27:dc:fa:9f:f6:dd:26:8d:8f:4e:2d:6b:
                    2e:fd:71:ba:02:0e:91:55:fb:1a:13:14:33:f3:5a:
                    36:35:dc:1b:02:7f:8e:19:d2:16:22:58:8a:d7:b2:
                    57:9f:20:08:6c:a6:28:b8:2a:b4:a4:c3:b8:d4:9e:
                    b9:43:cb:7d:aa:d0:b2:5c:e3:26:14:5f:5f:0f:56:
                    b2:5d:ea:3c:a3:9e:1d:d5:e4:bc:8e:94:98:29:de:
                    f6:d5:6a:80:6e:fc:03:c6:e6:2c:44:26:34:68:ee:
                    89:59:d7:bd:03:48:3b:03:48:64:36:92:2c:6c:b1:
                    0e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:58:2A:DB:5F:8D:F7:93:7E:FD:0F:BE:F9:7A:75:E6:BE:E6:81:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/6c1fd14a-e860-399a-a7cf-7f5ce5544531.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/28635d6a-8623-4918-823a-dc1ad56ec1bd.crl

            X509v3 Authority Key Identifier:
                keyid:ED:8F:C6:46:23:EE:FA:95:EA:3C:2C:29:2D:0C:C2:D0:6D:1E:66:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.180.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:64:17:fe:81:a6:a3:77:0e:0e:bd:12:bf:69:b2:e1:f4:61:
         03:28:a7:de:59:8b:c7:f4:a1:48:9c:cb:78:be:8e:df:d1:16:
         26:87:fb:7e:f9:47:40:3a:18:66:e5:02:0d:ea:50:8e:5f:0a:
         4c:00:8e:fe:56:72:48:61:1a:e3:2e:01:74:9d:f5:68:6e:a5:
         a7:01:08:c9:49:b7:bf:60:18:a7:29:c7:e2:34:16:dc:21:66:
         3b:b9:90:5a:6a:b9:09:52:dc:d8:b4:10:92:87:f0:b2:80:47:
         2a:9f:c0:64:f6:47:22:59:43:56:17:16:f3:d8:72:55:28:a3:
         57:d4:06:77:a2:89:d4:40:dd:86:93:a5:c9:e2:c5:53:8a:e1:
         ab:dc:66:60:96:25:2d:9b:00:10:67:f2:ad:5e:7c:cc:2b:64:
         99:df:fd:e7:04:89:ff:d5:bf:e6:e1:99:94:9d:22:50:0d:b5:
         29:65:85:4b:e3:a3:f0:48:22:90:05:df:6e:6a:4f:44:b3:e9:
         bf:19:53:57:3a:74:a4:86:68:2b:00:37:8d:d2:0b:45:3a:1b:
         a3:1b:11:07:e6:79:45:a6:af:a1:11:0e:fa:6d:e5:9e:b1:e2:
         1d:99:df:c9:9b:f5:bb:b5:5b:2f:d4:b7:86:ae:a7:71:5a:57:
         a4:f3:21:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:51:02 2025 by rpki-client