Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/2a3598a6-3c51-3995-b0a7-612073b7b44d.roa
File:                     2a3598a6-3c51-3995-b0a7-612073b7b44d.roa (raw, json)
Hash identifier:          fdx0usCivaS7e1Zpy1D5n+Gq4y8bakj7Umv6MQIn0F4=
Subject key identifier:   FB:E6:7F:80:53:16:B5:57:F4:2F:28:81:53:76:1E:81:49:22:0B:7B
Certificate issuer:       /CN=d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27
Certificate serial:       010D0C9F4328584BBE402C13AEBFDEB405D4C200
Authority key identifier: A1:2C:DA:96:0B:63:94:15:8D:17:96:2B:73:6A:DF:40:5C:72:A2:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/2a3598a6-3c51-3995-b0a7-612073b7b44d.roa
Signing time:             Tue 04 Nov 2025 02:00:31 +0000
ROA not before:           Tue 04 Nov 2025 02:00:31 +0000
ROA not after:            Mon 02 Feb 2026 02:00:31 +0000
asID:                     16509
IP address blocks:        206.204.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:be:40:2c:13:ae:bf:de:b4:05:d4:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27
        Validity
            Not Before: Nov  4 02:00:31 2025 GMT
            Not After : Feb  2 02:00:31 2026 GMT
        Subject: CN=f55bc83d-bb24-4338-854a-e205682cddc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:57:52:b4:3f:13:6f:41:5f:08:d4:49:f0:d5:
                    c5:e5:7f:ca:23:b8:ee:5a:2d:05:82:fb:dc:d8:b8:
                    e1:cd:86:78:bd:fd:4c:97:28:8e:96:dd:ae:e7:fe:
                    2b:a6:4b:16:cb:d5:a3:8a:d1:d7:e0:f0:88:0d:59:
                    41:77:f3:88:0d:55:f1:7d:d3:01:a4:71:3e:36:a2:
                    cf:76:e9:bb:c6:8b:89:e6:41:4a:41:cf:96:9e:a7:
                    24:a9:a9:80:71:a8:50:2a:09:ae:00:1b:a1:37:19:
                    4a:68:2b:a1:ea:13:84:48:73:c1:1c:44:57:84:ae:
                    1f:97:3b:6b:18:f2:ef:c4:0f:77:e6:7f:99:9d:1d:
                    02:ce:84:9a:aa:b4:14:4c:c2:f6:a2:19:61:4f:32:
                    00:aa:46:d4:3f:e4:00:7a:86:16:a5:aa:f5:2d:82:
                    74:2d:0a:ca:61:95:80:4b:51:3d:90:35:09:a6:3d:
                    ce:0f:0e:40:c8:a9:0b:fe:df:53:28:d4:26:e0:02:
                    ff:82:cb:45:7a:d2:6a:f3:e9:28:f2:73:2c:04:b8:
                    1f:19:cf:d6:89:94:d0:78:ba:39:fc:99:47:01:12:
                    c0:eb:29:a8:4e:af:c7:c4:f2:89:00:2b:71:c8:08:
                    e0:d9:fc:56:fd:7a:1e:dd:15:cf:c7:ae:c1:3e:95:
                    f6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E6:7F:80:53:16:B5:57:F4:2F:28:81:53:76:1E:81:49:22:0B:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/2a3598a6-3c51-3995-b0a7-612073b7b44d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.crl

            X509v3 Authority Key Identifier:
                keyid:A1:2C:DA:96:0B:63:94:15:8D:17:96:2B:73:6A:DF:40:5C:72:A2:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.204.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:2a:42:44:9e:65:71:c5:3e:e9:d9:98:6d:7d:8b:bb:98:32:
         2e:ef:c3:2f:be:15:2e:ef:11:a7:94:c2:51:5d:3e:d8:4c:45:
         db:00:35:e7:ec:1e:ae:f0:31:65:20:24:a8:c8:f1:b6:8f:5b:
         06:c8:10:e9:8b:5c:18:d9:08:83:e9:16:92:89:47:c8:d7:8a:
         6a:0e:8c:11:46:64:bf:ce:6b:c5:0a:d6:6e:48:7c:4d:f0:83:
         8e:eb:6e:9a:63:cc:26:61:b6:5b:3d:5c:dc:f8:b2:14:64:9e:
         bb:24:4c:cd:1a:15:62:fe:21:a4:a6:2b:9e:31:36:d3:1a:83:
         bb:2b:94:35:66:52:e2:c8:81:16:d8:82:f6:19:2d:15:46:69:
         63:5d:43:bc:5a:cb:f8:77:cc:70:9d:d1:1b:b0:b4:6c:ab:72:
         04:12:38:4d:76:65:40:84:d8:7f:6b:90:73:bb:79:e0:08:cd:
         2d:52:b7:08:ea:d7:ba:78:fd:af:51:57:08:7f:46:46:14:6e:
         8c:71:ca:24:8b:1a:3f:a7:ca:9f:19:6b:b0:40:57:5c:e0:ac:
         4d:90:69:b7:ec:e9:a9:8d:0b:df:fe:ee:c6:35:17:0b:e0:3c:
         ae:16:29:e4:26:7f:6c:1c:01:6e:88:ce:73:a5:f5:c3:2e:36:
         f9:cf:e6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:11:01 2025 by rpki-client