Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/2e770edc-16ab-3ebf-b4b8-43a3a6f1e69c.roa
File:                     2e770edc-16ab-3ebf-b4b8-43a3a6f1e69c.roa (raw, json)
Hash identifier:          dg6kxAg3v+2dtbXSDp5XIzE2TCYKgStD3PwLtqjBlEY=
Subject key identifier:   2A:4A:15:CE:11:C0:3D:2A:E2:1A:DB:C3:FB:00:8E:3E:8D:B0:1C:84
Certificate issuer:       /CN=647216b7-a938-45d2-8264-7d448a4eaad9
Certificate serial:       010D0C9F4328584AA85BB2D014AC7B48302809C0
Authority key identifier: 22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/2e770edc-16ab-3ebf-b4b8-43a3a6f1e69c.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     398143
IP address blocks:        206.204.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:b2:d0:14:ac:7b:48:30:28:09:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647216b7-a938-45d2-8264-7d448a4eaad9
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=cbef9ad6-54e2-4c89-a0ca-baf9f64d73f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:aa:1a:6f:30:0b:7e:de:1b:15:b1:c7:94:d1:
                    48:1b:1e:f6:b7:02:aa:c3:c8:f4:f0:84:af:99:bf:
                    7a:8a:4a:78:88:50:68:fa:b7:b9:68:1e:5d:67:22:
                    f5:41:30:18:92:3e:14:84:9c:f1:06:21:28:0a:26:
                    dd:60:11:cf:26:cc:07:6d:06:40:1a:d3:8a:02:6d:
                    e1:cb:0e:5a:09:d3:d3:b2:cb:7e:6b:16:73:d9:bb:
                    98:c9:4e:63:c2:4c:44:35:91:84:e2:75:ba:48:3b:
                    64:98:1d:cb:81:f7:96:47:1f:d0:cc:44:e6:df:5a:
                    a3:5f:cf:ed:c2:37:ef:73:a0:56:fa:48:53:ac:17:
                    39:2f:43:c8:58:a4:63:db:d5:ba:c1:58:dd:8d:4c:
                    08:ec:88:ee:c3:d3:44:48:96:1c:53:d3:ec:18:30:
                    fe:01:db:e3:05:68:13:85:3a:64:c8:3c:a1:51:47:
                    36:e1:91:5d:64:09:fa:61:8b:0d:92:e1:72:af:cc:
                    22:c1:f8:34:98:9d:ad:dd:3a:94:ab:45:12:bf:c8:
                    d4:f3:c4:cb:a6:ab:c3:9d:7d:e7:cd:36:97:72:14:
                    2c:7c:4a:77:f9:79:7d:25:51:dd:be:c8:bd:f4:83:
                    46:fd:54:b6:2e:83:86:75:6b:f8:45:c4:cb:f8:33:
                    97:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:4A:15:CE:11:C0:3D:2A:E2:1A:DB:C3:FB:00:8E:3E:8D:B0:1C:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/2e770edc-16ab-3ebf-b4b8-43a3a6f1e69c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl

            X509v3 Authority Key Identifier:
                keyid:22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.204.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:80:22:07:30:c2:ba:04:31:0b:dd:3a:a9:8e:e8:91:89:80:
         be:f5:5f:27:92:a0:31:19:1f:b9:1b:09:fd:70:85:c8:04:55:
         b9:22:0d:fa:ba:d5:5d:11:1b:a1:b1:42:ed:04:64:0b:e2:fd:
         c6:99:e6:14:e4:3b:ee:92:8a:ee:c7:8f:5d:95:b9:74:a1:e6:
         5a:40:6e:23:6c:c6:17:05:9e:9b:b3:ac:4d:64:65:25:58:7a:
         ab:c0:da:8c:cc:5c:b2:fb:1e:15:17:36:68:3e:b9:c0:87:23:
         91:67:8b:1f:c3:d0:3d:6f:83:ba:a8:db:4e:7b:26:fa:40:bf:
         d6:25:16:3e:cf:7e:1a:86:d5:98:20:19:bb:92:f6:81:b0:3e:
         33:aa:90:e1:f8:63:9d:6d:85:ad:1e:c5:08:a8:9c:42:b6:30:
         3b:81:ee:fe:c8:93:49:7b:6b:50:03:41:a9:67:75:00:37:54:
         d1:f5:85:c6:a7:f1:c4:af:2d:90:bb:8b:1b:f9:1c:ac:fe:1c:
         6f:71:21:f0:9a:65:f8:f3:c0:df:c5:3a:b9:a6:8e:5e:2e:12:
         3a:ac:4c:4d:e0:e9:9c:bd:d6:db:46:50:58:05:c2:ac:9c:55:
         44:9a:0c:8f:59:60:af:cc:83:20:e0:3c:c8:8a:b6:73:10:1b:
         ce:61:eb:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:29:12 2025 by rpki-client