Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/2e2c70d9-43f9-35c6-bbb3-95520ca1ed91.roa
File:                     2e2c70d9-43f9-35c6-bbb3-95520ca1ed91.roa (raw, json)
Hash identifier:          QtLl/p5LzZSi/2Z7XOkC2jdZFkLVbnq27FKN/L2M4Ug=
Subject key identifier:   48:72:FD:51:5C:05:F0:B9:B6:AC:46:11:AE:E1:38:43:B8:38:88:8B
Certificate issuer:       /CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
Certificate serial:       010D0C9F4328584A9206352C315E0990FB7A0640
Authority key identifier: 37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/2e2c70d9-43f9-35c6-bbb3-95520ca1ed91.roa
Signing time:             Sat 19 Jul 2025 13:01:04 +0000
ROA not before:           Sat 19 Jul 2025 13:01:04 +0000
ROA not after:            Fri 17 Oct 2025 13:01:04 +0000
asID:                     6939
IP address blocks:        206.125.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:92:06:35:2c:31:5e:09:90:fb:7a:06:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
        Validity
            Not Before: Jul 19 13:01:04 2025 GMT
            Not After : Oct 17 13:01:04 2025 GMT
        Subject: CN=a1f0279d-37ac-4a73-b54d-10ec5874d643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:36:cf:0c:bb:61:bd:35:f9:a8:5a:44:7e:22:
                    ae:1b:c3:89:aa:b8:5c:9c:dc:89:63:ba:f5:de:f3:
                    ed:52:53:aa:6d:9b:b2:25:6f:39:89:06:dc:5b:41:
                    92:70:46:6a:d5:0f:29:f8:07:34:95:69:3b:a3:39:
                    c0:a5:2b:ec:ac:72:04:93:a4:49:47:1e:64:f0:d7:
                    4a:09:4c:2d:ad:96:06:4e:86:c8:37:3f:cc:81:d5:
                    2d:54:11:6a:64:59:96:81:f1:81:46:8d:03:28:49:
                    be:4b:61:e8:13:14:1e:39:97:1e:12:75:73:fc:ea:
                    e5:90:78:b8:7f:4c:8a:a3:e9:1e:5c:eb:44:99:ee:
                    8b:f8:e3:f7:56:5d:9a:eb:1f:a6:81:eb:f3:6f:f2:
                    88:8d:30:5f:60:a1:79:12:ae:28:96:f0:d6:a9:35:
                    b2:fe:d5:a3:a2:c7:e2:b9:b5:65:f9:93:1f:b6:7a:
                    05:04:4e:e3:7e:d0:cf:59:f1:b4:a4:16:72:a5:fb:
                    e2:6d:3b:3e:8f:80:ec:ad:1b:95:1a:fa:53:d6:dd:
                    90:be:56:4b:3c:cb:dc:10:31:9a:61:cd:c3:9a:7b:
                    bf:0c:37:7c:dd:cc:d7:6b:e2:99:e7:b3:d9:dc:4c:
                    af:70:fc:21:dd:a2:31:03:88:f7:be:ed:9b:f9:54:
                    bf:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:72:FD:51:5C:05:F0:B9:B6:AC:46:11:AE:E1:38:43:B8:38:88:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/2e2c70d9-43f9-35c6-bbb3-95520ca1ed91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.crl

            X509v3 Authority Key Identifier:
                keyid:37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.125.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:8a:57:d2:24:ae:3a:7d:93:ce:30:09:bf:0d:77:30:ce:67:
         97:1c:b1:df:9d:be:1b:53:25:19:37:28:b7:d2:0f:eb:03:0f:
         b6:86:66:42:98:26:26:29:46:51:fc:8c:46:35:bb:68:96:d7:
         b9:c6:04:b5:b1:cc:02:8b:df:70:f1:80:1d:72:d0:7b:d3:37:
         6b:24:d3:c8:a2:9f:49:c2:e3:fa:6e:3d:57:8f:36:28:0a:01:
         9b:5e:05:54:78:97:60:66:2e:fe:75:7a:2c:77:0b:b7:f6:04:
         6e:2c:cc:45:eb:66:88:7a:a0:0e:66:d9:84:0b:ea:58:d9:72:
         09:fd:49:65:87:4b:f1:cc:77:d7:59:8a:18:44:05:4f:70:df:
         48:7a:9d:ba:06:a1:1c:17:9a:31:49:ba:02:f8:a9:48:92:87:
         09:57:0e:c0:97:88:1e:4f:4e:dd:96:3c:94:ff:df:60:74:6a:
         a0:bf:cb:1f:d9:0a:40:5c:93:65:36:32:3d:0d:62:8f:07:a8:
         e8:5d:b3:fd:8f:ae:a0:d3:bd:4a:2b:f9:f3:14:56:07:8e:92:
         12:2e:e1:8c:fb:39:92:f9:7e:99:ab:c1:ba:b0:f6:98:8b:43:
         0d:f5:02:a3:57:0c:41:09:03:1c:1c:2d:7b:23:0a:ec:58:a0:
         f1:fc:93:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:14:04 2025 by rpki-client