Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/683ea603-7170-36d4-889d-5604174e78f5.roa
File:                     683ea603-7170-36d4-889d-5604174e78f5.roa (raw, json)
Hash identifier:          iV+aLuUjJEkEas78CPb6MpI27+ZpRQ1rzfQ237a18NE=
Subject key identifier:   98:6B:F4:76:DF:AD:88:4F:8D:9C:9C:CA:B6:81:06:AA:32:70:A2:38
Certificate issuer:       /CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265
Certificate serial:       010D0C9F4328584A936B5E2EAA3D070C70C63D80
Authority key identifier: 6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/683ea603-7170-36d4-889d-5604174e78f5.roa
Signing time:             Sun 20 Jul 2025 01:00:50 +0000
ROA not before:           Sun 20 Jul 2025 01:00:50 +0000
ROA not after:            Sat 18 Oct 2025 01:00:50 +0000
asID:                     7029
IP address blocks:        206.174.152.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:93:6b:5e:2e:aa:3d:07:0c:70:c6:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265
        Validity
            Not Before: Jul 20 01:00:50 2025 GMT
            Not After : Oct 18 01:00:50 2025 GMT
        Subject: CN=c954adc9-3f20-4ff8-bf46-c3f8a317ff6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3b:95:67:92:d0:75:65:92:98:21:30:fc:56:
                    be:72:44:68:3e:22:a3:c8:c2:84:f3:f9:99:19:f2:
                    34:1a:51:5c:8e:b0:c2:66:d6:eb:df:f1:5f:9d:d5:
                    81:dd:46:7d:ad:b0:fe:16:e3:5e:c1:80:f6:23:7d:
                    5e:34:52:a6:78:12:78:48:00:c3:a4:b3:7b:50:0e:
                    43:d6:c5:91:a3:cc:63:dc:1a:4c:e6:ce:fb:bd:1c:
                    fd:c5:8e:dd:8f:3d:f1:09:cb:a8:5d:b5:19:39:91:
                    bd:23:14:e1:59:8f:46:3a:77:52:e2:9a:e7:e0:26:
                    36:98:1f:6f:95:81:22:9b:4e:85:33:d4:bd:00:05:
                    c2:9f:95:58:d2:ac:d9:0f:e5:48:98:2c:b6:09:97:
                    99:3b:13:b5:3c:99:18:22:82:75:b9:10:64:ed:b7:
                    13:5b:ca:06:0a:58:9d:87:2d:36:c3:78:1e:a2:a9:
                    ed:5b:a2:8a:8f:71:3d:2d:de:c6:d0:31:8c:18:91:
                    78:a8:14:da:50:5b:46:b2:44:53:b2:40:61:68:38:
                    f8:83:79:de:69:4e:fe:37:e7:3f:62:d0:8f:a6:e9:
                    39:07:4b:3d:83:4c:c4:53:01:d7:ae:99:3c:c4:c5:
                    d4:8c:3d:78:e4:88:ac:31:0e:9f:13:a7:e9:98:d7:
                    50:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:6B:F4:76:DF:AD:88:4F:8D:9C:9C:CA:B6:81:06:AA:32:70:A2:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/683ea603-7170-36d4-889d-5604174e78f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl

            X509v3 Authority Key Identifier:
                keyid:6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.174.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:a9:95:00:6a:1b:67:2e:99:e5:65:e0:86:a4:05:18:c9:48:
         8a:46:be:1b:06:db:13:6d:af:30:0a:e1:39:87:c5:8b:52:dc:
         83:7e:b0:1b:b1:f6:60:15:50:6f:e1:e5:fd:da:8c:a6:b2:40:
         61:71:43:27:c5:44:5b:dc:9f:4b:a9:5d:c2:d7:bd:d4:53:ef:
         30:ab:76:8c:df:dd:43:12:1d:bc:f1:ac:44:d4:ee:76:e9:65:
         44:e3:be:9d:a3:c1:5e:6d:d8:f2:b4:a0:cf:f9:e8:69:d3:d7:
         7a:3e:e0:a7:64:17:28:4e:f7:ce:fe:63:42:16:3c:0a:1f:1b:
         a8:ce:13:d1:57:87:4c:33:72:68:3b:93:db:54:85:15:e6:6b:
         3a:41:fc:fb:64:cb:92:85:5d:d0:42:d4:b2:38:53:23:c1:c9:
         62:ee:3f:8b:a5:cd:ff:b4:2d:ad:ea:d4:c4:a0:d0:8c:8f:22:
         b8:00:24:26:03:b6:c8:08:1f:f6:71:d7:b9:26:69:77:86:40:
         25:c9:81:b0:25:54:a4:91:a1:fb:96:5f:13:d0:1f:a8:bb:30:
         94:43:0f:89:c9:e0:eb:28:1f:cf:b9:e6:30:d9:9c:ce:4b:72:
         12:ab:08:32:12:14:b3:2a:d0:99:6a:a9:4f:33:fc:02:aa:4a:
         3e:66:53:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:07:51 2025 by rpki-client