Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a2532-a0fd-4a4e-9622-800185b4f9fc/1f3ecf85-e2cd-3017-abe6-b061fd426693.roa
File:                     1f3ecf85-e2cd-3017-abe6-b061fd426693.roa (raw, json)
Hash identifier:          l5IN8GfKG9DOMa5qv386hYkrvy0B6f8ik52S6hz2qN0=
Subject key identifier:   F6:2F:62:80:FF:D7:D7:4A:8D:02:B0:FD:E0:17:FC:AA:F3:63:CC:37
Certificate issuer:       /CN=937a2532-a0fd-4a4e-9622-800185b4f9fc
Certificate serial:       010D0C9F4328584B1C36B518CCFB262290FE33C0
Authority key identifier: C5:2D:36:72:56:3C:1A:32:D0:B4:16:7A:F1:8A:DA:18:95:95:66:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a2532-a0fd-4a4e-9622-800185b4f9fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a2532-a0fd-4a4e-9622-800185b4f9fc/1f3ecf85-e2cd-3017-abe6-b061fd426693.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     40694
IP address blocks:        206.168.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a2532-a0fd-4a4e-9622-800185b4f9fc/937a2532-a0fd-4a4e-9622-800185b4f9fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a2532-a0fd-4a4e-9622-800185b4f9fc/937a2532-a0fd-4a4e-9622-800185b4f9fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a2532-a0fd-4a4e-9622-800185b4f9fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:b5:18:cc:fb:26:22:90:fe:33:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=937a2532-a0fd-4a4e-9622-800185b4f9fc
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=513a45b6-5566-412d-9d2d-95a1666d88b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d1:c1:cb:a4:22:f9:41:91:a4:1c:cb:2f:97:
                    da:5d:70:37:79:51:e3:6f:4e:98:3c:d1:f8:82:87:
                    7d:c0:7a:ca:d4:65:19:bd:59:c9:0c:a3:7f:22:a6:
                    4a:80:a9:df:56:a4:2b:c8:f7:82:04:b1:4a:2c:b8:
                    43:7c:13:4b:9b:19:19:c8:17:75:b4:6c:46:9a:65:
                    87:67:0e:b5:28:79:c6:01:30:ba:56:19:b0:67:df:
                    47:52:a8:22:21:e6:f4:f4:7d:f5:b2:77:2b:10:02:
                    cd:7d:e1:1a:c1:6e:a6:2a:f4:e9:39:54:87:8d:9f:
                    b1:b2:60:be:54:b8:24:6a:73:de:54:11:d8:26:40:
                    1a:c7:f0:6f:da:3b:0d:8b:71:c1:19:7d:2b:8f:98:
                    dd:5f:b7:6c:72:67:0c:4e:6c:dc:84:24:00:2b:14:
                    52:cc:cc:f4:e2:25:ad:a9:23:12:84:9d:d6:f7:fe:
                    9b:b7:f4:8f:2b:95:4b:37:55:fb:b7:ef:92:b6:8f:
                    ba:0c:6b:69:ee:ce:56:a2:e0:98:d5:fc:48:31:60:
                    d4:85:ac:ec:a7:93:ea:73:c9:d0:d4:ed:ac:02:5f:
                    3f:3b:f9:47:c5:4f:b4:d3:0d:04:13:73:96:bc:08:
                    22:88:87:c3:3f:0a:d6:10:77:b4:ac:f4:ea:f0:a7:
                    31:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:2F:62:80:FF:D7:D7:4A:8D:02:B0:FD:E0:17:FC:AA:F3:63:CC:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a2532-a0fd-4a4e-9622-800185b4f9fc/1f3ecf85-e2cd-3017-abe6-b061fd426693.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a2532-a0fd-4a4e-9622-800185b4f9fc/937a2532-a0fd-4a4e-9622-800185b4f9fc.crl

            X509v3 Authority Key Identifier:
                keyid:C5:2D:36:72:56:3C:1A:32:D0:B4:16:7A:F1:8A:DA:18:95:95:66:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a2532-a0fd-4a4e-9622-800185b4f9fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:5a:a2:0b:41:dd:69:d4:f7:90:6e:84:f6:7d:52:62:3d:60:
         52:5e:19:ee:2b:17:32:e3:3c:84:1b:5c:e3:50:e2:08:08:f6:
         97:6d:a3:db:00:82:92:fe:b2:88:3d:9d:9f:f2:76:10:76:a9:
         c8:d1:dc:8d:cd:f1:93:40:06:2e:36:90:b9:1b:68:3b:d1:1d:
         56:a9:ff:23:82:73:9d:6e:99:85:6d:fc:04:e4:cb:61:65:6b:
         3d:68:4b:dd:91:2c:f6:79:98:37:a1:b3:b1:b5:40:43:8f:d6:
         f7:d2:a2:f6:b6:1e:22:39:4b:db:af:2d:2a:6c:45:d1:05:81:
         8c:27:eb:d5:c3:65:3e:b6:f4:31:40:84:d3:eb:cf:3d:50:31:
         7c:5d:8f:6f:ee:00:f2:bb:5c:31:32:79:02:0a:cd:4a:43:dd:
         9e:c6:ff:86:01:d7:87:d4:4b:e3:91:8b:e5:c1:ae:fa:24:ca:
         e0:ee:c9:22:81:75:13:04:c9:4a:b6:e9:53:c6:8c:f2:61:f4:
         17:96:c2:86:3b:d4:8f:de:14:7a:26:a1:c8:3e:cf:a0:ff:1a:
         b4:85:c6:24:4d:48:36:ba:5e:3d:16:c6:c3:91:d4:2d:9f:9e:
         33:cf:f1:40:ca:4b:84:7a:e6:71:c4:33:bc:99:57:b8:14:ec:
         b6:80:e1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:33:12 2025 by rpki-client