Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/c1ef0eee-19de-307f-8352-756662d48fb6.roa
File:                     c1ef0eee-19de-307f-8352-756662d48fb6.roa (raw, json)
Hash identifier:          cUI8jJXY8McS7DegjZ1JWGIG1/FusDd6SN8sWMcQGJU=
Subject key identifier:   C6:5E:09:7E:27:05:9E:55:C9:A5:D2:48:9E:00:A9:67:EE:48:E3:4F
Certificate issuer:       /CN=a288b4bb-60c5-4f54-8c7d-75bba8d4b059
Certificate serial:       010D0C9F4328584B8BE20CE8E312310AB5461E4C
Authority key identifier: ED:2D:24:6E:34:BA:A1:7A:E7:A9:EA:3F:A6:D1:B7:6F:61:96:9E:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/c1ef0eee-19de-307f-8352-756662d48fb6.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     25625
IP address blocks:        206.220.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:0c:e8:e3:12:31:0a:b5:46:1e:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a288b4bb-60c5-4f54-8c7d-75bba8d4b059
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=c53e54ad-36a8-4767-a49d-fd4be1274023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e7:15:51:57:77:72:98:dc:55:2f:8a:db:bb:
                    d2:c1:44:f8:03:ce:fc:dc:68:dd:bf:6a:c3:c3:cb:
                    82:ce:09:de:c1:51:7b:b4:47:27:a3:af:79:66:5d:
                    3c:04:62:fe:27:f6:c7:ec:42:09:a5:52:dd:15:e6:
                    06:c1:5b:62:b8:a6:ce:2f:7e:1b:57:df:d5:43:07:
                    fc:38:95:16:a6:25:8c:6d:4c:03:ad:78:87:08:8b:
                    cf:5b:cc:74:ec:2f:bb:dc:1b:0c:9f:42:a5:94:32:
                    ea:50:70:45:0b:b7:85:66:8e:8d:3f:fe:74:e1:1f:
                    40:1c:c2:49:45:42:b1:1d:24:8d:27:d0:d2:21:59:
                    fa:52:41:04:ab:ad:29:c3:57:e5:e9:e7:e8:d6:b2:
                    a4:70:4a:85:f0:75:7d:db:f0:92:0a:d4:2c:62:2d:
                    1c:da:0a:00:73:02:00:c4:0f:92:c4:95:9b:02:60:
                    34:ac:8e:37:e0:85:d5:b9:ea:a3:b7:9a:de:ea:eb:
                    00:86:5e:99:49:7b:42:e4:8a:ab:95:b3:85:e6:8a:
                    4c:ca:30:0b:a0:f5:f0:c0:f1:f4:3e:b2:b7:ed:86:
                    8a:59:bb:44:dd:0e:e4:92:a3:68:3b:7d:ea:7a:fd:
                    d1:ec:62:4a:25:7c:7a:ba:93:41:18:86:75:b9:e2:
                    b3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:5E:09:7E:27:05:9E:55:C9:A5:D2:48:9E:00:A9:67:EE:48:E3:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/c1ef0eee-19de-307f-8352-756662d48fb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.crl

            X509v3 Authority Key Identifier:
                keyid:ED:2D:24:6E:34:BA:A1:7A:E7:A9:EA:3F:A6:D1:B7:6F:61:96:9E:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.220.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:90:83:1e:1a:81:1d:51:96:42:f5:f4:60:fc:d3:08:20:7e:
         38:35:7b:61:9a:b1:af:22:71:76:35:1b:c5:1e:01:88:7a:09:
         45:4e:32:c4:69:48:8c:e2:05:de:8e:cf:2b:bf:1f:48:c9:45:
         c1:f4:6c:5d:7f:83:45:c3:a4:e5:0b:7d:1d:85:c7:a9:d6:9e:
         ab:13:85:a7:a7:62:17:77:57:5a:77:94:40:da:e9:5c:bb:65:
         bf:fc:69:aa:52:b9:ee:d1:99:39:a0:9b:0c:17:3a:f1:6d:ec:
         a4:40:c5:3f:df:2f:49:7d:0b:60:f0:18:16:84:7a:47:d1:c9:
         93:fb:22:10:30:ed:01:3c:e5:95:64:c3:f1:88:d2:26:3f:13:
         38:69:f9:d6:4b:e4:81:a2:77:6c:b9:0f:a4:ec:60:61:f1:41:
         53:aa:93:e5:10:86:88:61:cd:24:0f:e3:0f:c6:f3:93:97:d5:
         d3:52:dc:5a:af:57:57:8d:08:76:11:2b:79:3f:4e:6c:9a:26:
         af:e6:75:69:88:74:85:63:e6:68:ee:97:1b:0e:ea:86:41:cd:
         5f:ab:73:6a:1f:04:1e:41:58:fa:72:bd:37:84:81:00:8c:ff:
         51:eb:b6:50:8b:ba:88:20:cb:a8:d6:5f:26:b1:4b:0d:26:5f:
         27:87:7f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:58:52 2025 by rpki-client