Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/6ef4f7b1-9dcb-39b5-9659-b2039a08fdc2.roa
File:                     6ef4f7b1-9dcb-39b5-9659-b2039a08fdc2.roa (raw, json)
Hash identifier:          3RJrVZO5mRRw+G18VKIQrxyQc9dGWExrXdBdsiyaW44=
Subject key identifier:   6A:B9:FF:38:BE:D4:B0:0A:D6:66:A4:5F:F3:70:58:CE:BF:AE:AC:6B
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584AE1968BAAA0158DBE678EBB30
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/6ef4f7b1-9dcb-39b5-9659-b2039a08fdc2.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     3561
IP address blocks:        209.176.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:8b:aa:a0:15:8d:be:67:8e:bb:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=a01659e7-fd74-4730-9291-be9359ce4f9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:38:1e:7f:42:0a:d8:3b:08:12:cf:e5:76:02:
                    c9:9e:da:11:6a:c6:c9:e8:e6:a7:98:a1:37:c5:bd:
                    35:10:83:4d:fd:1b:7c:82:16:a5:54:be:c2:48:30:
                    6d:4e:c9:88:ed:56:e2:91:39:31:c8:77:72:1a:95:
                    77:ff:e1:ff:c6:5f:fa:14:97:49:52:32:e9:c4:6f:
                    07:25:b1:50:ae:40:9f:6a:3d:51:08:84:7c:cc:d6:
                    93:14:5b:66:32:24:66:87:f1:14:93:8c:b1:71:b8:
                    96:a5:e4:f1:a5:11:96:a2:4d:dd:ff:94:0a:81:ca:
                    56:05:06:fb:86:a7:9e:b0:9f:cb:cc:96:33:a4:d2:
                    d3:eb:82:67:dd:55:8a:d4:f5:88:70:c9:46:70:ab:
                    b0:c0:f6:fc:72:e6:46:c5:8e:71:7a:97:d3:73:8f:
                    6a:52:ae:09:3d:3e:e9:c2:64:b0:97:ff:22:fb:88:
                    ce:25:89:37:1a:7c:90:dc:2d:d0:41:45:37:e9:54:
                    87:5e:22:d9:fa:ac:ab:41:97:11:ae:67:61:1f:a4:
                    00:a0:af:29:78:6b:96:b9:7e:28:e1:1f:d0:38:a2:
                    68:36:96:06:f6:2b:b3:da:9c:81:07:86:7c:63:a9:
                    e9:d8:ae:5f:9f:fc:fe:8c:9e:6d:0c:ec:0f:43:35:
                    2f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B9:FF:38:BE:D4:B0:0A:D6:66:A4:5F:F3:70:58:CE:BF:AE:AC:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/6ef4f7b1-9dcb-39b5-9659-b2039a08fdc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.176.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:98:90:3b:0b:81:7e:f9:4f:af:af:aa:c0:f4:3c:58:f9:95:
         7b:83:83:d8:17:2d:42:51:fe:79:9a:9f:84:2d:fd:e4:ea:66:
         03:c1:89:1e:3c:64:d5:82:6d:3b:68:1c:de:cf:64:0b:f8:65:
         63:37:20:15:6e:9f:05:2e:bc:99:af:56:31:82:1e:38:8b:42:
         e1:6b:85:3a:9a:67:9a:19:61:1a:c9:be:48:13:af:aa:2d:bf:
         90:17:6e:03:ef:63:d8:fd:36:75:de:43:a1:df:1b:12:c1:f5:
         31:19:7b:36:5f:8a:3b:90:c3:ce:4e:d7:6f:95:e9:95:4a:b7:
         0e:6d:94:c9:0c:dd:08:0c:63:f0:3d:d1:f5:75:14:73:ce:3e:
         10:b0:a5:8f:1d:7e:91:83:8b:70:94:09:5e:fd:d5:18:5f:3a:
         ff:64:c8:42:c4:bb:36:0f:9a:d9:cf:d9:20:09:1a:e6:31:f6:
         5e:a3:57:b2:ce:dc:eb:31:89:0b:f2:b3:23:ae:01:e2:c6:3e:
         62:46:96:c2:a5:f8:c5:cc:5a:d3:76:c5:4c:5f:15:4c:8f:44:
         e5:98:9e:25:1c:0c:41:f2:6b:8c:c1:df:a5:a4:16:f8:d9:0f:
         ac:09:11:b9:e0:1d:2d:5f:9d:db:7f:f2:45:83:e9:72:c9:fd:
         8b:77:88:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:11:27 2025 by rpki-client