Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/ebd67df9-065e-3b03-9bbe-74c50f51cc45.roa
File:                     ebd67df9-065e-3b03-9bbe-74c50f51cc45.roa (raw, json)
Hash identifier:          lKB63Sj/eOCEISDMKm2T/tcXOYi0tbfAH2AOeznHzfE=
Subject key identifier:   FA:51:88:8E:34:91:58:74:C1:EE:EF:FB:52:6B:F2:E5:7D:43:0A:A2
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584AE1F9D17D090D18F7B48AAA80
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/ebd67df9-065e-3b03-9bbe-74c50f51cc45.roa
Signing time:             Sun 17 Aug 2025 04:21:00 +0000
ROA not before:           Sun 17 Aug 2025 04:21:00 +0000
ROA not after:            Sat 15 Nov 2025 05:21:00 +0000
asID:                     6922
IP address blocks:        206.76.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:f9:d1:7d:09:0d:18:f7:b4:8a:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Aug 17 04:21:00 2025 GMT
            Not After : Nov 15 05:21:00 2025 GMT
        Subject: CN=cec75d4e-4b0c-4d4e-9400-0f0e1a1396a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6d:ef:12:b0:6d:73:fb:d5:c5:35:5d:ab:8f:
                    25:35:10:48:c0:88:5c:00:11:47:f8:da:88:84:3a:
                    ec:32:dd:1c:2b:48:2e:69:f4:1b:dc:fd:17:61:ed:
                    9e:c6:3c:3f:d8:f8:f6:e0:96:c3:80:16:b0:b6:4a:
                    6a:4e:4c:44:05:b7:e7:44:67:74:da:a2:0d:5c:fb:
                    51:ad:b0:76:96:36:be:42:d0:fa:49:6e:33:d9:3e:
                    c2:83:7f:ed:68:f3:4e:46:0e:1c:c8:1b:2e:83:fe:
                    84:8c:56:ad:d7:6b:ae:5a:d0:1f:52:b1:47:97:44:
                    1b:3c:45:ee:1b:74:38:ee:e7:08:68:9c:ec:74:ef:
                    f7:8c:e9:42:d8:37:89:66:3a:2c:d0:0c:6f:9b:f1:
                    74:c7:21:0e:68:94:49:99:5f:3e:71:c5:91:5d:b6:
                    77:88:e1:ae:90:38:be:8a:7f:d0:21:5f:8a:98:c5:
                    7a:66:6b:bf:eb:f6:9a:48:92:a6:6c:ea:64:6a:89:
                    7f:83:1a:48:14:aa:2b:03:b7:03:e1:ab:6e:f7:8c:
                    fc:29:fc:32:5e:31:a9:35:5d:12:8e:60:60:f9:8e:
                    55:e5:fc:e5:88:b3:08:25:fa:1f:5d:7c:4b:e6:2f:
                    a1:97:46:08:e4:c5:db:ed:38:a2:da:7e:ba:cd:ad:
                    88:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:51:88:8E:34:91:58:74:C1:EE:EF:FB:52:6B:F2:E5:7D:43:0A:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/ebd67df9-065e-3b03-9bbe-74c50f51cc45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.76.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:a7:a2:3a:ca:2f:27:87:e9:f7:19:66:e7:c4:64:a1:12:45:
         5d:e5:89:58:57:12:26:e0:77:ee:59:74:fb:01:3e:b9:f3:64:
         df:63:a9:c7:fc:36:f9:15:4b:9c:b9:4a:3e:32:76:d9:65:7f:
         be:d0:76:31:50:8c:ca:99:5f:16:f1:ea:6a:ed:9f:53:2b:ab:
         64:3d:11:63:3e:a6:29:42:db:9d:e8:b6:8d:f9:8a:f7:02:d3:
         94:9a:03:a8:a1:92:ba:00:5b:94:ec:b6:8d:59:b8:62:d0:20:
         12:30:c6:9a:9b:e2:b7:88:c0:d0:e5:76:25:80:ba:46:2b:60:
         cd:f8:e8:b8:5d:7a:ff:8b:2e:85:9d:5c:7c:73:f5:f7:58:1d:
         31:00:ee:b4:97:a6:29:c6:cb:df:fd:80:c6:11:6e:ca:31:63:
         d1:f5:cd:02:96:8d:8e:04:d6:8a:8d:d6:41:a5:8b:b1:9f:6d:
         97:b8:5d:a2:0a:11:1a:62:4c:15:22:42:d6:60:cf:69:a5:ca:
         2f:80:53:27:13:56:e7:49:a5:f8:b2:f5:f6:2c:6b:30:46:fe:
         90:5c:42:e6:e3:cd:5f:82:8a:bd:2c:06:af:4d:c2:af:59:fe:
         df:53:1f:35:d0:b7:c7:e1:50:a5:e5:30:06:37:9b:be:79:d1:
         da:cd:f5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:11:50 2025 by rpki-client