Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/006a6fa9-a677-3ad7-8a11-9663dee47482.roa
File:                     006a6fa9-a677-3ad7-8a11-9663dee47482.roa (raw, json)
Hash identifier:          3Yjp3MN5grFsfxtxKTbBG6ukVgFujmeuSMTeqdS3W7o=
Subject key identifier:   4E:F2:9F:3B:DF:01:9E:0B:5F:88:38:84:BC:BE:A9:32:A7:0D:D3:3D
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584B6D2C955ADF0D8F4D2BA8D480
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/006a6fa9-a677-3ad7-8a11-9663dee47482.roa
Signing time:             Mon 06 Oct 2025 01:00:33 +0000
ROA not before:           Mon 06 Oct 2025 01:00:33 +0000
ROA not after:            Sun 04 Jan 2026 02:00:33 +0000
asID:                     140224
IP address blocks:        206.54.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6d:2c:95:5a:df:0d:8f:4d:2b:a8:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Oct  6 01:00:33 2025 GMT
            Not After : Jan  4 02:00:33 2026 GMT
        Subject: CN=030341a5-fafe-4310-a0fb-2c8cca2ec8ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1a:c1:64:3e:a2:6a:8e:aa:56:85:bd:48:a4:
                    0b:7a:86:11:ab:c8:1b:f2:49:13:03:db:8a:ad:bf:
                    9c:68:e3:f8:ff:06:8e:01:50:22:56:9f:79:c2:41:
                    5e:6a:56:29:1d:47:3a:5e:6c:67:6d:29:fc:27:b2:
                    e3:a5:31:51:c6:e0:ad:95:99:82:46:8a:49:36:61:
                    a7:5f:aa:d3:04:92:a4:4c:53:a2:2f:39:c3:6c:ee:
                    ad:ff:ba:36:2a:b7:aa:27:97:4b:54:b5:ff:1c:03:
                    3b:dc:26:5c:5b:5f:9d:c3:96:42:5c:bc:08:a6:b9:
                    be:49:f3:24:23:80:18:f6:3e:0b:12:0b:43:d1:7b:
                    b8:40:bf:ef:4d:39:8e:d8:14:83:82:d0:77:12:d9:
                    c6:ef:42:c5:a6:db:d6:e5:6f:70:52:1d:1d:e1:8f:
                    9b:9c:df:66:20:69:cc:79:f8:36:72:e6:f8:52:df:
                    6a:2a:90:4b:43:b6:4e:11:5e:42:93:56:0a:80:3b:
                    50:72:20:3c:ab:f6:04:53:12:15:c1:3f:e8:cc:3e:
                    3b:a6:f4:87:65:b3:42:d6:c3:47:fb:3e:2f:0b:24:
                    79:1d:b4:7e:25:50:fe:99:e6:cc:e3:21:a0:d1:7a:
                    9c:ef:26:ce:82:18:30:25:ec:30:9f:e8:27:13:d8:
                    e9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:F2:9F:3B:DF:01:9E:0B:5F:88:38:84:BC:BE:A9:32:A7:0D:D3:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/006a6fa9-a677-3ad7-8a11-9663dee47482.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.54.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:7c:4b:96:7c:02:55:c6:b4:d9:bd:dc:df:88:15:dd:84:f4:
         93:df:92:af:2c:42:24:5e:b1:9e:a3:1e:cb:bb:71:9f:c1:bf:
         c2:ac:33:9c:17:4c:b3:bf:05:ad:05:8b:76:f5:b3:4f:32:c5:
         bb:9a:5c:86:9d:83:8f:6d:bc:a2:13:17:df:62:a8:7c:14:17:
         dd:22:90:b3:c6:1a:97:64:26:e2:8c:a2:33:51:78:65:c6:5e:
         5b:1f:a0:9b:df:d2:29:7a:44:a8:e1:77:65:f6:7d:8b:f8:73:
         69:a0:17:7d:93:be:d6:99:a5:d2:61:8d:8a:f8:d8:b9:9d:3a:
         7c:38:d9:0c:01:64:b6:1c:29:65:dd:e2:22:d8:7c:70:9e:c5:
         52:f6:8a:87:a2:95:8b:0f:fd:1c:f0:4c:07:c8:aa:d0:11:09:
         77:db:eb:4d:c5:d3:27:c6:ac:02:cd:2a:61:ed:2a:d9:6b:5d:
         a8:0b:75:6c:15:8a:f2:db:cd:da:d2:6b:18:64:41:50:ac:73:
         70:2c:dc:5a:26:69:11:35:a6:aa:cf:65:58:94:36:47:f0:0f:
         76:2e:6f:9a:a6:a2:fa:8a:7f:74:98:5a:11:c7:3b:f3:26:b7:
         f3:85:09:fb:2d:84:f1:bc:9c:d4:f0:77:18:58:48:9e:de:4a:
         58:72:c1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:39:39 2025 by rpki-client