Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/3f7623ce-fa12-3190-93d6-daf4bba1752a.roa
File:                     3f7623ce-fa12-3190-93d6-daf4bba1752a.roa (raw, json)
Hash identifier:          TvcXuY2JVbg2pB0JQkOQgcZsGBGWvmApwqj8HDzhIBs=
Subject key identifier:   FF:71:34:34:99:8B:11:14:0D:65:9F:51:3C:25:B8:11:4D:5D:88:2B
Certificate issuer:       /CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Certificate serial:       010D0C9F4328584B80B7587781150D2E61D81890
Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/3f7623ce-fa12-3190-93d6-daf4bba1752a.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     6505
IP address blocks:        206.48.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:58:77:81:15:0d:2e:61:d8:18:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=3b5c3368-b7c0-46f6-b24c-014d2b74b357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:51:09:46:be:fb:31:37:17:83:f6:1a:28:54:
                    7e:52:b2:81:ca:b7:c3:4b:43:dd:46:17:e4:8c:e9:
                    fb:70:72:64:8b:bc:58:22:76:82:d4:61:14:43:5a:
                    f7:64:e2:e9:00:8d:ad:10:a1:57:3d:c5:16:e3:27:
                    88:af:34:33:c9:ae:be:a2:f0:d7:84:bf:54:a6:e6:
                    40:49:96:aa:36:96:6c:63:24:bb:7f:a6:1f:55:ec:
                    b5:ab:f9:c9:1c:26:58:f1:3b:9e:96:70:8b:1b:09:
                    3e:b5:6f:14:fc:b0:99:60:0c:f9:cd:4b:52:18:e3:
                    5b:b3:f9:b5:8c:48:8d:c7:48:98:dc:6e:7e:02:d8:
                    4e:e7:c1:14:4e:eb:6b:42:fc:d2:5c:c4:97:06:ce:
                    7d:6c:7a:2f:88:0c:23:78:d1:54:8d:ca:dd:21:68:
                    8c:c4:98:03:b8:48:f0:9f:21:80:40:c2:b8:a0:e1:
                    9b:f0:95:7b:63:9b:29:6b:93:08:7d:81:46:d5:d9:
                    7d:e6:65:19:b6:a3:07:21:e7:c2:08:2c:ba:43:b6:
                    9d:9f:ac:e6:48:69:e2:2d:64:27:f5:55:e3:78:a8:
                    d1:b8:47:0d:35:11:ab:59:16:a0:53:f9:8e:f4:d0:
                    85:23:62:49:7d:7f:f4:50:2f:ae:83:6c:03:6f:06:
                    59:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:71:34:34:99:8B:11:14:0D:65:9F:51:3C:25:B8:11:4D:5D:88:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/3f7623ce-fa12-3190-93d6-daf4bba1752a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl

            X509v3 Authority Key Identifier:
                keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.48.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:c4:4b:24:cf:5a:4b:52:09:39:50:91:db:f0:37:f4:69:85:
         8e:ca:3c:58:61:02:9b:c4:02:ed:52:83:ec:78:8e:c0:9a:0e:
         4d:24:4e:75:40:90:7c:34:88:6f:0b:f7:a6:07:65:b5:15:cd:
         f4:85:e5:c7:37:64:33:9f:ca:14:4a:d3:7a:dd:23:d0:50:89:
         75:54:3b:31:2f:25:63:3c:2d:c7:6d:d2:02:5a:b2:d6:75:14:
         4f:9f:30:80:a3:af:ba:55:42:9e:ed:cd:c9:85:2f:f3:c6:36:
         24:2a:4f:46:9b:8c:75:1d:cc:d8:f4:9a:c5:64:84:7f:4a:62:
         96:1b:f4:1b:b4:4f:02:7a:0d:ac:a1:2d:14:43:b8:05:ef:38:
         06:ff:68:93:6a:61:d8:15:85:a3:6a:8d:34:90:01:b5:2f:50:
         be:7c:91:69:5f:3e:29:24:73:a5:74:c8:a5:d0:9d:72:d8:14:
         82:9a:6d:fe:38:4c:d0:32:5c:8e:89:69:a0:80:f8:c4:64:64:
         2a:6b:53:c5:cf:f1:77:aa:56:9a:f1:c6:60:2b:47:e6:62:75:
         9d:20:98:60:f8:ab:3a:fa:08:6a:b7:3e:df:c6:e4:fd:61:0b:
         ad:63:49:be:f8:27:85:27:e9:5d:2e:f2:3a:71:22:be:16:9b:
         43:42:29:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:47:17 2025 by rpki-client