Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fd41f50f-fe94-4803-9998-4983492c4d38/8247b842-9eeb-33e6-969e-57260bed6fb2.roa
File:                     8247b842-9eeb-33e6-969e-57260bed6fb2.roa (raw, json)
Hash identifier:          HxGViJRczVVTVp+Rl2oWFPEbetOneC4pquy9ZAfcH8Y=
Subject key identifier:   63:CB:D2:DF:24:4A:77:EC:F9:76:C5:30:2B:5C:B7:C8:5E:E9:4B:84
Certificate issuer:       /CN=fd41f50f-fe94-4803-9998-4983492c4d38
Certificate serial:       010D0C9F4328584B87B21D58179F7367280EB080
Authority key identifier: C4:08:C1:A9:70:D3:A6:79:51:EB:7F:B5:2D:33:87:D2:98:82:F7:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fd41f50f-fe94-4803-9998-4983492c4d38.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fd41f50f-fe94-4803-9998-4983492c4d38/8247b842-9eeb-33e6-969e-57260bed6fb2.roa
Signing time:             Wed 15 Oct 2025 13:00:38 +0000
ROA not before:           Wed 15 Oct 2025 13:00:38 +0000
ROA not after:            Tue 13 Jan 2026 14:00:38 +0000
asID:                     14618
IP address blocks:        206.126.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fd41f50f-fe94-4803-9998-4983492c4d38/fd41f50f-fe94-4803-9998-4983492c4d38.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fd41f50f-fe94-4803-9998-4983492c4d38/fd41f50f-fe94-4803-9998-4983492c4d38.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fd41f50f-fe94-4803-9998-4983492c4d38.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:87:b2:1d:58:17:9f:73:67:28:0e:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd41f50f-fe94-4803-9998-4983492c4d38
        Validity
            Not Before: Oct 15 13:00:38 2025 GMT
            Not After : Jan 13 14:00:38 2026 GMT
        Subject: CN=75f09404-fd73-46d0-b6cd-2e5d6cb838e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:33:e2:99:ed:57:27:31:bd:ae:7e:7b:55:2f:
                    4e:ab:bf:52:fb:57:d6:10:fc:71:b6:aa:e5:1a:13:
                    64:7d:8d:8d:95:ae:b0:df:3d:a6:5d:e3:40:f4:96:
                    da:04:44:50:04:80:2f:dd:4c:14:6d:b1:a6:3f:62:
                    c5:e6:88:80:dc:65:42:f3:e2:44:92:e3:5f:e6:2b:
                    61:06:81:f7:4b:6b:1a:c7:a8:72:06:6a:7e:85:6d:
                    d5:69:b2:93:4e:a3:85:f7:1a:f2:3a:7b:4a:90:86:
                    d7:5a:eb:96:1d:f1:5e:e0:26:7d:5b:ea:40:af:41:
                    cc:7a:f1:63:d1:f6:12:19:f4:56:72:4d:37:df:b9:
                    82:ad:f9:20:99:9d:79:ad:78:00:93:0d:f9:d1:96:
                    52:fa:1a:a8:69:63:6f:f0:9e:c3:5e:db:71:ba:ff:
                    9e:2a:da:2d:46:23:e0:95:b6:96:42:63:5b:ba:9e:
                    b0:2a:fb:18:8b:ab:b1:61:8b:89:c1:6c:1d:4e:36:
                    12:b0:a3:15:38:f6:f2:01:f3:97:dd:9c:8f:99:54:
                    17:df:11:56:b6:75:08:f3:e9:26:30:5c:ce:00:31:
                    6f:a0:01:e8:31:9e:6d:d7:32:65:16:6d:fc:b9:de:
                    2d:d2:04:9e:e3:7c:3e:02:e8:f0:6b:a3:6b:56:7f:
                    21:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:CB:D2:DF:24:4A:77:EC:F9:76:C5:30:2B:5C:B7:C8:5E:E9:4B:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fd41f50f-fe94-4803-9998-4983492c4d38/8247b842-9eeb-33e6-969e-57260bed6fb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fd41f50f-fe94-4803-9998-4983492c4d38/fd41f50f-fe94-4803-9998-4983492c4d38.crl

            X509v3 Authority Key Identifier:
                keyid:C4:08:C1:A9:70:D3:A6:79:51:EB:7F:B5:2D:33:87:D2:98:82:F7:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fd41f50f-fe94-4803-9998-4983492c4d38.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.126.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:de:e1:08:0f:1c:ab:93:1f:1d:37:97:e8:4d:13:ca:82:35:
         f0:c0:55:fb:aa:c4:12:0d:96:8f:0a:bd:49:1a:a1:0f:a9:a4:
         a4:d6:1a:0f:a1:b8:a0:5c:35:69:6c:fe:cd:64:5a:89:b9:3c:
         a8:f0:ec:0a:4f:d5:a9:56:39:fd:81:84:c9:73:87:e0:c6:88:
         0d:cc:e3:67:1e:6e:71:f4:88:eb:45:46:2e:b7:85:74:54:e8:
         59:32:81:fa:7c:24:56:b3:1f:9d:96:14:e3:f5:e2:d1:97:1e:
         a2:d4:c5:ee:dd:6c:be:29:9a:7a:25:c5:98:b1:fd:50:12:3d:
         a4:cd:26:84:a3:eb:b7:02:91:c8:18:28:87:d3:d6:9d:9f:e0:
         c6:99:34:d4:3e:fb:ef:3d:f0:4a:a7:d6:30:68:a0:e9:0c:68:
         5b:43:f9:64:43:08:3e:1b:d8:77:c7:a5:a9:35:cb:07:d8:de:
         cc:f2:88:83:53:ff:8c:17:b7:af:2f:52:94:91:d6:26:fa:94:
         e2:2f:83:70:bb:10:da:fe:97:90:8f:49:64:12:0e:e4:7f:2e:
         52:d2:4d:65:c5:9c:b4:ec:d8:15:38:c1:af:3c:ee:84:7d:77:
         24:59:e2:ef:fe:47:ac:6c:53:3d:82:4a:44:29:05:42:60:d5:
         e2:de:df:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:22:40 2025 by rpki-client