Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/3b4e0f71-6c58-33a2-b39a-1e53f2855bc3.roa
File:                     3b4e0f71-6c58-33a2-b39a-1e53f2855bc3.roa (raw, json)
Hash identifier:          FnGjVgsvbq1hL8p/gCg6Qp4gel3F3wWQPJ5uVORBV8Y=
Subject key identifier:   36:DB:47:0F:17:BB:8E:36:85:6F:B4:D7:8A:36:4F:85:E0:13:34:E0
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584B583C9A760F62EEA092C22800
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/3b4e0f71-6c58-33a2-b39a-1e53f2855bc3.roa
Signing time:             Sun 28 Sep 2025 13:00:41 +0000
ROA not before:           Sun 28 Sep 2025 13:00:41 +0000
ROA not after:            Sat 27 Dec 2025 14:00:41 +0000
asID:                     376
IP address blocks:        206.167.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:58:3c:9a:76:0f:62:ee:a0:92:c2:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Sep 28 13:00:41 2025 GMT
            Not After : Dec 27 14:00:41 2025 GMT
        Subject: CN=23c4ed43-0d35-4d90-9922-b3a39dc3c104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:52:1b:f2:a4:59:fb:e9:21:55:31:a0:41:af:
                    3c:08:82:52:3b:08:ae:57:fb:3d:03:a7:81:b5:b3:
                    22:1f:15:81:ff:3f:e6:09:c2:bf:19:0b:65:8d:9c:
                    0b:d0:d9:8f:0c:8b:5e:9e:49:41:bf:15:ba:3b:c7:
                    e9:91:be:25:33:46:34:43:bb:26:d4:ee:e5:68:27:
                    15:53:65:a2:ca:47:87:9d:6b:d6:62:7b:1d:40:c8:
                    71:0c:9d:ad:ce:3f:91:51:27:95:5e:00:f5:c4:64:
                    49:85:89:3d:01:95:35:ab:0c:83:a7:1c:c7:38:08:
                    b5:90:94:01:74:9a:d9:f0:1d:ea:e4:3b:e2:7f:3a:
                    f1:0d:4d:ed:fb:d5:b4:ce:e1:a4:10:38:55:f6:ce:
                    24:a3:c5:91:66:28:e1:df:6b:7b:b9:20:35:9c:ff:
                    de:59:97:04:86:5a:fd:04:74:9b:b0:24:7a:8e:08:
                    11:41:de:37:de:86:02:3e:33:6f:df:bf:e7:8e:02:
                    db:f9:b5:6d:07:b9:91:a1:65:3b:f3:d8:de:ee:01:
                    4e:ed:42:6d:8a:9f:4b:c5:17:50:7f:7a:fa:ce:be:
                    15:b7:c3:79:56:5f:51:45:6c:86:4e:3a:78:33:93:
                    5c:8a:79:06:21:72:95:8c:3f:7b:5e:dd:bf:ca:83:
                    fa:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:DB:47:0F:17:BB:8E:36:85:6F:B4:D7:8A:36:4F:85:E0:13:34:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/3b4e0f71-6c58-33a2-b39a-1e53f2855bc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:fd:91:a4:ed:7a:f8:a8:26:b8:82:83:57:76:7d:d8:f1:5e:
         00:83:f6:5d:24:5f:f2:f5:e3:c5:d7:81:d8:0e:d3:d6:9e:d8:
         ff:0e:7e:34:e4:dd:ff:2b:4c:c4:ed:b3:35:99:10:ec:55:df:
         40:7e:2a:6f:86:8c:18:e8:be:98:5a:3e:c8:7b:76:06:5a:87:
         a6:bb:de:a5:1c:cc:4f:47:5d:74:b3:95:79:b2:ed:58:5b:ea:
         ac:5d:80:86:94:27:4c:03:30:16:1d:b7:03:d3:ff:30:72:59:
         cb:a4:7c:e3:78:6f:b9:a1:1a:8c:10:ed:39:d1:3b:eb:32:6e:
         34:a8:d6:d0:84:7b:24:d1:22:08:46:06:22:d3:95:9c:02:e6:
         22:c3:93:83:73:78:9c:14:5b:6d:48:56:69:a6:b1:cf:9d:5f:
         b4:16:ad:62:9b:9f:12:fc:5c:05:db:7a:0d:f7:99:f5:c3:10:
         07:a2:07:cf:0b:28:5f:cb:48:93:da:89:52:30:e0:f8:77:66:
         37:0b:4e:8d:cc:c6:d1:e5:7b:20:fd:ef:66:e7:a6:99:a2:f6:
         05:a2:45:ee:cd:18:f7:a3:88:9b:47:09:2e:32:74:97:28:52:
         5f:82:f1:2a:01:25:49:44:a0:48:7f:33:e1:76:85:38:68:dd:
         d4:65:b8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:55:54 2025 by rpki-client