Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/6bb3cbae-990d-32c7-a237-c3be9e183144.roa
File:                     6bb3cbae-990d-32c7-a237-c3be9e183144.roa (raw, json)
Hash identifier:          ih0WrrnZe9Kqyx0JKth978/gsSpzv2wg2CNrOFQSnlY=
Subject key identifier:   F3:C8:C1:37:E6:08:4A:DC:83:A1:6F:59:B3:83:9B:58:9A:F8:6F:97
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584B583C9A3F43C93E1BFD44EF80
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/6bb3cbae-990d-32c7-a237-c3be9e183144.roa
Signing time:             Sun 28 Sep 2025 13:00:41 +0000
ROA not before:           Sun 28 Sep 2025 13:00:41 +0000
ROA not after:            Sat 27 Dec 2025 14:00:41 +0000
asID:                     376
IP address blocks:        206.167.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:58:3c:9a:3f:43:c9:3e:1b:fd:44:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Sep 28 13:00:41 2025 GMT
            Not After : Dec 27 14:00:41 2025 GMT
        Subject: CN=a5d345dd-aa55-4fce-94f7-2dd767d9c21c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:41:4b:30:2a:d2:8d:6d:c7:03:f9:72:1f:a4:
                    0d:4f:c8:d7:12:d4:14:bf:9b:66:b3:65:93:63:ca:
                    6a:8f:fe:63:e2:81:00:d2:d2:8a:9b:68:aa:b8:a2:
                    af:0f:89:50:14:7a:56:37:81:61:bd:ef:75:dd:d4:
                    7c:ff:48:61:bd:35:1b:97:43:81:a8:b7:eb:93:db:
                    36:cd:c5:e8:60:ad:93:80:99:34:c4:98:73:b3:da:
                    f7:e2:10:7b:a5:45:3b:98:79:d0:96:e4:5d:21:77:
                    f4:27:38:c2:b6:db:34:ca:6f:97:93:e7:8e:bf:0b:
                    8b:84:d5:ad:3c:29:96:08:17:b6:98:e1:76:50:6a:
                    3a:9e:9a:3a:bd:52:39:5b:19:ca:2a:5c:36:10:75:
                    86:ff:cb:eb:1f:ed:a2:db:16:bf:4e:49:02:42:de:
                    39:43:cc:1f:87:8e:06:12:46:ed:0e:51:e5:d9:49:
                    31:e5:73:98:33:cd:b6:52:3e:ca:14:52:07:d4:1c:
                    9b:79:04:77:7a:72:13:36:24:6c:27:d5:0d:79:ff:
                    bf:4d:41:4c:50:7b:f5:d0:90:db:66:94:ae:75:b0:
                    a7:b6:b2:a4:45:fd:2e:b0:62:1e:ee:88:24:83:cd:
                    21:8b:64:78:d1:8a:83:3d:0c:68:8e:72:6c:a1:ff:
                    62:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C8:C1:37:E6:08:4A:DC:83:A1:6F:59:B3:83:9B:58:9A:F8:6F:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/6bb3cbae-990d-32c7-a237-c3be9e183144.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:0b:1a:57:fd:32:7f:ea:72:c2:71:c7:73:4d:bd:3c:70:77:
         0e:89:3f:ab:52:a7:76:7a:79:ee:d2:61:b3:92:a5:66:3e:c3:
         c2:d3:8c:c1:cf:cd:55:f3:15:3f:1b:5a:49:5f:d7:4b:4d:45:
         f9:c5:67:ed:66:19:c9:bb:d2:f7:ba:18:20:2e:16:e3:3a:75:
         a1:1a:48:1f:86:c7:bd:eb:33:28:9b:bd:ec:49:88:c3:32:fb:
         78:e9:b1:89:1d:69:a5:9a:e2:0f:47:d4:1b:d4:06:4a:5d:d0:
         e7:f9:54:19:11:3f:f5:1f:50:33:89:1e:4e:f9:65:55:66:11:
         df:a2:ef:e4:14:d9:14:14:e1:de:f7:10:78:be:db:cc:83:60:
         36:c7:a0:67:5b:64:dc:cf:c9:90:38:b8:d9:b2:d6:30:25:22:
         88:1c:bf:39:db:57:72:94:a7:ca:76:b9:08:db:91:16:4d:eb:
         d6:53:90:f4:75:4b:2a:a7:ce:b9:9d:fa:ea:26:ae:5f:19:47:
         1c:9b:90:42:b1:f6:a1:07:e3:fb:5b:97:a6:29:d9:f8:f8:b8:
         ca:e9:d4:71:2b:e1:cb:8a:c0:f2:00:8a:d9:d5:88:93:54:9f:
         0f:cf:43:07:9b:6e:01:ae:dd:25:22:28:f4:6f:d4:3b:30:be:
         0a:3b:9f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:55:36 2025 by rpki-client