Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/a9a3ec3a-33b4-38b1-8dc9-c8b8d693b808.roa
File:                     a9a3ec3a-33b4-38b1-8dc9-c8b8d693b808.roa (raw, json)
Hash identifier:          5w2WBfQ7VBHP377o67QStcQwqle9Q7WrkFJmHSwRbGY=
Subject key identifier:   21:23:B6:A3:92:6A:C6:B3:B5:06:E2:FB:72:32:DF:29:0E:12:CF:87
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584B583C9BC85147C4463A9A6000
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/a9a3ec3a-33b4-38b1-8dc9-c8b8d693b808.roa
Signing time:             Sun 28 Sep 2025 13:00:41 +0000
ROA not before:           Sun 28 Sep 2025 13:00:41 +0000
ROA not after:            Sat 27 Dec 2025 14:00:41 +0000
asID:                     376
IP address blocks:        206.167.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:58:3c:9b:c8:51:47:c4:46:3a:9a:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Sep 28 13:00:41 2025 GMT
            Not After : Dec 27 14:00:41 2025 GMT
        Subject: CN=4233e2fd-015c-4a2d-a2db-8077357f9443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:18:e2:81:20:f0:b9:c7:0c:5d:78:dd:1a:64:
                    b5:84:91:0e:4e:ce:38:f1:dd:75:16:75:21:84:f8:
                    5f:15:4f:08:da:a9:88:ad:58:67:eb:85:09:1e:2d:
                    eb:7f:e0:05:81:bb:83:5c:3b:b7:9f:72:f3:cd:e5:
                    72:95:ae:76:cd:b3:ef:16:56:42:a5:86:ab:b0:be:
                    22:01:7a:68:6b:d1:a3:99:ec:08:e2:4e:82:60:96:
                    0f:35:79:d7:17:3b:35:b8:73:84:c6:e1:f3:f1:dc:
                    cb:57:a8:26:f4:ee:00:35:18:78:8f:2a:98:d5:81:
                    7b:38:c5:fe:9c:ca:e5:8e:c0:01:94:a6:b5:bf:43:
                    90:b7:34:70:ae:d9:e8:06:df:54:b8:eb:10:53:76:
                    32:50:aa:2d:4d:30:f0:2c:e6:4b:9e:b7:2b:40:94:
                    30:92:2b:ec:32:ec:55:72:b8:9d:b0:d9:7c:83:c4:
                    08:52:02:8b:a5:65:36:16:27:f4:9c:19:d6:5c:3e:
                    53:36:0f:f3:02:c6:0b:44:a1:44:a8:da:55:b3:4d:
                    c3:b5:13:55:1b:23:d7:2e:ae:06:6f:f2:eb:9d:0c:
                    f8:a6:1b:71:4a:4c:4d:35:ed:2e:3a:9a:e7:da:b5:
                    e7:ac:0e:30:58:14:d6:b4:71:4a:9c:cc:d8:eb:d5:
                    0d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:23:B6:A3:92:6A:C6:B3:B5:06:E2:FB:72:32:DF:29:0E:12:CF:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/a9a3ec3a-33b4-38b1-8dc9-c8b8d693b808.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:06:6f:17:58:c3:56:1f:63:00:aa:ff:63:c6:a1:50:9b:1b:
         b4:dc:9e:b6:fe:4d:62:f0:dc:2d:e6:89:39:a3:38:86:13:4d:
         ea:a2:ae:ea:ac:83:cf:50:a7:93:94:53:95:bb:45:18:cf:af:
         21:ef:86:9f:18:eb:de:81:5a:52:31:af:a3:ff:9f:c5:2e:bd:
         a0:d1:9c:22:7f:7e:03:cb:55:f7:39:a4:16:f2:28:70:c5:4b:
         6f:08:0a:e7:2d:07:f3:a3:a6:bc:71:cf:e0:2a:03:e9:f8:ba:
         31:e6:c4:d3:36:6e:3e:1d:86:0d:0e:b4:92:85:3b:f4:e0:02:
         8e:d9:2b:db:91:94:13:dc:38:b8:e3:62:d8:ef:0b:2e:d8:74:
         cd:35:39:a5:76:ed:08:2f:28:91:d9:44:5d:ac:99:a9:82:bd:
         cb:7c:8d:6c:21:1b:61:5d:14:78:75:1f:91:ec:2d:84:36:c6:
         a8:b8:53:84:a0:80:e8:e9:1f:33:2a:f0:e7:dc:96:64:76:e0:
         fa:fb:05:d6:92:83:73:da:34:64:56:74:51:88:c0:9e:61:fd:
         c5:22:16:ad:9e:ad:40:70:37:48:50:ea:e2:2c:cd:04:3f:38:
         3a:b0:4f:b2:8c:80:91:11:0f:d1:8f:db:fb:ac:78:83:e8:95:
         ab:8e:be:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:56:11 2025 by rpki-client