Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/b9c73be3-1bc6-3436-8aae-ab5019460136.roa
File:                     b9c73be3-1bc6-3436-8aae-ab5019460136.roa (raw, json)
Hash identifier:          oBv1nJHErjYyD11xyuZETzUxDjrm4vSlp4KEx15MmqU=
Subject key identifier:   40:63:F4:C2:76:EE:C1:D2:96:FB:6D:A2:22:04:02:1F:E9:21:DE:B2
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584AEE268CB50E3092172B39C180
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/b9c73be3-1bc6-3436-8aae-ab5019460136.roa
Signing time:             Thu 21 Aug 2025 13:00:41 +0000
ROA not before:           Thu 21 Aug 2025 13:00:41 +0000
ROA not after:            Wed 19 Nov 2025 14:00:41 +0000
asID:                     376
IP address blocks:        207.162.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:26:8c:b5:0e:30:92:17:2b:39:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Aug 21 13:00:41 2025 GMT
            Not After : Nov 19 14:00:41 2025 GMT
        Subject: CN=60242480-5208-4327-8bcf-89fc593d8624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:49:01:28:22:60:fc:bf:3f:f2:f1:85:a1:52:
                    9f:70:e5:79:d4:2b:6b:c1:2d:d1:20:15:e0:47:39:
                    49:fa:c6:9f:3a:76:ec:dd:9b:df:17:ac:2f:a0:e7:
                    68:cd:46:75:c8:36:95:bd:74:63:88:08:64:98:1a:
                    59:41:1f:6b:cb:04:bd:04:73:fb:d4:0f:1e:64:35:
                    94:29:aa:ef:92:49:56:ca:8f:d9:83:6e:9d:de:34:
                    c7:a1:2a:cd:b6:99:e1:3a:86:08:fc:52:64:08:0d:
                    15:d9:4f:17:dd:65:cc:6e:a5:51:4a:90:29:df:01:
                    65:24:db:4b:a7:a6:3a:2c:c6:bb:74:b9:52:0b:c5:
                    35:f3:e5:a0:20:ff:69:48:09:81:72:68:64:6c:44:
                    3c:a0:6c:25:d0:6e:40:df:8e:78:67:5d:4c:49:a1:
                    76:d5:5e:8e:e1:d0:d5:0b:0e:77:b3:5f:61:af:3c:
                    2b:75:20:46:18:63:3f:cc:54:91:a8:5f:e2:80:f3:
                    34:23:2c:c1:6a:13:9a:c3:5f:d4:5d:70:8b:d3:b9:
                    19:15:38:6e:53:dd:46:4b:61:18:d1:40:d3:6d:4c:
                    0b:41:a2:f1:c1:39:1a:2c:9a:53:4e:60:49:b8:1a:
                    d3:c9:11:dc:99:41:0c:cf:fc:d3:d7:e2:28:14:38:
                    4c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:63:F4:C2:76:EE:C1:D2:96:FB:6D:A2:22:04:02:1F:E9:21:DE:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/b9c73be3-1bc6-3436-8aae-ab5019460136.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.162.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:71:d8:6f:3c:f5:ca:74:44:50:df:3a:29:64:f5:dc:6b:2d:
         69:89:65:35:8a:48:1e:a7:8b:dd:bb:33:e7:d0:64:13:73:a0:
         e4:99:dd:86:87:fa:34:19:63:fd:60:12:6a:92:70:35:4c:16:
         a7:15:4f:60:f9:f4:d9:41:49:29:15:1c:94:ce:db:37:86:c6:
         54:50:f4:87:c0:67:13:2e:76:b5:27:e9:f3:3d:a8:66:c7:27:
         69:89:2f:2e:b2:6a:4a:a9:e9:33:eb:e7:15:eb:c3:c0:14:ad:
         b1:af:a1:34:50:63:e0:90:10:45:bb:5b:01:11:13:e9:00:9a:
         ec:6b:46:58:fa:8c:d3:f3:73:78:62:70:67:72:8e:33:59:5e:
         ec:1a:0a:7e:a9:20:e7:49:de:d0:70:d6:5f:69:a1:a6:0a:e2:
         46:d2:69:35:56:30:04:80:2c:07:a0:96:b5:83:30:e5:f4:1b:
         b0:aa:e7:4a:9b:20:67:0b:12:c3:c6:1a:9f:6b:d0:fa:aa:9a:
         0b:fa:78:63:25:96:8a:33:12:e4:9d:3f:4c:b8:fa:2d:ac:63:
         23:90:3d:a7:61:df:a5:69:ff:2c:b5:40:29:f8:d0:ed:66:6c:
         ff:b0:87:40:2d:e3:01:20:71:ca:b4:d5:79:90:f7:da:85:36:
         e8:cc:a2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:56:07 2025 by rpki-client