Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/cdea9477-3ebc-3d2e-9370-285464112638.roa
File:                     cdea9477-3ebc-3d2e-9370-285464112638.roa (raw, json)
Hash identifier:          I1ZUU3JcPv1RV80i1d92r+TOJar00DWpfs1OX/W/y2E=
Subject key identifier:   D9:01:99:79:FD:25:D7:35:84:2C:1B:04:D4:31:A4:C9:5C:A7:43:33
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584B583C9B311558944EE0B75580
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/cdea9477-3ebc-3d2e-9370-285464112638.roa
Signing time:             Sun 28 Sep 2025 13:00:41 +0000
ROA not before:           Sun 28 Sep 2025 13:00:41 +0000
ROA not after:            Sat 27 Dec 2025 14:00:41 +0000
asID:                     376
IP address blocks:        206.167.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:58:3c:9b:31:15:58:94:4e:e0:b7:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Sep 28 13:00:41 2025 GMT
            Not After : Dec 27 14:00:41 2025 GMT
        Subject: CN=8fde2b1c-c4b8-4ad2-8581-5fcd595616f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:39:2f:56:54:e6:a6:48:dc:7c:af:6c:9c:64:
                    3c:28:e9:4b:0a:bf:da:d8:b5:60:81:fc:c6:a0:0a:
                    29:44:24:4f:a1:70:c7:4f:15:d9:9d:e9:5e:e1:b5:
                    ed:f5:f0:6f:a4:b9:ac:d7:f3:a8:91:c7:c4:d3:d8:
                    14:b4:18:15:b6:e7:1a:ef:dc:76:57:cb:eb:66:08:
                    e2:b0:16:0d:a7:7e:7f:7a:db:a0:1e:e5:4d:f4:1e:
                    94:08:39:a6:cf:9c:09:3b:8c:5e:04:40:e8:84:f7:
                    16:76:98:67:ce:b2:e9:84:b6:fa:7b:76:24:76:57:
                    31:4d:d8:8c:32:ae:13:c6:f6:f5:49:08:5a:ed:7a:
                    05:45:a9:2e:be:c8:de:e1:9d:d7:bc:f8:69:f7:eb:
                    a3:57:44:de:5e:6a:3e:13:16:ed:16:d3:71:16:55:
                    5e:07:e6:85:75:db:c4:01:12:07:5d:3b:87:11:7c:
                    78:30:af:58:2d:6a:d6:17:47:e7:e5:39:0f:39:e4:
                    aa:d3:e0:fd:6a:38:26:af:99:8f:f6:55:0d:ca:7e:
                    66:73:10:d0:92:3c:8b:46:ad:ee:7c:4b:f3:24:b3:
                    9b:ce:60:f8:11:e1:c8:c4:f4:21:74:94:2e:25:f6:
                    cc:ec:3c:db:d8:47:b2:49:a4:53:63:c8:71:09:a4:
                    2d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:01:99:79:FD:25:D7:35:84:2C:1B:04:D4:31:A4:C9:5C:A7:43:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/cdea9477-3ebc-3d2e-9370-285464112638.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:d0:a2:75:96:5e:b9:c0:c0:55:8f:60:86:88:65:ab:05:cc:
         86:00:00:4c:56:be:ee:b7:2c:36:3c:c8:c2:cf:b5:d8:c5:15:
         0e:02:55:a9:d6:83:df:cd:2b:45:55:89:8f:13:db:3b:cd:58:
         eb:4d:79:4e:cb:32:c3:51:e6:dc:1c:46:65:09:f7:b9:58:b2:
         6a:86:fa:51:7c:c3:2c:48:9f:f7:da:9b:35:9e:ad:52:e5:b9:
         78:c0:ee:89:8d:19:3b:6f:fa:5b:37:cd:7d:86:dc:3c:1e:1e:
         8f:41:e1:50:dc:2a:4c:e0:c4:88:7c:70:4b:3f:1d:1c:9a:05:
         3c:2c:be:82:20:2e:7e:9b:16:6b:81:6d:4a:72:18:5e:31:50:
         37:cd:2a:fc:a8:fc:15:5e:b2:77:db:e7:30:49:59:82:ae:2f:
         a9:ce:fb:79:70:15:39:ee:f1:12:75:65:3c:0e:93:c1:14:27:
         bf:26:27:83:26:97:ec:73:e3:8e:3d:12:a5:e7:1c:65:b1:41:
         d2:4b:b8:27:41:66:f3:8f:fc:c8:4c:6d:1d:cc:13:e7:c0:51:
         17:04:0d:b0:de:61:46:04:5c:98:40:fd:aa:0d:a6:d3:2b:1c:
         24:37:7b:05:9f:81:b1:40:a0:7c:31:5b:ee:58:fa:5d:eb:b5:
         f9:7c:48:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:55:52 2025 by rpki-client