Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/05ca5ecc-ab51-37b3-bb62-559337d0d389.roa
File:                     05ca5ecc-ab51-37b3-bb62-559337d0d389.roa (raw, json)
Hash identifier:          GTSsDM0sLTKRXsZg5MqXoEyho/GpT5ngef7SMAnvNRQ=
Subject key identifier:   A6:79:A7:5E:9D:3D:AF:94:55:19:C5:08:FD:1C:EB:20:15:1B:73:C0
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584B5B0731C36EFE6D99EFE81880
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/05ca5ecc-ab51-37b3-bb62-559337d0d389.roa
Signing time:             Mon 29 Sep 2025 13:00:41 +0000
ROA not before:           Mon 29 Sep 2025 13:00:41 +0000
ROA not after:            Sun 28 Dec 2025 14:00:41 +0000
asID:                     852
IP address blocks:        207.6.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:07:31:c3:6e:fe:6d:99:ef:e8:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 29 13:00:41 2025 GMT
            Not After : Dec 28 14:00:41 2025 GMT
        Subject: CN=82c9cd6a-9868-455d-bf61-e4b2d0c99041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0a:0d:7b:a8:11:9f:85:4d:20:c3:1d:e6:8a:
                    2b:99:8d:16:fa:8a:c8:7e:13:d7:e1:c4:e5:76:e1:
                    95:eb:46:76:da:e3:11:be:d4:0a:91:00:70:89:d7:
                    99:b5:da:49:96:5b:6f:70:2a:e2:17:ea:05:0a:28:
                    2b:3b:a3:69:96:87:3f:70:26:b4:71:95:6d:19:85:
                    cb:83:b5:31:a8:90:dd:d1:df:84:64:e1:78:5d:44:
                    d3:01:48:8d:b5:29:9b:4d:c4:c6:56:07:b8:1f:fe:
                    b0:2e:85:02:ba:c6:45:52:7b:ec:16:e4:17:2a:28:
                    b2:c0:66:58:63:86:d8:10:ec:44:9b:40:5f:a3:9c:
                    6f:c2:45:02:b1:95:61:d1:db:3b:22:0e:78:e1:80:
                    83:b0:59:d8:27:18:36:3f:d6:af:00:90:e1:41:23:
                    1b:ba:f6:b2:f0:d9:a3:da:de:c4:6d:37:7e:3f:bd:
                    d4:ca:61:c7:62:37:cf:24:f3:ba:2c:6f:37:3d:6d:
                    23:f8:38:f6:ed:1f:f2:a7:f4:f8:8e:ab:12:8c:b7:
                    35:e2:eb:b0:3c:cb:fd:33:e1:25:0d:9f:ca:ff:aa:
                    c5:8d:a7:df:d3:5e:9c:87:e7:da:8e:42:67:b3:95:
                    00:6c:62:9b:3f:ae:75:47:e3:a8:9b:71:7a:b2:7e:
                    e6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:79:A7:5E:9D:3D:AF:94:55:19:C5:08:FD:1C:EB:20:15:1B:73:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/05ca5ecc-ab51-37b3-bb62-559337d0d389.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.6.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:1c:1f:50:e5:9e:9e:33:7a:97:54:e5:46:1b:26:ba:87:9c:
         1a:00:b7:80:5c:f3:f5:df:9e:24:70:88:34:14:43:d3:4e:e1:
         e7:ee:13:a6:1e:20:bc:4b:15:49:86:30:65:e3:85:e0:8a:ce:
         47:9d:36:74:01:08:67:cf:8a:ef:f0:07:1b:63:77:6f:ca:21:
         10:ab:c4:63:c1:52:09:92:bc:d5:28:a8:cc:3f:43:bb:7e:9c:
         8e:8b:f7:7d:47:d0:d9:dd:5c:11:0a:f1:57:98:46:89:de:be:
         4f:ce:cf:47:f9:d2:56:a0:3d:d1:f0:fc:04:e6:9f:7a:79:f5:
         30:d3:8e:d2:6d:b6:7e:ec:c6:7e:04:12:46:35:22:db:06:23:
         2b:84:76:cc:7b:07:5a:8b:69:97:7d:9f:58:07:1d:cb:1a:37:
         c4:0e:46:d8:21:0a:05:93:3f:f3:73:41:27:13:bd:e7:c9:a6:
         ac:2f:c9:3d:58:9e:2d:f5:be:dc:6f:e9:1b:88:2c:2e:e8:2e:
         5a:32:1e:0e:85:a6:9d:14:8a:c8:0d:50:0c:86:d1:6b:52:c3:
         47:82:38:31:d8:34:5d:d6:05:8c:3a:8e:3a:80:f0:9b:05:b0:
         b9:5d:8a:36:88:28:df:36:10:72:3c:9e:94:bf:08:18:46:97:
         bf:fe:a4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:41:23 2025 by rpki-client