Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/48cace0b-20d1-32c0-92ec-259e9158e095.roa
File:                     48cace0b-20d1-32c0-92ec-259e9158e095.roa (raw, json)
Hash identifier:          kdaWD51VbrdtYWi1O5PudvsbW/bf5RH9GU/Iq2Bob2I=
Subject key identifier:   9F:F1:EC:E7:22:6D:BC:45:F4:89:2C:00:7A:4C:AD:F0:F9:7B:FF:DC
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584B5571D3AC0B7F5CF5F9004A00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/48cace0b-20d1-32c0-92ec-259e9158e095.roa
Signing time:             Sat 27 Sep 2025 13:00:41 +0000
ROA not before:           Sat 27 Sep 2025 13:00:41 +0000
ROA not after:            Fri 26 Dec 2025 14:00:41 +0000
asID:                     852
IP address blocks:        206.75.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:55:71:d3:ac:0b:7f:5c:f5:f9:00:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 27 13:00:41 2025 GMT
            Not After : Dec 26 14:00:41 2025 GMT
        Subject: CN=67dde015-522a-4409-aa63-8fa4a99fb5d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9e:d8:7a:31:0f:b4:cb:0e:8e:d9:2f:af:71:
                    54:f4:58:74:f4:09:82:5f:82:0b:a5:6b:d1:0f:41:
                    df:9f:55:4a:7e:cb:2a:b7:70:e4:5b:52:68:29:ce:
                    99:18:c7:d5:eb:17:65:dd:52:84:ec:2d:cc:ce:3b:
                    91:2d:7f:2a:88:4b:76:57:f8:ee:fa:e5:01:09:c9:
                    55:ab:d6:f1:03:dc:da:92:e5:4f:39:df:fe:59:5e:
                    56:88:71:21:71:0c:45:23:6f:ec:4f:e6:e3:5d:13:
                    33:1c:a5:2c:41:f3:17:42:6b:38:d1:9d:5c:5b:93:
                    39:75:13:04:99:89:bf:84:62:5e:b1:30:ae:75:f7:
                    65:f7:fe:2b:78:b6:96:89:ba:13:a2:6f:7b:57:1d:
                    cf:f2:63:58:ec:6b:94:15:fa:7b:bf:4e:ef:cb:3f:
                    ec:cd:08:3b:d7:98:9f:7e:ce:11:3a:11:47:29:63:
                    94:a5:95:40:c3:32:9b:68:73:ec:11:84:38:4f:fb:
                    3e:91:2a:b0:21:f1:3d:82:2d:15:be:01:1a:70:1c:
                    85:d4:a5:4d:5a:e2:ea:cf:aa:ae:2a:a3:e4:db:0e:
                    ca:10:71:ea:2d:46:99:e2:1c:6a:66:33:df:32:36:
                    fe:32:12:ab:97:87:ee:89:39:ab:64:41:da:28:68:
                    7c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F1:EC:E7:22:6D:BC:45:F4:89:2C:00:7A:4C:AD:F0:F9:7B:FF:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/48cace0b-20d1-32c0-92ec-259e9158e095.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.75.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:56:53:b3:a3:05:0e:95:33:06:9c:db:48:63:4d:24:73:9c:
         ad:2f:d3:00:34:81:e6:9b:58:b5:14:4d:5a:e9:cc:ea:a9:a0:
         90:61:d3:89:e0:8b:bc:3f:3d:c5:3b:29:03:80:75:87:f2:26:
         ce:61:4b:0d:fc:cc:27:11:0d:77:9a:cf:40:32:71:1e:46:48:
         94:25:d2:3c:c8:67:fb:cf:74:e1:82:f1:e9:10:1c:14:09:71:
         38:7c:4a:71:c3:13:ab:de:31:88:c1:83:5b:27:be:2b:1f:d3:
         89:2c:d9:03:5c:6f:94:ea:58:ac:4e:21:9a:27:b9:10:15:10:
         aa:53:a3:3d:a7:8e:7c:63:fe:26:3e:ce:43:29:08:19:0b:ff:
         1d:1f:fa:a5:b8:88:f7:96:c8:35:f3:da:97:a7:78:4a:f3:7e:
         cf:7c:32:ed:0d:af:91:74:3f:92:4d:52:44:cc:a7:49:bc:1b:
         a0:d6:18:f6:86:36:88:88:f2:ed:d5:24:c3:b5:94:41:06:6f:
         10:ca:d7:40:8b:c9:4b:c7:d7:7d:d1:76:d4:ab:9d:38:c3:91:
         a6:f4:9b:bb:4e:96:02:18:cc:7e:ed:fd:91:cc:f1:b2:6a:3f:
         22:e2:d8:a0:51:3c:aa:ab:5b:9d:8b:e8:47:2c:24:63:9b:61:
         94:7d:46:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:18:58 2025 by rpki-client