Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6df2b1e6-ae31-347c-a0cb-326380bd6d73.roa
File:                     6df2b1e6-ae31-347c-a0cb-326380bd6d73.roa (raw, json)
Hash identifier:          Wrc58qi1IR9wgaRwa0YSdLHjKIwQTw+pA2T5PWCk3hA=
Subject key identifier:   D4:67:E8:D7:20:73:72:E0:14:1D:6A:1F:17:EB:D8:28:0B:82:23:A0
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A7085EC900DB896E5437EA480
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6df2b1e6-ae31-347c-a0cb-326380bd6d73.roa
Signing time:             Mon 07 Jul 2025 13:01:05 +0000
ROA not before:           Mon 07 Jul 2025 13:01:05 +0000
ROA not after:            Sun 05 Oct 2025 13:01:05 +0000
asID:                     7861
IP address blocks:        209.91.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:70:85:ec:90:0d:b8:96:e5:43:7e:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul  7 13:01:05 2025 GMT
            Not After : Oct  5 13:01:05 2025 GMT
        Subject: CN=7631f024-d236-42ed-aab4-72cfd43faed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:63:15:ae:f7:dd:3f:6f:46:ec:2d:4f:89:28:
                    62:61:cc:76:06:b6:89:73:86:45:a0:50:f5:a3:12:
                    31:6f:35:0e:98:7c:f6:c5:c7:c8:a4:85:6e:95:5e:
                    e3:74:8f:f0:59:2f:12:79:d5:8f:06:54:10:ec:9d:
                    50:5f:1e:97:d3:a1:62:95:88:6b:c8:93:fd:ee:c2:
                    62:bd:bf:d1:ec:88:f8:d2:16:89:02:83:9c:e3:1f:
                    34:ef:28:47:b2:17:94:d8:c0:00:19:2e:ed:44:b3:
                    b5:ac:39:61:8a:f1:a7:48:29:c0:60:53:8d:3a:12:
                    7a:13:87:42:85:eb:a5:32:09:1a:95:53:d1:94:f6:
                    a3:e7:ee:f0:26:a3:16:55:ec:a4:ac:ad:03:fc:9a:
                    1e:73:80:88:d7:94:1a:9c:81:c2:34:df:1d:a7:1c:
                    81:e3:12:66:53:ce:c9:ae:eb:57:0c:4b:fb:91:fc:
                    7f:ad:56:16:c5:2d:dc:f4:c8:82:cf:d9:3c:8d:e9:
                    50:a1:08:b3:56:82:78:0a:63:d1:b2:5a:7b:ad:f6:
                    d5:a8:47:56:ad:99:76:c8:99:bc:54:b4:16:89:be:
                    ee:df:ef:fc:fd:62:cf:60:0d:0f:6e:5c:79:34:1a:
                    bd:cb:a0:67:c6:7f:f0:b9:fe:69:60:9d:66:a2:7a:
                    de:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:67:E8:D7:20:73:72:E0:14:1D:6A:1F:17:EB:D8:28:0B:82:23:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6df2b1e6-ae31-347c-a0cb-326380bd6d73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.91.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ef:e5:ad:de:3e:84:ee:79:8f:cb:ea:6c:5f:97:d0:34:60:92:
         8b:96:aa:68:ef:1e:e9:48:86:c1:d8:13:a4:fc:b2:ab:a1:5b:
         45:ff:b6:2c:1e:b6:6e:2b:cc:e3:5b:64:80:36:a0:f8:87:e0:
         20:20:98:fa:73:7c:10:67:75:8e:b0:bc:6f:5b:c6:80:2f:62:
         5b:57:4b:7a:96:7c:08:bd:3c:20:67:ea:08:9d:11:fa:51:3d:
         9a:af:76:65:45:33:d1:76:b8:38:d9:04:e3:be:c9:f2:b4:10:
         3b:8f:f9:60:66:20:15:5e:c0:56:a6:47:35:81:99:bd:d1:76:
         73:43:3b:89:cd:d6:05:94:d2:4e:43:4e:32:f6:ae:fc:bb:98:
         25:ee:90:59:8a:e3:1f:57:56:3c:4e:d2:b8:4f:68:eb:25:08:
         b9:30:96:8b:87:5a:58:9a:73:ec:96:da:44:10:21:c9:a2:f0:
         b9:28:4d:15:fd:8c:14:c0:cb:ab:09:59:cf:45:4c:a7:08:7f:
         cd:4d:40:c8:d6:57:ba:dc:ad:7a:5d:17:3d:50:d5:a4:88:9f:
         33:00:89:0f:30:c6:fe:87:0a:cd:2d:41:69:58:c0:60:5a:6c:
         fe:a2:56:a7:ba:e9:17:11:86:93:7e:9c:e5:aa:08:00:f9:5a:
         2a:7c:18:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:18:10 2025 by rpki-client