Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d/6ca0719b-0f97-39cc-88ec-f8763d684de5.roa
File:                     6ca0719b-0f97-39cc-88ec-f8763d684de5.roa (raw, json)
Hash identifier:          UcbhB2WZchof2xodY0gob21eHySMZT8t1GnmICHIta4=
Subject key identifier:   13:58:64:20:35:CA:6C:5D:47:8B:17:03:AA:F4:35:28:23:29:00:48
Certificate issuer:       /CN=a40fbee7-5dae-4a5d-a79b-cf60cd73e49d
Certificate serial:       010D0C9F4328584AEE2698F0C04977F63ED016C0
Authority key identifier: 72:AE:D6:7B:2F:27:2D:67:12:6E:C5:B1:00:D2:F8:25:08:E0:00:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d/6ca0719b-0f97-39cc-88ec-f8763d684de5.roa
Signing time:             Thu 21 Aug 2025 13:00:41 +0000
ROA not before:           Thu 21 Aug 2025 13:00:41 +0000
ROA not after:            Wed 19 Nov 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        199.247.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:26:98:f0:c0:49:77:f6:3e:d0:16:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a40fbee7-5dae-4a5d-a79b-cf60cd73e49d
        Validity
            Not Before: Aug 21 13:00:41 2025 GMT
            Not After : Nov 19 14:00:41 2025 GMT
        Subject: CN=37cabd46-c981-43f1-aced-6e7166823920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0a:65:9c:9a:24:7e:01:b1:e7:26:f3:3b:74:
                    fa:96:9d:68:ba:49:13:a4:8d:d6:3b:59:a0:b9:b7:
                    df:74:b6:a0:cb:80:21:f9:2e:87:e1:05:82:b7:93:
                    f5:0e:74:9d:8c:74:e8:55:fb:d1:af:3a:e9:43:16:
                    b7:fa:14:f6:ad:9e:8c:0f:00:04:0a:51:83:f4:a6:
                    8c:af:d7:4d:85:c9:4a:c2:e8:a9:a5:59:5c:e3:55:
                    a7:24:1c:f1:83:a4:e0:c1:73:31:ac:2c:31:12:2f:
                    50:0d:8c:32:03:27:7e:2d:10:07:6d:ec:98:00:04:
                    95:d3:e4:ef:c6:f0:b8:51:ef:f4:c4:37:79:4b:70:
                    de:e0:cc:61:14:49:02:b9:e8:61:c3:5a:03:e4:68:
                    a3:38:25:51:6e:37:74:c5:ff:35:7e:b8:14:b9:2b:
                    43:e9:64:6f:6a:d9:8e:d0:6e:9c:da:3e:32:86:49:
                    0a:98:dc:dd:06:b4:30:c9:f7:64:26:0b:fb:67:bf:
                    99:6f:48:32:72:58:0f:43:dc:d6:36:ad:00:63:13:
                    e8:df:c3:3a:24:a8:41:c4:78:12:e3:6c:c1:43:19:
                    d2:54:ae:6b:03:0f:23:87:2e:f8:68:ad:31:97:36:
                    b9:88:91:9e:5f:36:be:f7:df:ef:9d:b6:7f:c5:d8:
                    96:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:58:64:20:35:CA:6C:5D:47:8B:17:03:AA:F4:35:28:23:29:00:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d/6ca0719b-0f97-39cc-88ec-f8763d684de5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d.crl

            X509v3 Authority Key Identifier:
                keyid:72:AE:D6:7B:2F:27:2D:67:12:6E:C5:B1:00:D2:F8:25:08:E0:00:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.247.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:83:1a:8d:41:5b:4f:f7:59:f0:bd:52:04:7c:b8:ee:bc:cc:
         0b:c5:68:21:a6:63:82:06:9b:ca:5c:d3:60:2c:cb:a5:0e:1e:
         24:6d:01:d3:14:7b:67:6c:32:d6:2b:5b:bb:e1:d5:77:ae:d0:
         5e:02:41:87:d6:42:43:bc:f2:16:00:7e:6d:80:4f:53:ed:50:
         c7:0a:a8:c7:6e:82:09:15:6c:d7:df:02:21:be:1e:19:dd:36:
         c4:df:42:8e:8c:0c:1b:94:b5:e0:60:0c:88:60:dc:ee:96:8a:
         1d:bd:13:e0:e6:50:4e:89:cc:83:f6:04:e6:75:52:72:1e:21:
         17:2f:16:ff:78:dc:64:4c:b2:35:3c:d2:2c:ee:8e:48:f8:45:
         a1:50:1e:8d:23:66:8a:95:e9:8d:2c:8f:88:09:41:2d:c2:1f:
         67:75:ee:a0:cb:bf:41:8f:8a:3a:5f:f1:c9:07:79:11:64:33:
         bb:65:9d:d3:08:a1:58:f3:15:5c:19:bc:ea:8f:c6:94:87:ed:
         44:56:09:66:cc:dd:ca:8e:da:a1:70:20:38:68:80:e4:30:80:
         ea:ff:1d:c4:50:d8:eb:13:81:36:ad:eb:fb:cc:4a:65:2a:bf:
         76:0c:f8:c5:83:e6:1c:fc:3e:30:35:bb:ed:aa:ad:56:7b:7e:
         78:d5:5b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:21:20 2025 by rpki-client