Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/eb4d579d-043e-3b7a-a52a-5770c6cde19f.roa
File:                     eb4d579d-043e-3b7a-a52a-5770c6cde19f.roa (raw, json)
Hash identifier:          rt97TFoEPDPOFgNL2knrE2MihdLSLKNGdpT01JWFdJc=
Subject key identifier:   13:36:73:89:23:60:8E:41:19:C2:AD:9C:AA:FC:56:D7:2C:1B:E3:0B
Certificate issuer:       /CN=fc9bd684-883b-41b8-9890-8cd78117898c
Certificate serial:       010D0C9F4328584B8EACDE98931696CE7FC43180
Authority key identifier: 51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/eb4d579d-043e-3b7a-a52a-5770c6cde19f.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     30224
IP address blocks:        206.15.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:de:98:93:16:96:ce:7f:c4:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9bd684-883b-41b8-9890-8cd78117898c
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=446a39bb-e18d-4b36-8fae-9ee05c7f9293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:73:88:d3:14:b6:8e:22:9c:6d:33:58:6e:7c:
                    ca:18:44:22:ca:a8:41:1b:c7:ca:47:e1:b6:28:ce:
                    24:db:8b:99:cc:2c:ee:3b:44:a3:7b:0c:7f:40:b7:
                    c8:9c:81:95:90:d4:ec:a3:a4:5f:56:90:78:a8:49:
                    5f:64:ca:51:35:d9:b8:47:9d:cd:31:30:10:9a:a5:
                    f8:eb:7c:79:2f:73:f1:17:48:0a:2d:1a:ec:99:33:
                    16:bd:af:3b:6f:a6:a4:70:80:31:13:e2:41:8b:38:
                    0c:87:4d:b6:ae:49:3d:69:26:f2:d3:ce:88:ba:93:
                    0d:5f:ce:6a:7e:f1:1e:05:ff:62:37:56:67:39:c0:
                    c4:f0:0f:21:8b:1d:39:80:14:c5:71:98:c2:fb:64:
                    65:5e:1c:02:4c:a5:e5:b5:bd:b4:fc:1c:d6:75:e5:
                    00:0d:f5:a2:aa:6a:21:54:72:12:6f:af:aa:dc:43:
                    13:ce:1a:28:cb:20:86:10:fb:c8:d4:f1:be:01:78:
                    3f:b6:93:71:d1:d6:ca:00:26:78:aa:47:8d:78:45:
                    89:02:71:f8:6b:6d:56:0a:25:7e:c4:66:69:ea:fa:
                    77:30:38:f5:c3:0a:81:f3:9e:28:7f:78:86:e1:ea:
                    be:c5:4d:aa:01:66:a5:c4:44:10:f1:3c:44:e2:6b:
                    7d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:36:73:89:23:60:8E:41:19:C2:AD:9C:AA:FC:56:D7:2C:1B:E3:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/eb4d579d-043e-3b7a-a52a-5770c6cde19f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.crl

            X509v3 Authority Key Identifier:
                keyid:51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.15.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:71:e4:a4:88:2f:2a:22:60:1f:3c:b6:23:1c:fa:e4:42:5e:
         a9:30:43:68:14:36:4a:35:0c:1f:10:76:c0:91:09:05:42:2a:
         b5:c9:95:0d:5c:c2:cf:c4:96:11:fc:33:1a:c4:ce:cf:4d:a8:
         70:ad:86:05:0c:c6:70:b7:8d:54:a0:ad:10:c1:92:7e:a7:8a:
         a0:bd:03:b0:8d:b5:e7:88:73:a0:a3:5a:ec:56:57:a0:cc:72:
         bc:74:9b:11:e5:56:74:c3:d7:40:33:f9:ac:7c:26:9a:fc:2a:
         30:5e:9f:61:7e:45:60:50:d3:80:42:b6:2c:c7:49:f4:4d:ba:
         5f:e3:88:ca:64:75:db:2c:fa:e0:35:e1:64:13:1f:0c:bc:fd:
         16:70:82:2c:c6:3b:72:28:fa:1b:f9:28:19:4b:16:10:e3:4d:
         b2:ef:98:a7:24:c4:e1:be:b2:64:1d:6f:a2:6c:9b:87:42:d8:
         3d:60:a1:5d:52:3f:8b:46:d7:8e:96:f0:d0:9d:18:06:f5:f7:
         1f:98:dc:e6:b8:dc:b3:a3:5a:25:4f:87:ce:16:33:e1:f5:8a:
         df:f4:f9:54:cd:ac:c4:cf:fc:c2:d9:07:c5:0e:7d:b0:ac:02:
         58:b2:56:66:d2:16:bb:54:60:36:92:5f:fb:c1:43:30:b8:a1:
         0f:eb:dc:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:58:35 2025 by rpki-client