Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/7a1d6960-527c-347b-af07-46068bd68cd1.roa
File:                     7a1d6960-527c-347b-af07-46068bd68cd1.roa (raw, json)
Hash identifier:          L83oji/aJeoUJGikN1VXNwAdA4IbKPDLlKTUU90k4yU=
Subject key identifier:   AC:31:BC:A3:8C:65:31:62:0B:F8:1D:46:FE:F6:47:E9:D8:68:B6:1F
Certificate issuer:       /CN=06b2da7d-ae03-4c12-bd29-f0c285888740
Certificate serial:       010D0C9F4328584AD7D11160016C91E17494AC18
Authority key identifier: B8:FD:89:4B:88:4F:53:16:18:88:90:87:6E:B8:1B:07:4D:27:4A:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/7a1d6960-527c-347b-af07-46068bd68cd1.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     14618
IP address blocks:        206.195.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/06b2da7d-ae03-4c12-bd29-f0c285888740.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/06b2da7d-ae03-4c12-bd29-f0c285888740.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:11:60:01:6c:91:e1:74:94:ac:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06b2da7d-ae03-4c12-bd29-f0c285888740
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=27529747-4263-4e83-be94-f786ae128588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7c:1f:5b:41:e0:37:40:40:4a:74:ca:13:10:
                    9a:f3:c0:1a:5b:df:cd:b6:dd:6e:af:44:84:b2:01:
                    1d:cd:78:6c:1a:ba:c6:20:f4:49:7d:36:74:95:77:
                    35:ef:7a:39:65:fe:48:5c:6f:ba:b9:ed:e3:bd:a9:
                    31:ec:c3:8a:d7:b5:76:bc:7d:76:54:70:10:e7:4d:
                    3c:a0:58:f6:b1:40:52:37:eb:22:5e:f4:a0:f4:e8:
                    05:00:a5:0e:5e:f3:8a:b4:72:94:9e:c7:17:3b:ed:
                    a8:a3:bc:1e:24:67:0d:6d:8e:b6:b1:39:f0:2f:e3:
                    49:9a:9c:33:d6:69:e5:38:ec:d3:88:7f:8f:55:a5:
                    c7:a5:df:26:ae:e5:0b:da:fa:4c:21:25:89:e6:e7:
                    5c:66:ea:bf:f6:45:da:cb:b6:e1:48:ec:1b:24:d8:
                    d3:8e:77:c0:d6:77:21:4c:b7:4b:66:b1:19:c6:db:
                    32:bf:ed:a3:c8:73:5c:b4:9f:86:7d:58:93:26:5d:
                    9b:52:f9:27:d3:d2:47:42:c9:40:ca:6d:53:5b:5c:
                    fd:39:21:0d:b1:6a:aa:85:8c:16:96:98:1d:c5:3f:
                    10:a4:df:7a:8d:2c:f8:ba:b3:ee:af:b6:43:2a:64:
                    ec:a8:c5:c8:d7:2c:6d:48:0a:c6:fb:03:3e:c4:a2:
                    4d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:31:BC:A3:8C:65:31:62:0B:F8:1D:46:FE:F6:47:E9:D8:68:B6:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/7a1d6960-527c-347b-af07-46068bd68cd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/06b2da7d-ae03-4c12-bd29-f0c285888740.crl

            X509v3 Authority Key Identifier:
                keyid:B8:FD:89:4B:88:4F:53:16:18:88:90:87:6E:B8:1B:07:4D:27:4A:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.195.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:a8:f9:f0:0c:d7:ee:63:a6:7a:3a:a2:df:b2:30:9b:08:78:
         ec:67:82:69:5e:27:8f:46:d3:db:50:81:1c:bb:2d:eb:1c:36:
         ef:c3:0b:11:65:db:b3:61:bf:94:1f:01:73:11:37:5e:a3:ef:
         9c:66:a6:73:99:f5:9d:c3:9e:c3:d2:30:aa:50:57:06:d8:b5:
         8a:73:cc:20:3c:fc:c2:db:a2:a6:28:83:f0:da:8c:6a:cd:1c:
         66:9e:c1:ce:24:14:67:9c:09:18:d1:b5:fd:68:39:f9:f6:fb:
         62:bf:2f:95:69:6e:ba:05:ab:78:80:ff:42:28:d8:32:e6:d5:
         23:d2:1b:24:2b:bb:32:f6:94:7c:a5:54:1f:5a:40:cb:f2:46:
         6f:53:1c:8f:5f:70:2d:22:e1:8a:f6:a5:d7:0e:ee:80:65:56:
         37:a4:0b:32:b3:27:8f:f6:43:d2:ca:ad:19:fc:cb:4c:0b:37:
         5f:85:27:e0:df:2b:8b:46:2e:4e:30:40:9f:c4:e5:48:ce:0b:
         52:96:f6:65:c0:1c:fe:a5:e6:3e:04:2d:09:59:23:f6:e4:b0:
         69:da:f3:5e:d3:97:3e:95:d9:b9:9c:58:d4:8d:7c:a8:96:14:
         d8:87:ad:2e:5c:79:58:1d:6d:82:85:9f:a6:70:c2:25:c2:ff:
         13:10:c3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:44:03 2025 by rpki-client