Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/936f2f41-5c18-3c4b-b750-f03c0a28e3e7.roa
File:                     936f2f41-5c18-3c4b-b750-f03c0a28e3e7.roa (raw, json)
Hash identifier:          7gr33nyWsiJiPJZu7Qk0iu8Ae39zGyr0SozxB6/2rcw=
Subject key identifier:   3F:50:EB:44:4B:65:D8:8B:0B:10:42:B1:7C:E0:9C:A2:16:85:C7:9B
Certificate issuer:       /CN=6406ab50-470a-4f0f-ba5e-7500a8b97cd4
Certificate serial:       010D0C9F4328584AEE2686D7FD43973919218C80
Authority key identifier: B7:0E:58:89:ED:AB:C8:83:04:25:60:8A:16:D1:DC:4D:3D:10:42:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/936f2f41-5c18-3c4b-b750-f03c0a28e3e7.roa
Signing time:             Thu 21 Aug 2025 13:00:41 +0000
ROA not before:           Thu 21 Aug 2025 13:00:41 +0000
ROA not after:            Wed 19 Nov 2025 14:00:41 +0000
asID:                     398071
IP address blocks:        206.227.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:26:86:d7:fd:43:97:39:19:21:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6406ab50-470a-4f0f-ba5e-7500a8b97cd4
        Validity
            Not Before: Aug 21 13:00:41 2025 GMT
            Not After : Nov 19 14:00:41 2025 GMT
        Subject: CN=7bebe640-9059-4206-8052-98404047ed3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:32:ee:90:6b:42:be:05:41:4b:00:75:8e:e7:
                    48:b4:3e:09:51:1c:31:09:ae:64:01:53:1b:54:6f:
                    ea:f1:d0:fc:2d:e7:03:df:c3:f3:f7:e4:d9:0c:c0:
                    ab:eb:2f:3b:da:1c:91:13:bd:9c:9e:be:22:01:d0:
                    9f:a8:25:cf:98:e2:90:d5:58:07:6a:3d:ae:4c:f5:
                    11:37:0d:9a:b1:ff:5c:ee:72:44:8c:73:fc:c0:3c:
                    b0:95:b0:1a:5c:9e:67:b4:71:e0:d4:ba:16:c3:4a:
                    40:f9:12:a1:96:65:28:4c:ca:a9:3f:ae:9d:79:fd:
                    f8:e1:0b:7e:29:74:e8:e1:e1:2a:3c:19:a1:7a:7b:
                    78:8b:9a:22:41:18:8d:61:aa:0a:57:95:0e:fe:29:
                    e0:19:57:83:ff:a2:e5:1f:23:93:96:04:13:ac:d4:
                    43:88:5e:5c:c4:a8:41:a1:5f:be:f4:f2:5f:b8:1d:
                    a7:c2:60:cd:66:c6:12:70:aa:a5:08:52:c1:9c:5c:
                    07:bf:57:11:c2:1c:23:65:2c:b5:98:af:dd:14:91:
                    77:ac:d7:6f:de:13:da:4e:d3:d4:ec:c8:8f:48:77:
                    3a:20:4d:0f:5b:81:a6:1b:53:b6:59:ac:94:6a:4a:
                    ad:b1:25:51:f2:79:f8:90:32:87:1e:69:56:c9:ed:
                    35:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:50:EB:44:4B:65:D8:8B:0B:10:42:B1:7C:E0:9C:A2:16:85:C7:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/936f2f41-5c18-3c4b-b750-f03c0a28e3e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.crl

            X509v3 Authority Key Identifier:
                keyid:B7:0E:58:89:ED:AB:C8:83:04:25:60:8A:16:D1:DC:4D:3D:10:42:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.227.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:8f:0f:90:a9:2d:29:40:56:e7:65:99:a4:5a:33:d4:98:9c:
         8e:d9:b1:45:c9:91:d4:02:bd:77:1d:56:39:ab:eb:94:ae:d3:
         11:30:96:35:59:33:da:ae:d5:27:75:f5:9c:86:10:b2:cc:91:
         d4:48:87:ca:5f:af:d5:02:73:f5:42:21:a0:d1:33:95:c6:ab:
         8c:71:63:c5:78:cf:71:14:0f:47:6f:ef:d1:25:5b:ed:19:17:
         7f:e2:cc:26:8f:0c:65:fe:0a:d1:dc:99:64:47:b2:76:1d:d3:
         b8:83:0a:a5:3a:59:27:4e:55:59:f2:12:40:e8:1e:b4:a0:47:
         d8:12:f7:29:04:d1:55:da:ff:da:57:cc:91:6a:45:4a:9d:f0:
         8a:b0:97:a7:12:aa:f7:f8:20:07:45:2b:b0:8d:0c:33:83:7b:
         58:91:60:31:23:41:e6:ba:4e:01:10:5b:0e:42:a1:13:a9:96:
         36:30:e8:1d:5e:2b:94:67:2c:09:33:47:96:33:e4:71:f2:51:
         8b:05:f3:8a:9e:f0:71:5c:40:1c:f4:04:77:2b:a4:4f:a4:d3:
         35:32:42:22:f0:1f:ee:90:9f:20:32:04:f7:f4:06:cc:18:b1:
         c2:ad:19:f6:b0:99:cc:6c:dd:b4:68:b3:ef:48:d9:84:97:c2:
         08:b8:73:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:23:42 2025 by rpki-client