Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/f68425d8-af31-3e65-8fad-c48489a0f510.roa
File:                     f68425d8-af31-3e65-8fad-c48489a0f510.roa (raw, json)
Hash identifier:          hLWp0mp6kzw+NjtsI4mH0rtvY3xF/obxYuJ6hTsm8aA=
Subject key identifier:   A3:66:6D:22:A0:96:A3:5C:F8:B0:C2:C6:28:B8:07:61:BD:C4:CE:8D
Certificate issuer:       /CN=6406ab50-470a-4f0f-ba5e-7500a8b97cd4
Certificate serial:       010D0C9F4328584AEE2686EB7D70DF06E36D8500
Authority key identifier: B7:0E:58:89:ED:AB:C8:83:04:25:60:8A:16:D1:DC:4D:3D:10:42:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/f68425d8-af31-3e65-8fad-c48489a0f510.roa
Signing time:             Thu 21 Aug 2025 13:00:41 +0000
ROA not before:           Thu 21 Aug 2025 13:00:41 +0000
ROA not after:            Wed 19 Nov 2025 14:00:41 +0000
asID:                     398068
IP address blocks:        206.227.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:26:86:eb:7d:70:df:06:e3:6d:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6406ab50-470a-4f0f-ba5e-7500a8b97cd4
        Validity
            Not Before: Aug 21 13:00:41 2025 GMT
            Not After : Nov 19 14:00:41 2025 GMT
        Subject: CN=eed71b96-8abe-4f9e-b7ce-b337827a7781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0f:ad:e6:d2:c1:19:81:15:43:f4:04:8e:2d:
                    c8:f5:db:a5:76:1a:06:d2:d4:88:41:4e:39:95:b6:
                    84:80:40:2c:3e:6f:45:c5:dc:b7:b1:a3:06:4e:4f:
                    35:70:e2:14:bb:45:0a:89:08:9b:26:6c:09:1d:91:
                    be:17:50:0d:7b:d9:6c:b6:51:6c:72:d0:4c:14:dd:
                    5e:6a:88:c7:ca:2f:b8:97:e9:02:18:70:f6:a3:62:
                    9d:26:9d:18:a5:9d:b2:d4:8b:4d:9c:bc:a0:49:4f:
                    5a:c0:43:55:91:27:cc:ba:c4:59:b4:51:df:40:09:
                    4e:4a:90:ac:87:ef:53:3c:f3:15:f8:a2:24:fd:df:
                    b4:e7:2f:a6:5a:cd:b8:80:a9:7f:2e:8a:87:54:32:
                    c4:42:c7:b3:e4:03:e3:1f:06:b0:59:f2:ba:dd:d7:
                    8a:6d:e0:94:9e:63:6d:b0:77:ac:38:e7:cd:64:0c:
                    a4:82:5e:dc:f5:d5:9c:b6:3a:b8:e0:f5:b3:e4:f4:
                    57:fd:0b:27:af:ff:3b:6a:87:c0:4f:16:06:3f:60:
                    71:56:ba:a2:36:10:8e:a9:e8:a1:a7:fb:13:13:bc:
                    8c:1f:ef:5b:fb:97:c5:55:7e:92:71:0f:1f:fe:f3:
                    f3:00:25:0c:d7:09:9d:eb:31:d8:b8:a6:fd:a0:a5:
                    a3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:66:6D:22:A0:96:A3:5C:F8:B0:C2:C6:28:B8:07:61:BD:C4:CE:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/f68425d8-af31-3e65-8fad-c48489a0f510.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.crl

            X509v3 Authority Key Identifier:
                keyid:B7:0E:58:89:ED:AB:C8:83:04:25:60:8A:16:D1:DC:4D:3D:10:42:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.227.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:7c:68:98:ef:0a:e2:58:ee:58:cd:a3:f9:5b:2f:3f:92:78:
         a8:c0:0a:25:32:a4:2a:83:a8:e9:b1:a8:f7:5f:b3:61:04:f7:
         e2:7f:36:bd:b2:a4:8d:24:75:f6:e1:2c:dc:48:04:39:ee:1e:
         80:53:55:b1:71:8b:76:8b:cc:0d:95:17:0c:b6:c5:df:37:27:
         6a:50:d0:09:a7:66:f8:84:9d:6a:9a:f2:27:fe:f9:84:2c:ee:
         d6:c4:d8:d1:8b:55:c9:fe:9d:3c:26:d4:6b:36:6c:14:33:c6:
         03:70:c9:6d:5a:60:7b:b9:ab:d9:fb:03:1f:ea:4a:d3:81:2a:
         7e:c4:ea:ea:71:53:ee:4d:2b:4a:58:a0:fc:1c:e1:c4:8a:51:
         d0:15:4e:05:b3:77:df:6a:e9:02:9c:8b:7c:71:a0:9a:47:fc:
         6c:23:e4:e1:c8:81:63:64:d2:fc:90:ea:cc:c6:2d:59:a4:61:
         0c:73:85:94:31:3a:50:b2:fd:03:70:c5:95:13:5b:09:de:ab:
         ce:d2:8e:3f:5a:7b:75:72:ae:91:b9:01:33:05:3d:c7:97:11:
         e1:8d:e7:15:e5:ad:10:ae:da:72:77:6f:0f:c6:83:2e:01:13:
         c1:0b:22:78:46:03:47:50:ea:86:fc:c7:21:62:32:5b:8e:ba:
         c5:f5:01:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:23:54 2025 by rpki-client