Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/487d0e32-0ca9-3533-b4e3-dfb4edc0154c.roa
File:                     487d0e32-0ca9-3533-b4e3-dfb4edc0154c.roa (raw, json)
Hash identifier:          wWAOfBcDau1suWyI9bS/N1w3YFHF/RD+qYAcxLzCj9k=
Subject key identifier:   0A:5B:28:C4:A7:F7:8A:35:E2:FF:BE:4F:A9:78:4C:90:B8:46:7A:10
Certificate issuer:       /CN=6ce95cb2-398f-4574-bae0-522b74e03f71
Certificate serial:       010D0C9F4328584B92DCE1FE293B483ADA36E600
Authority key identifier: CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/487d0e32-0ca9-3533-b4e3-dfb4edc0154c.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     6939
IP address blocks:        204.15.220.0/22 maxlen: 24
                          208.86.120.0/21 maxlen: 24
                          2606:3840::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dc:e1:fe:29:3b:48:3a:da:36:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ce95cb2-398f-4574-bae0-522b74e03f71
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=7cece3c6-5989-4bf6-908f-964e19b85880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:78:72:32:e9:30:a5:ef:98:32:d3:17:72:4e:
                    d7:ea:90:7f:52:88:ec:e2:09:bd:20:ba:14:2b:51:
                    dd:66:dc:ec:59:94:b5:44:f9:a7:9c:78:eb:68:4f:
                    8f:6e:35:2e:a3:a8:ca:db:3a:55:90:5f:60:3f:4f:
                    8e:36:61:ee:39:f0:24:71:47:67:00:90:0f:16:63:
                    49:2f:14:9a:f0:ea:10:e6:ec:1a:49:55:8c:e8:f7:
                    c8:7f:9d:4f:82:f5:7f:1b:0a:ce:b5:ba:09:17:08:
                    c6:4a:fe:c6:51:c3:62:2a:91:5b:37:14:a5:24:08:
                    35:a1:ab:e0:c0:d1:46:77:d8:85:e8:30:78:b1:4f:
                    c8:29:bc:ca:fb:3b:7b:97:60:6e:9d:06:c4:8b:b3:
                    b8:4e:f4:ba:b4:df:62:f7:85:49:76:f7:3a:c6:31:
                    66:a9:e5:e5:96:b4:ea:68:fc:54:cf:53:22:bf:60:
                    67:33:b3:d3:64:ab:aa:00:d4:35:bf:15:3f:d9:8f:
                    3f:69:6e:03:99:90:ad:a6:ca:3b:8a:32:23:ae:fa:
                    47:c8:9c:59:ce:ac:c5:2e:6c:36:f7:ea:fa:4f:33:
                    ea:cc:7c:7d:2f:20:16:5a:90:69:2e:76:37:f2:54:
                    fc:e8:35:af:b7:59:cb:5c:e4:bf:4e:18:43:aa:40:
                    ac:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:5B:28:C4:A7:F7:8A:35:E2:FF:BE:4F:A9:78:4C:90:B8:46:7A:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/487d0e32-0ca9-3533-b4e3-dfb4edc0154c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.crl

            X509v3 Authority Key Identifier:
                keyid:CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.15.220.0/22
                  208.86.120.0/21
                IPv6:
                  2606:3840::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:5b:c0:fd:4b:61:95:71:cc:c0:05:56:c1:99:95:37:93:10:
         ea:5f:75:c3:16:28:ab:a7:d0:4d:d6:d9:0e:20:4b:93:be:be:
         0c:3f:0d:8a:73:8a:bc:6c:a8:e3:ba:53:29:91:37:9d:b9:bb:
         54:c9:d1:89:2a:ed:53:32:2e:69:61:59:d0:38:8a:8e:5c:7f:
         23:12:15:06:35:8e:2b:a0:e6:52:60:cf:ce:b3:d7:dd:f8:c1:
         b7:56:75:64:0d:8c:07:0f:39:2d:9a:61:b7:c0:7e:8e:d8:06:
         3c:bd:ca:e6:2b:60:50:7e:ff:34:2c:79:f5:c4:4e:2d:ed:f4:
         e5:60:d9:1c:ba:71:1e:77:f4:7c:1b:d5:1f:c4:f7:d3:48:14:
         a2:8c:01:43:4e:c9:2d:56:84:51:13:eb:9d:5b:83:d4:98:f1:
         73:00:91:14:01:38:68:6c:10:1d:7e:b4:2a:1e:53:de:58:8d:
         e3:ed:d7:d1:22:74:6d:e0:f1:9b:23:f7:84:ce:4f:b9:07:7a:
         93:18:29:f1:02:91:75:00:4d:06:b4:88:d1:3f:f6:7f:75:0c:
         a6:c8:60:f3:b6:19:45:85:9a:f5:5a:2e:21:c7:e4:32:a0:9b:
         7f:5e:c5:0d:36:86:b1:b9:76:13:42:d4:22:19:85:f8:4e:81:
         f2:0b:37:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:20:03 2025 by rpki-client