Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/17dec3e9-62de-3000-8839-48d11c382b51.roa
File:                     17dec3e9-62de-3000-8839-48d11c382b51.roa (raw, json)
Hash identifier:          oFSZspJnRpDLGyXE0TXEhl5PAPijizT+qNXQx9SU1ow=
Subject key identifier:   46:72:6B:CF:66:EC:A6:BD:8D:B3:F8:95:2E:0F:D6:DA:D6:9E:39:BF
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584B4D9598ED916F016CDB065E00
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/17dec3e9-62de-3000-8839-48d11c382b51.roa
Signing time:             Wed 24 Sep 2025 17:26:22 +0000
ROA not before:           Wed 24 Sep 2025 17:26:22 +0000
ROA not after:            Tue 23 Dec 2025 18:26:22 +0000
asID:                     7015
IP address blocks:        208.66.72.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:95:98:ed:91:6f:01:6c:db:06:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Sep 24 17:26:22 2025 GMT
            Not After : Dec 23 18:26:22 2025 GMT
        Subject: CN=74ff96be-62b0-4fdf-a4e0-b5f1040507de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1b:c4:cd:19:97:78:a4:b7:2c:12:a9:03:b6:
                    f8:ad:38:4c:1e:cc:07:68:1c:d5:ec:17:bc:fa:35:
                    3a:e8:c2:a1:f4:40:43:20:03:d0:08:fb:54:4e:e2:
                    30:38:b1:6f:a4:ff:88:d0:01:75:45:7e:6a:74:e8:
                    fe:78:3b:3b:c6:6a:8e:3c:7c:db:ad:6e:eb:bf:fa:
                    51:35:31:04:2a:92:68:25:7f:74:85:25:61:aa:f3:
                    de:63:f2:fc:3c:8b:30:4b:5a:11:34:ea:10:09:0d:
                    65:7f:77:04:95:01:b0:f1:9f:fd:8f:34:1e:bc:04:
                    5d:20:ce:0a:10:84:c7:8a:d5:e5:e4:db:08:86:27:
                    5c:1c:1b:3c:c0:3c:00:c6:44:d8:35:8e:a5:0a:ce:
                    b1:e3:16:68:a4:8d:af:5d:f2:b8:e9:ac:aa:eb:96:
                    e4:59:b8:e6:be:82:d2:6f:11:2e:68:e0:5f:b6:46:
                    56:a2:af:3e:ca:51:fe:77:20:75:f1:3f:47:3c:e7:
                    c7:f4:90:73:e4:c3:79:98:a1:da:cb:58:60:f6:d8:
                    d9:2b:56:6c:ca:31:ad:91:9c:5c:2e:ff:5a:2a:e3:
                    e1:a2:5a:9d:29:7f:ea:9c:0d:2d:45:a9:f3:59:56:
                    a1:05:64:10:58:5c:0b:e9:5e:25:db:44:a7:4d:32:
                    e0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:72:6B:CF:66:EC:A6:BD:8D:B3:F8:95:2E:0F:D6:DA:D6:9E:39:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/17dec3e9-62de-3000-8839-48d11c382b51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.66.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:90:93:4c:05:c7:06:6a:86:89:90:8c:91:d2:7a:d5:f0:e8:
         2d:e2:fd:cc:d4:3a:8b:07:02:6f:36:92:99:0c:a3:bc:bf:ad:
         91:7d:e8:a3:ba:74:b6:df:9f:5f:cc:fd:22:46:ed:e8:8f:d2:
         c9:cb:89:da:06:02:45:ca:b2:22:f9:11:1c:a3:8d:ba:6f:31:
         b2:4c:7f:55:25:e1:a4:e0:62:b2:47:5c:9a:0f:e4:ee:50:98:
         e0:03:f1:16:66:d5:6b:40:0d:11:cd:90:12:18:38:5b:36:99:
         8e:a8:a2:16:b2:2d:82:b8:7d:60:3b:94:3c:31:98:c9:82:02:
         6f:c2:9f:8b:a7:9a:0f:ea:53:d9:09:bd:a1:69:9d:7a:52:4a:
         1e:b8:6c:a6:c4:e4:a5:0f:3d:b3:8f:3b:00:e0:6f:90:f6:5d:
         1b:7f:37:78:ad:7f:a1:e4:e0:b1:6b:14:c9:20:db:2c:16:92:
         48:cb:36:21:4e:6c:f1:fa:1a:0d:db:01:84:ee:f6:c6:c7:59:
         cf:90:6d:dd:16:eb:1a:a8:11:30:ee:56:01:29:1c:f4:47:0e:
         da:03:26:e6:0c:3d:64:48:b4:f6:27:af:0e:e5:2e:64:28:ad:
         73:41:4d:b2:95:9c:64:4a:20:8a:a8:f5:26:12:5a:a5:f5:ba:
         b2:07:4c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:25 2025 by rpki-client