Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6cc186ae-8292-375b-96a7-2831b6b19c4a.roa
File:                     6cc186ae-8292-375b-96a7-2831b6b19c4a.roa (raw, json)
Hash identifier:          Z651GxnXyZ+30wvFD+KBlD5yQzNT+g5cmO/hds2UM8Q=
Subject key identifier:   5A:D3:88:C1:AE:53:89:B0:16:CF:9C:5E:C6:74:D7:42:90:3F:8B:0B
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584B4A472DFF413684496AE37E40
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6cc186ae-8292-375b-96a7-2831b6b19c4a.roa
Signing time:             Tue 23 Sep 2025 13:00:40 +0000
ROA not before:           Tue 23 Sep 2025 13:00:40 +0000
ROA not after:            Mon 22 Dec 2025 14:00:40 +0000
asID:                     3356
IP address blocks:        205.141.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4a:47:2d:ff:41:36:84:49:6a:e3:7e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 23 13:00:40 2025 GMT
            Not After : Dec 22 14:00:40 2025 GMT
        Subject: CN=f9286c3a-cc06-494b-9608-d9a3ed81229a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e9:2d:22:f0:73:47:b1:64:7a:6c:00:e6:ae:
                    21:4d:8b:16:1c:51:00:9d:5c:d2:a4:e1:94:f3:df:
                    9f:2a:29:6f:8a:0a:ac:a9:45:d1:9f:6e:2c:60:45:
                    ec:d5:13:6b:12:1b:98:de:de:c9:83:ae:ab:a6:44:
                    70:61:8e:07:f1:96:3e:68:f3:b7:14:5c:00:e4:16:
                    cc:94:dd:9c:74:4e:eb:6b:cc:5f:f1:f5:18:3d:ce:
                    9f:76:74:4d:af:5e:01:04:b0:96:46:3a:e1:00:47:
                    e4:c5:ee:6d:10:bd:d2:df:03:8d:0f:72:4d:ad:0b:
                    f6:95:27:1e:2c:7c:df:7d:a1:a2:f4:68:4a:d7:5e:
                    ba:9d:12:15:8d:90:60:7d:b1:8e:b7:41:e9:2e:76:
                    8c:e4:4c:e0:eb:1b:e1:f1:95:95:a0:62:45:47:28:
                    29:e0:fe:dc:d2:ea:33:9f:7d:ca:69:06:16:70:3d:
                    83:0f:78:bd:54:f6:cd:84:62:7b:b1:04:bc:d1:8e:
                    ba:3d:5c:10:49:5d:54:4a:c8:e6:bb:e0:c0:3a:10:
                    8b:50:db:40:f0:50:21:b9:5e:1f:16:1d:eb:e9:86:
                    db:c8:79:79:31:2b:00:c2:be:ca:42:a2:32:ba:94:
                    32:d1:e1:a2:7c:67:b0:db:7d:7a:3c:97:76:6c:92:
                    69:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D3:88:C1:AE:53:89:B0:16:CF:9C:5E:C6:74:D7:42:90:3F:8B:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6cc186ae-8292-375b-96a7-2831b6b19c4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.141.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:09:09:80:03:1c:c0:c7:31:fe:a9:2c:e5:6b:5f:42:53:ae:
         7d:ac:4c:8e:f2:f9:9f:b7:91:11:96:1f:56:c0:d4:d9:d9:ea:
         20:dd:3d:5e:92:62:1d:f4:af:fb:16:df:a5:a1:89:7b:a4:2a:
         ea:6d:97:ee:b3:1a:c9:48:27:92:6e:55:d8:9a:df:8a:12:24:
         a7:79:77:d9:0f:53:9a:e1:f3:8e:e3:42:d1:d4:59:a4:5f:81:
         96:b7:cf:56:77:6c:64:72:b6:bc:b9:52:4b:10:96:dd:3a:57:
         ec:d6:e3:56:45:b2:4f:97:27:ce:c2:c4:12:97:3a:35:f2:03:
         d9:11:ca:41:62:12:c0:95:69:a0:25:84:89:6f:9c:48:6a:a6:
         23:31:3e:e9:b0:a8:c2:bf:3c:c5:b3:2f:0a:1a:f4:f0:a3:3e:
         a7:81:22:e2:a7:f0:c6:b8:e1:8b:cb:0d:85:73:a5:fd:c8:e3:
         ea:42:10:b9:4e:b8:d5:00:c3:c9:82:79:fc:38:cf:07:31:f0:
         f3:ca:90:d8:fd:36:db:f0:7d:71:3b:60:fe:ac:54:49:61:4d:
         04:57:5f:2f:90:d2:be:57:63:06:1f:c6:7a:67:9c:ce:52:0c:
         ce:af:99:18:54:2b:e0:52:0c:39:6c:73:b2:6f:27:2d:45:cd:
         b2:50:da:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:01:34 2025 by rpki-client