Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/e6679876-bbc5-3741-aa58-b00c68e0dd8d.roa
File:                     e6679876-bbc5-3741-aa58-b00c68e0dd8d.roa (raw, json)
Hash identifier:          2GibSJLhJu2oC8W+wF5RkoRaHrE+QGDw+MB1Zi0HrNs=
Subject key identifier:   D9:B8:DA:05:06:5F:EF:DD:BE:3F:A2:4A:CD:7D:9D:09:FA:E4:CA:77
Certificate issuer:       /CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
Certificate serial:       010D0C9F4328584AC2E0EB5780A14858EFABCAA0
Authority key identifier: 0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/e6679876-bbc5-3741-aa58-b00c68e0dd8d.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     1273
IP address blocks:        206.99.120.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:eb:57:80:a1:48:58:ef:ab:ca:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=bfd89410-6728-4525-b145-14c2e34563d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d3:ee:3e:be:57:51:4e:c3:02:84:77:84:d3:
                    79:61:8f:17:54:34:84:da:1b:53:c1:6e:22:07:35:
                    82:03:3e:54:5b:c5:70:1d:96:c3:da:71:d9:15:8b:
                    00:ad:10:ee:86:61:07:9e:36:0f:9b:ba:dd:63:3b:
                    4b:92:21:cc:3b:61:2a:fc:e2:8c:28:dd:1e:56:47:
                    c3:ee:d0:65:86:4f:c9:f3:db:5a:4d:3d:96:5a:cf:
                    62:f3:9b:84:d9:4c:33:94:41:1b:63:57:fc:4b:d1:
                    c2:e4:17:f6:e2:c2:f8:cf:2b:90:30:36:96:75:34:
                    3b:75:24:33:80:89:8b:54:01:a0:ae:6d:f1:d1:7a:
                    fb:42:ff:b9:e7:ed:f5:97:fc:28:df:42:68:d6:b7:
                    c3:ca:dd:bc:df:d7:e5:81:1b:eb:0c:94:1d:86:f1:
                    e3:80:dd:eb:d1:ac:8b:af:75:2c:e9:cc:31:10:d7:
                    f2:ca:c3:a3:b4:4e:d7:9c:ea:0b:77:51:5b:ec:75:
                    fb:57:9b:82:f4:3c:17:f8:97:5e:9c:ea:d7:b8:82:
                    42:0e:6c:f6:90:d4:21:bd:06:98:7f:e4:6e:7a:3f:
                    fb:bd:59:7b:48:1c:89:db:f9:db:36:09:0e:49:86:
                    96:89:74:68:da:3b:95:5e:d8:63:da:97:f6:ef:08:
                    a1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:B8:DA:05:06:5F:EF:DD:BE:3F:A2:4A:CD:7D:9D:09:FA:E4:CA:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/e6679876-bbc5-3741-aa58-b00c68e0dd8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl

            X509v3 Authority Key Identifier:
                keyid:0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.99.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:20:1d:3b:7f:a4:24:fa:d0:1d:02:f0:2a:0f:90:d8:d6:07:
         fc:9c:3b:b5:46:28:a9:66:00:9c:a4:dc:7f:a7:7a:b3:19:20:
         90:f0:a2:d4:b0:11:53:25:1c:67:0f:ba:59:a5:23:77:c8:02:
         b8:8e:0f:a5:36:04:35:26:d7:ed:30:70:57:c2:eb:3b:2d:25:
         7b:7a:c5:af:17:61:cc:e5:02:bf:04:b7:04:15:21:d4:de:63:
         b3:68:1d:0a:fb:4b:0b:35:11:f4:15:21:4e:17:90:43:93:1f:
         45:da:b6:86:ab:66:83:7e:2d:81:ac:5a:1f:69:fd:6c:8a:f2:
         13:6e:47:cf:df:6f:d8:d3:a7:1f:8e:ec:c0:ef:b5:2f:f3:ad:
         13:35:d7:6c:9c:e8:1b:e5:b4:ae:33:23:04:43:68:26:7b:c1:
         34:48:5d:ef:c4:bc:f0:34:98:d8:7e:ee:34:a5:74:ae:bf:a2:
         93:5d:61:43:f5:6e:9e:6d:e8:c4:2b:9e:d3:44:0b:c2:ec:82:
         a7:b7:8b:ff:0c:8d:d0:95:2f:62:86:40:30:33:ce:ef:a0:9c:
         72:0a:c3:62:f9:3f:f8:49:81:b1:79:ef:ee:ab:7a:61:6e:53:
         bf:c9:6f:59:07:86:48:1e:a9:8e:b8:f5:60:c6:cf:42:c4:8e:
         37:8e:d1:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4OtXgKFIWO+ryqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWMyZDM4NzYtMjllNi00MmY1LWI3NmYtMjNiYjQ4YmE4
NTgyMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk
YmZkODk0MTAtNjcyOC00NTI1LWIxNDUtMTRjMmUzNDU2M2Q0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdPuPr5XUU7DAoR3hNN5YY8XVDSE2htTwW4i
BzWCAz5UW8VwHZbD2nHZFYsArRDuhmEHnjYPm7rdYztLkiHMO2Eq/OKMKN0eVkfD
7tBlhk/J89taTT2WWs9i85uE2UwzlEEbY1f8S9HC5Bf24sL4zyuQMDaWdTQ7dSQz
gImLVAGgrm3x0Xr7Qv+55+31l/wo30Jo1rfDyt2839flgRvrDJQdhvHjgN3r0ayL
r3Us6cwxENfyysOjtE7XnOoLd1Fb7HX7V5uC9DwX+JdenOrXuIJCDmz2kNQhvQaY
f+Ruej/7vVl7SByJ2/nbNgkOSYaWiXRo2juVXthj2pf27wihVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNm42gUGX+/dvj+iSs19nQn65Mp3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzJk
Mzg3Ni0yOWU2LTQyZjUtYjc2Zi0yM2JiNDhiYTg1ODIvZTY2Nzk4NzYtYmJjNS0z
NzQxLWFhNTgtYjAwYzY4ZTBkZDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWMyZDM4NzYtMjllNi00MmY1LWI3
NmYtMjNiYjQ4YmE4NTgyL2FjMmQzODc2LTI5ZTYtNDJmNS1iNzZmLTIzYmI0OGJh
ODU4Mi5jcmwwHwYDVR0jBBgwFoAUDEkkReUZkCywPx/BY7zBtY7YpJ4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzJkMzg3Ni0yOWU2LTQyZjUtYjc2Zi0yM2Ji
NDhiYTg1ODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzmN4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABYgHTt/pCT60B0C8CoPkNjWB/ycO7VGKKlmAJyk3H+nerMZIJDwotSw
EVMlHGcPulmlI3fIAriOD6U2BDUm1+0wcFfC6zstJXt6xa8XYczlAr8EtwQVIdTe
Y7NoHQr7Sws1EfQVIU4XkEOTH0XatoarZoN+LYGsWh9p/WyK8hNuR8/fb9jTpx+O
7MDvtS/zrRM112yc6BvltK4zIwRDaCZ7wTRIXe/EvPA0mNh+7jSldK6/opNdYUP1
bp5t6MQrntNEC8Lsgqe3i/8MjdCVL2KGQDAzzu+gnHIKw2L5P/hJgbF57+6remFu
U7/Jb1kHhkgeqY649WDGz0LEjjeO0ds=
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:59:52 2025 by rpki-client