Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/d7b6564b-c0ee-3ed5-9d9d-96cd5b38d4a4.roa
File:                     d7b6564b-c0ee-3ed5-9d9d-96cd5b38d4a4.roa (raw, json)
Hash identifier:          DMU9J0ohABdlzH/FXMfhGEKc7Vcpk2BP80Ai3jhWUvo=
Subject key identifier:   B2:91:10:0A:39:C9:FB:9A:38:CC:42:41:35:68:E2:1D:1D:37:78:20
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F4328584AF2567D92BC05AECE99314600
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/d7b6564b-c0ee-3ed5-9d9d-96cd5b38d4a4.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     14297
IP address blocks:        206.201.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:7d:92:bc:05:ae:ce:99:31:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=bd382465-5b46-4e7e-a2e1-7a642f8e7750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:3a:21:a1:82:5a:ba:98:a5:00:f4:35:3e:d2:
                    ed:87:2a:be:59:11:5d:03:0e:f4:d7:a5:40:c4:12:
                    9e:73:49:f9:d2:aa:92:e7:4b:09:43:c1:a6:c6:83:
                    53:83:5f:d9:4e:0c:40:c6:1d:2d:51:de:ea:a9:32:
                    7e:a4:a0:23:28:0c:c0:54:33:09:13:2c:65:1c:a9:
                    61:e6:d5:75:83:1e:32:fe:63:3e:aa:45:92:bd:e3:
                    ee:5b:28:04:7a:29:51:91:41:b5:60:ed:cf:db:7c:
                    c3:fd:4f:60:6b:d6:33:db:a7:38:dc:5f:48:4d:b1:
                    c5:13:06:7a:8f:39:92:68:85:0d:9f:78:6d:fa:1f:
                    b0:51:b4:3f:b1:38:06:23:2b:c9:2e:5a:2d:3a:94:
                    7e:1e:0a:1e:fe:41:0f:6b:f2:9e:11:b3:90:54:2a:
                    6d:ce:06:2d:02:5d:85:17:c7:9f:e4:cd:00:98:e9:
                    9c:ac:6a:ac:af:e7:4f:fc:73:49:4d:59:b4:79:92:
                    da:7d:a2:ca:76:52:6c:ed:a1:8a:07:f6:7a:70:a4:
                    47:9e:3f:61:32:58:63:30:9f:65:19:4f:56:a7:62:
                    9a:56:9f:9e:20:bb:05:75:b8:63:10:15:2d:b7:9c:
                    c1:49:5d:89:67:0f:3f:b5:4b:3f:75:da:0e:1f:4d:
                    94:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:91:10:0A:39:C9:FB:9A:38:CC:42:41:35:68:E2:1D:1D:37:78:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/d7b6564b-c0ee-3ed5-9d9d-96cd5b38d4a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.201.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:43:cb:85:c2:94:8e:17:cb:b0:27:5a:63:c9:c1:d2:14:5c:
         52:2f:05:da:be:47:80:3f:79:be:a1:f2:e6:c9:58:b2:e3:da:
         73:ec:91:be:91:de:df:2a:bd:e4:c6:57:16:f6:fb:b9:6e:9b:
         06:12:4b:72:12:5e:0f:26:d5:54:a5:90:45:52:99:15:c5:c0:
         88:11:42:b2:94:88:d2:1f:c1:da:b8:f2:bd:99:47:7c:52:27:
         a1:b6:27:23:9a:0b:c5:ea:84:59:dc:a2:0f:43:4c:32:1e:8e:
         fd:27:e1:5f:a9:25:a8:00:89:c2:34:ae:d2:0e:af:88:bb:a1:
         32:59:4c:d4:58:0b:7c:4a:90:f2:86:2a:33:cb:71:9a:ef:d9:
         ef:9c:c0:b1:7b:c1:22:ec:32:13:52:df:a7:9a:da:f8:0b:a9:
         74:d1:9a:c3:81:06:02:4c:e4:2e:f2:af:79:30:6d:87:75:84:
         f7:4c:03:0d:86:2d:b4:27:49:7f:fa:ca:4a:8b:64:31:c5:99:
         75:76:4a:9e:0f:95:74:01:08:c7:8e:5e:f2:b7:54:34:bf:34:
         8c:49:7f:d9:c8:c2:04:73:e9:bf:8d:1a:98:6b:20:a6:c2:39:
         31:d8:51:9a:de:54:1a:51:a5:22:fa:7c:18:b3:06:20:f3:2f:
         4c:da:2d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:15:29 2025 by rpki-client