Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/dc710201-95f4-308a-b0d6-022c0e224cb0.roa
File:                     dc710201-95f4-308a-b0d6-022c0e224cb0.roa (raw, json)
Hash identifier:          jzd+UP5htPSNnTHSXk1jtkgGLSyPi50UrkPtbUjy6I4=
Subject key identifier:   15:D7:AD:75:D6:DC:E0:05:30:FF:26:8A:E9:1D:FB:25:BE:F2:93:F5
Certificate issuer:       /CN=1add3b23-5fb0-4412-be17-98450d352516
Certificate serial:       010D0C9F4328584B4D11C81D9E91CA37930746D0
Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/dc710201-95f4-308a-b0d6-022c0e224cb0.roa
Signing time:             Wed 24 Sep 2025 13:00:41 +0000
ROA not before:           Wed 24 Sep 2025 13:00:41 +0000
ROA not after:            Tue 23 Dec 2025 14:00:41 +0000
asID:                     53976
IP address blocks:        206.183.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:11:c8:1d:9e:91:ca:37:93:07:46:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516
        Validity
            Not Before: Sep 24 13:00:41 2025 GMT
            Not After : Dec 23 14:00:41 2025 GMT
        Subject: CN=20d1e9ca-6239-4e89-aae7-4895c1c8a5d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:20:7e:55:d2:27:77:39:e4:e8:58:68:4a:9e:
                    22:d6:08:6e:f1:de:53:36:9b:a0:d1:15:a3:3a:69:
                    c5:8e:c7:07:94:d7:47:01:f0:1b:ff:50:3b:cd:f2:
                    da:85:46:93:c9:09:ce:04:57:2d:61:1f:9b:44:ec:
                    90:a9:4e:2f:fa:e2:40:35:8d:85:0d:d8:60:54:62:
                    d2:fc:52:55:51:5d:f3:62:8a:ae:59:11:e0:de:3c:
                    52:86:37:51:c0:21:3e:20:5c:c2:38:80:e0:a4:3c:
                    70:88:2e:12:49:d4:ba:28:61:2f:2f:d3:09:6d:29:
                    48:35:d2:cf:e0:a6:cc:8f:ce:c4:c0:78:29:b8:d6:
                    e3:0c:83:15:ba:fb:c0:23:e2:b7:91:11:44:8e:d6:
                    bc:f4:17:b5:81:49:fd:5f:17:74:fb:7a:0d:fc:39:
                    54:4f:69:6d:db:61:1f:63:59:67:71:5b:35:5f:1c:
                    cf:42:e3:b7:44:24:5c:53:90:bc:5b:43:eb:de:b4:
                    33:00:60:57:97:b4:3b:73:6b:36:34:5b:54:21:01:
                    06:9b:f8:2e:c8:67:37:4d:e1:b0:5d:37:a6:e6:d3:
                    96:2d:a5:be:8d:8c:6a:15:6f:80:34:20:c9:b7:46:
                    d9:45:19:40:57:62:e2:10:d7:41:0d:30:ae:ca:19:
                    61:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:D7:AD:75:D6:DC:E0:05:30:FF:26:8A:E9:1D:FB:25:BE:F2:93:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/dc710201-95f4-308a-b0d6-022c0e224cb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl

            X509v3 Authority Key Identifier:
                keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.183.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:e6:24:fc:44:1e:84:df:8d:0d:d0:37:68:97:9c:37:1b:fd:
         e0:a9:ec:8a:0d:0a:52:2d:7c:8c:c9:75:e5:95:48:16:5a:e1:
         46:0a:a1:41:05:cb:b0:0d:82:0c:cb:21:81:80:21:3a:12:83:
         65:78:89:bf:5e:a8:75:b4:67:28:17:63:49:47:58:2c:3e:be:
         55:2d:f6:98:e2:fa:aa:54:d7:cf:78:a6:22:e9:50:49:74:28:
         8f:6b:c7:19:2b:c0:1a:5f:d1:b5:2a:72:06:be:84:40:28:ff:
         08:f4:ab:38:ad:5f:a7:2a:a2:de:07:b7:dd:98:15:19:c6:ea:
         fe:fb:94:42:cd:69:53:1b:da:b9:79:c6:8a:01:13:64:b4:12:
         12:5b:15:ec:04:fe:7f:bb:93:de:aa:c6:54:54:49:81:d0:26:
         3f:ff:3a:83:b5:3b:bb:9b:f7:d7:07:c7:ca:5c:ff:a9:54:00:
         35:00:e8:aa:23:8e:76:64:cc:65:1e:ff:30:07:bd:ae:a6:8c:
         2c:5c:94:ae:54:34:e8:60:38:83:78:1c:75:60:0b:1c:82:4d:
         b9:36:90:72:4f:43:a7:6b:af:5b:2f:ad:c6:fe:19:14:e9:85:
         ae:b3:40:69:2c:ed:ff:d5:4c:66:2b:cc:b4:8a:5f:33:e4:94:
         64:94:1c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:58:47 2025 by rpki-client