Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d6030c72-d137-34d3-8372-1abef2623fce.roa
File:                     d6030c72-d137-34d3-8372-1abef2623fce.roa (raw, json)
Hash identifier:          imFhlGN4uAVm7jCFMc9lwADBWzTezHRgWcRmeGO3bUU=
Subject key identifier:   54:D6:36:BA:53:1A:54:CE:37:15:70:B2:D1:82:A7:72:1F:F2:DD:F7
Certificate issuer:       /CN=d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e
Certificate serial:       010D0C9F4328584ACE0B9CDBBC1DE60F2E5EA900
Authority key identifier: 2D:22:70:71:EA:41:40:16:CE:85:45:3A:86:52:BE:FE:08:5C:C9:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d6030c72-d137-34d3-8372-1abef2623fce.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     26564
IP address blocks:        167.206.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:9c:db:bc:1d:e6:0f:2e:5e:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=ee2fc2e5-2860-4a1b-b918-31122a2d880f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:40:d6:9c:d7:94:fd:a8:57:ac:e9:f8:c7:2a:
                    c2:73:7b:62:9a:21:94:b7:77:47:e0:f0:70:e2:37:
                    fb:57:45:88:aa:f7:17:85:51:a6:69:a8:0f:19:5d:
                    3d:20:8c:d7:35:f0:71:13:a7:59:65:28:26:08:03:
                    10:5e:9b:a4:65:20:b4:1e:54:fc:d8:42:c4:81:62:
                    65:d9:42:dc:84:2b:fb:1d:71:60:6b:b6:68:9f:b5:
                    da:96:cc:ab:26:85:b7:58:00:74:3e:20:69:5f:e8:
                    54:7b:be:4e:26:4c:f8:a6:35:08:f6:eb:f2:02:2b:
                    80:3a:65:e0:4c:eb:ea:d3:0a:3e:1c:29:bb:20:34:
                    5c:90:7e:2c:fd:84:a1:44:cc:b0:cf:a0:fc:40:b4:
                    bb:38:d0:52:b7:7c:25:c9:93:56:d6:b6:e8:c6:c5:
                    67:91:1e:e1:86:9a:b2:93:bb:8c:9f:d6:65:34:4d:
                    85:c5:8b:25:a4:db:69:61:10:e2:0a:91:3b:17:b5:
                    21:2d:dc:f3:bc:67:08:b0:03:a7:79:3d:af:0b:6b:
                    c0:b0:f5:77:54:b2:3a:ad:c8:21:f3:eb:b7:2a:54:
                    90:80:b4:7d:8d:f2:39:0b:de:28:de:53:82:a9:45:
                    5b:5c:7c:a5:45:4b:9b:db:a8:72:1a:58:f3:02:66:
                    7d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D6:36:BA:53:1A:54:CE:37:15:70:B2:D1:82:A7:72:1F:F2:DD:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d6030c72-d137-34d3-8372-1abef2623fce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.crl

            X509v3 Authority Key Identifier:
                keyid:2D:22:70:71:EA:41:40:16:CE:85:45:3A:86:52:BE:FE:08:5C:C9:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.206.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:52:1b:05:f0:89:25:ae:61:04:57:d3:50:67:20:71:78:f5:
         63:f3:13:52:d1:f2:c9:9c:eb:4d:e1:40:ad:92:d9:6b:0f:56:
         fd:4b:6f:a6:7f:fd:32:8b:e0:46:e6:33:b4:ec:2b:16:35:74:
         47:ff:d4:38:f4:13:be:6b:c1:3e:2d:29:dc:e3:a5:ce:e5:05:
         f3:fe:9a:ee:1a:9b:4a:e2:16:f9:80:e8:e9:1a:01:94:b0:fe:
         88:a9:e8:68:32:d3:a6:dd:3a:be:35:52:f7:07:ee:c4:7c:83:
         46:8d:36:96:4b:92:cd:d6:43:49:81:50:df:e9:6a:93:19:f7:
         00:31:4e:58:55:7f:1a:fc:6a:aa:94:b5:86:97:7a:b3:8e:75:
         1e:8d:f4:bf:b1:ea:46:e7:4c:5d:69:4a:1d:95:8b:54:a6:0b:
         6e:5a:00:0a:cb:d4:6f:81:ed:51:a7:db:a7:32:c4:d4:b6:6c:
         7a:2c:b2:c8:e4:bc:a3:61:1a:e8:aa:a0:b9:73:74:c5:07:4f:
         a6:5b:93:7a:39:25:fa:4e:93:4f:c0:0b:03:2f:e4:c2:c4:de:
         61:7e:7e:a3:2c:14:8f:e1:50:27:34:62:06:80:b0:27:5c:85:
         e7:80:ae:df:28:7e:e1:9c:b1:25:7f:46:07:81:5e:a2:8d:ee:
         d1:83:06:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:22:17 2025 by rpki-client