Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/5d2bfed8-363e-3e2b-919f-100ba77f97f0.roa
File:                     5d2bfed8-363e-3e2b-919f-100ba77f97f0.roa (raw, json)
Hash identifier:          N/igU/eBbPMD3V1p9qxgvQV5IzuVrZmtO2668Knam3M=
Subject key identifier:   FE:55:BD:55:69:34:8F:43:76:D3:E1:57:90:B7:3D:7F:C0:D2:DE:40
Certificate issuer:       /CN=0ea67b9e-1c99-4b1c-8c50-055c10d4d55d
Certificate serial:       010D0C9F4328584B5B0729C9DCF26BB6B4BDCD80
Authority key identifier: 8F:F9:BD:64:62:6F:68:AD:4F:51:81:74:78:57:9D:54:4A:A0:29:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/5d2bfed8-363e-3e2b-919f-100ba77f97f0.roa
Signing time:             Mon 29 Sep 2025 13:00:41 +0000
ROA not before:           Mon 29 Sep 2025 13:00:41 +0000
ROA not after:            Sun 28 Dec 2025 14:00:41 +0000
asID:                     14618
IP address blocks:        206.219.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:07:29:c9:dc:f2:6b:b6:b4:bd:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ea67b9e-1c99-4b1c-8c50-055c10d4d55d
        Validity
            Not Before: Sep 29 13:00:41 2025 GMT
            Not After : Dec 28 14:00:41 2025 GMT
        Subject: CN=6f968ac2-827e-4e09-8aea-60be5f4f4262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4d:a1:05:5d:4f:4b:5e:11:82:26:e0:be:b1:
                    31:e6:fa:a4:d5:37:f2:89:3c:28:14:95:2c:93:f0:
                    c1:36:f8:2c:29:b7:f4:04:68:c9:37:65:35:01:df:
                    6a:21:06:f9:cb:97:d4:46:ba:ef:6e:db:4e:25:cf:
                    50:64:2a:5a:13:60:19:82:e0:3b:1f:f6:4b:06:af:
                    02:eb:a2:74:c9:ae:f5:e6:9b:16:6d:6c:fd:0e:a8:
                    b4:c3:1e:36:70:57:fc:1d:3f:a6:d0:3c:3d:28:97:
                    f2:d7:69:1a:7b:0b:20:e6:73:e7:cb:80:32:13:3d:
                    72:de:fa:3b:49:17:6d:23:8f:fd:9f:fa:40:19:30:
                    b8:a2:5b:f5:23:13:02:12:60:c0:54:c2:f2:52:a3:
                    be:d7:d2:08:19:c9:b6:55:96:95:dc:14:0f:e6:08:
                    c5:f9:7c:fe:3f:9c:c6:99:59:31:57:49:4a:42:02:
                    f6:da:fa:cf:94:aa:2c:86:85:70:8c:e3:9f:36:93:
                    29:b0:c5:55:14:ba:96:10:24:64:a1:62:de:ce:4f:
                    60:1a:b9:33:3a:c8:06:77:f5:af:5e:a0:07:ff:eb:
                    8d:a5:51:14:52:52:22:03:8f:d3:93:92:bd:3b:66:
                    bd:7b:7c:bd:eb:db:fc:19:de:9d:8a:1d:d1:28:24:
                    25:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:55:BD:55:69:34:8F:43:76:D3:E1:57:90:B7:3D:7F:C0:D2:DE:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/5d2bfed8-363e-3e2b-919f-100ba77f97f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.crl

            X509v3 Authority Key Identifier:
                keyid:8F:F9:BD:64:62:6F:68:AD:4F:51:81:74:78:57:9D:54:4A:A0:29:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.219.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:3e:1b:bd:59:50:55:94:d6:ea:c3:d9:da:49:82:da:2c:97:
         ae:aa:4f:f8:32:d7:b3:75:9c:d6:16:22:11:04:5c:49:2d:8f:
         6c:12:93:9b:5d:4d:dc:57:21:cd:02:5f:81:46:b1:d3:f8:e5:
         50:28:c9:3b:39:88:f4:29:97:97:2b:e8:e0:be:9a:79:6e:8b:
         40:4c:dc:e7:b3:e6:2a:6f:f6:9c:5e:1f:32:cb:62:60:92:c1:
         ae:39:b9:c2:64:86:fa:4f:ed:b8:f0:0e:ba:38:ea:30:ba:18:
         5a:5d:90:99:f5:27:91:90:ce:99:f3:68:5d:28:31:2d:c1:f8:
         0b:26:f3:9c:29:b0:9d:0a:06:1e:8f:ce:3e:7f:28:58:03:ea:
         39:26:2a:c8:55:8f:db:fd:cd:1b:d8:e0:7a:b6:3e:73:c4:16:
         9f:2c:f1:22:b3:57:66:81:91:5e:65:45:ce:60:44:ee:b4:2e:
         3e:6e:d2:ce:78:f4:f7:eb:e5:6d:c9:2c:38:e3:d7:e3:2c:67:
         81:63:41:34:ca:69:e2:13:45:ad:d9:03:60:d5:6e:4b:a7:ba:
         39:cb:cd:1a:42:84:cd:ec:2d:8c:f8:00:62:9d:b1:74:68:73:
         1d:27:82:4e:d4:47:f8:38:c4:44:6b:80:b2:44:65:15:7d:5b:
         83:21:24:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:16:20 2025 by rpki-client