Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7767794e-08b2-4526-9f12-2edd85918e87/5e7a0203-8a16-3975-a3a8-b00900d8cb84.roa
File:                     5e7a0203-8a16-3975-a3a8-b00900d8cb84.roa (raw, json)
Hash identifier:          R6qm49kohH0bgIhF2HN1oPmTGcUWgHXG3KgJpiNb9n0=
Subject key identifier:   91:29:D4:7D:E7:E8:2A:87:CA:F7:7D:E7:1C:54:5B:01:C1:21:4E:CB
Certificate issuer:       /CN=7767794e-08b2-4526-9f12-2edd85918e87
Certificate serial:       010D0C9F4328584AE5C677ADD3D2FAC120C9DFC0
Authority key identifier: 36:D5:F0:98:E6:A5:0B:41:F2:B8:A4:43:7D:DC:77:96:A9:7C:D7:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7767794e-08b2-4526-9f12-2edd85918e87.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7767794e-08b2-4526-9f12-2edd85918e87/5e7a0203-8a16-3975-a3a8-b00900d8cb84.roa
Signing time:             Mon 18 Aug 2025 13:00:41 +0000
ROA not before:           Mon 18 Aug 2025 13:00:41 +0000
ROA not after:            Sun 16 Nov 2025 14:00:41 +0000
asID:                     376
IP address blocks:        206.167.10.0/23 maxlen: 23
                          206.167.12.0/22 maxlen: 22
                          206.167.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7767794e-08b2-4526-9f12-2edd85918e87/7767794e-08b2-4526-9f12-2edd85918e87.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7767794e-08b2-4526-9f12-2edd85918e87/7767794e-08b2-4526-9f12-2edd85918e87.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7767794e-08b2-4526-9f12-2edd85918e87.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e5:c6:77:ad:d3:d2:fa:c1:20:c9:df:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7767794e-08b2-4526-9f12-2edd85918e87
        Validity
            Not Before: Aug 18 13:00:41 2025 GMT
            Not After : Nov 16 14:00:41 2025 GMT
        Subject: CN=4a9c2dbf-4873-4cd9-9148-cc3fc4371e1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:22:aa:20:40:f6:c1:ba:dd:08:60:ac:36:e4:
                    b0:54:45:d8:a2:4d:d7:36:a5:00:97:1b:c6:c1:04:
                    6d:15:67:dd:60:b9:85:e5:ef:8f:58:0c:d7:6e:64:
                    0a:13:71:98:ce:2d:71:03:6e:da:92:bb:44:a7:df:
                    52:70:27:06:f0:96:df:49:4c:a7:8e:d7:e9:e1:cd:
                    ce:0a:46:9e:ee:ee:b7:f8:02:8f:1e:03:d6:62:98:
                    39:66:b9:6f:d4:ed:17:d5:c6:66:b5:09:8a:35:ec:
                    4e:e5:d0:72:30:d3:95:8a:69:ce:8e:c4:66:40:bd:
                    1a:ac:53:e9:fb:41:0c:10:28:96:27:49:4c:3e:a4:
                    8a:de:1c:64:57:a0:41:89:04:c6:c5:43:7e:1f:83:
                    fb:22:67:4c:77:da:8b:c5:9c:2b:65:52:e6:3e:43:
                    f6:44:00:b3:91:07:2a:51:d7:db:88:34:18:67:41:
                    01:7e:83:bd:3e:6d:0c:98:f8:39:fd:9f:96:9f:23:
                    6e:bb:38:13:f5:96:bb:37:9b:db:4c:37:b4:8f:91:
                    c3:98:62:2a:cd:7d:67:a4:17:ce:47:ef:bc:44:97:
                    48:a6:3a:c8:82:f5:9f:5c:ca:b1:cc:40:9c:37:83:
                    d8:69:46:56:3c:ae:60:0b:25:3b:dc:ec:43:db:84:
                    2a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:29:D4:7D:E7:E8:2A:87:CA:F7:7D:E7:1C:54:5B:01:C1:21:4E:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7767794e-08b2-4526-9f12-2edd85918e87/5e7a0203-8a16-3975-a3a8-b00900d8cb84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7767794e-08b2-4526-9f12-2edd85918e87/7767794e-08b2-4526-9f12-2edd85918e87.crl

            X509v3 Authority Key Identifier:
                keyid:36:D5:F0:98:E6:A5:0B:41:F2:B8:A4:43:7D:DC:77:96:A9:7C:D7:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7767794e-08b2-4526-9f12-2edd85918e87.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.10.0-206.167.19.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:32:fe:58:7c:4f:00:d1:75:88:64:ae:d3:9b:36:a4:ee:7c:
         c8:23:16:8e:5d:a5:6b:1f:cc:e7:d4:5a:2a:1b:d9:6b:d9:70:
         4e:a8:0b:67:da:d7:e6:b5:3a:57:55:17:f9:9e:80:75:9f:40:
         e4:6f:5b:0a:60:e6:67:92:a7:33:c3:b7:86:83:c2:bc:70:c6:
         4f:2c:2a:33:0b:64:4d:92:66:31:42:26:52:51:2a:eb:c9:bd:
         21:67:8a:93:4d:2d:f0:5f:13:f1:4d:78:e2:e0:18:da:4b:3f:
         fb:5e:9d:62:75:8d:54:0a:df:53:ef:3d:fa:f5:6e:90:80:65:
         7d:43:d0:78:40:dc:77:ca:4b:2a:9b:9e:67:cd:71:06:b9:4f:
         03:c9:65:ea:63:51:2c:2f:99:23:19:b1:bb:84:64:50:3f:5e:
         20:a1:3e:4c:d9:71:1d:b8:97:d2:64:74:71:3c:5e:49:15:dd:
         c6:8f:f7:68:9d:51:12:63:f5:57:45:36:23:0c:8e:ca:66:b2:
         a4:ab:ff:94:ba:b9:ca:b3:36:ed:5b:c7:00:fa:ae:a3:f3:aa:
         3f:c5:17:77:b9:88:e2:30:fa:80:2f:1e:03:b7:52:a1:10:16:
         2e:58:07:fd:47:43:06:1f:52:a4:73:e4:b9:43:81:5e:7c:0c:
         23:ec:bc:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:18:11 2025 by rpki-client