Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692/c6086ff1-75bd-3962-a692-00d25c23940f.roa
File:                     c6086ff1-75bd-3962-a692-00d25c23940f.roa (raw, json)
Hash identifier:          fqEycoEJ4fkmcSp4JUp8KCMKqHkoBHZNAgZmhbXVCe4=
Subject key identifier:   7D:43:ED:AC:BD:95:26:1B:48:01:00:3C:91:26:E5:C9:C0:6F:53:00
Certificate issuer:       /CN=ed41e4bd-3b0f-4d8c-ad8a-125555e7b692
Certificate serial:       010D0C9F4328584AC7111CC6F5802DA5DA3FDE00
Authority key identifier: 74:CA:8D:DF:F2:AB:11:AE:86:41:33:B8:27:D2:EC:9F:FD:9E:B3:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692/c6086ff1-75bd-3962-a692-00d25c23940f.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     62681
IP address blocks:        192.206.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:11:1c:c6:f5:80:2d:a5:da:3f:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed41e4bd-3b0f-4d8c-ad8a-125555e7b692
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=ae5a5ab7-fd48-4fce-a6d8-c114a82410ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:54:7a:77:c7:e8:7c:12:26:b8:c7:1f:2c:a1:
                    0b:c9:fd:33:c4:f7:72:49:9a:19:4d:18:7d:3a:48:
                    f6:2c:c7:ba:49:4d:1d:ec:f5:00:7e:fc:11:f9:44:
                    ec:64:a4:7e:77:d5:44:df:ab:2c:dd:5b:c1:51:18:
                    02:ca:86:c8:c8:15:c4:32:f8:dc:78:70:e3:68:2c:
                    1d:81:87:1e:92:d7:7e:c1:59:2e:f4:bd:f7:e7:d6:
                    91:6d:51:20:c6:fb:ab:36:09:8f:8f:15:3f:ae:55:
                    cd:5d:0e:f2:aa:43:b2:32:78:87:90:79:bd:03:6d:
                    bd:88:50:db:d3:69:95:8f:29:4c:aa:b6:3b:57:64:
                    88:27:6c:36:78:56:d6:9f:77:e3:fd:eb:8a:86:2f:
                    9f:49:91:4b:7d:16:32:b5:14:78:f6:67:c2:f5:23:
                    31:62:76:27:8f:ae:29:f9:1c:1a:4e:76:8b:35:a5:
                    07:8f:1c:ef:ce:ba:94:a7:71:dd:88:fe:5d:67:73:
                    60:07:60:a0:7e:53:71:34:e8:3d:0e:f5:c8:0f:ae:
                    e7:fa:20:b8:ad:b1:e1:de:4e:cd:13:95:ec:cb:70:
                    3b:34:61:f1:8f:ed:ae:85:3e:b6:c2:64:ae:b3:d8:
                    6b:a8:5d:93:b4:8c:b2:c3:20:65:f1:5a:bf:ce:4c:
                    55:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:43:ED:AC:BD:95:26:1B:48:01:00:3C:91:26:E5:C9:C0:6F:53:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692/c6086ff1-75bd-3962-a692-00d25c23940f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692.crl

            X509v3 Authority Key Identifier:
                keyid:74:CA:8D:DF:F2:AB:11:AE:86:41:33:B8:27:D2:EC:9F:FD:9E:B3:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.206.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:bb:f9:09:b7:55:bb:fe:c8:9e:8f:83:b4:92:e4:03:81:30:
         95:fc:90:c0:61:c0:52:bd:c4:95:4b:e3:93:1e:fa:dc:ff:25:
         9c:14:47:1a:97:b7:27:fb:10:d5:6e:c8:20:76:c6:23:7e:14:
         5a:a4:66:97:74:8d:3c:5a:bb:8a:ea:55:6b:9e:f1:29:85:da:
         4a:00:f2:b8:8e:63:77:1e:51:06:fe:0e:05:a2:fa:bb:9a:05:
         90:52:33:d9:a9:e6:7d:f5:2a:ee:ce:ee:a0:4a:d3:4f:35:ea:
         84:a7:4a:02:c9:4d:73:62:eb:74:cc:e5:d0:ff:76:42:60:11:
         72:33:3a:21:44:51:4c:29:58:70:4f:cb:83:78:73:11:f6:14:
         e9:c8:47:76:53:f4:5f:df:43:4c:2f:f3:37:08:36:6c:84:f1:
         76:38:98:e9:6b:cb:9a:a5:61:cc:59:5b:c9:80:1e:ce:dc:f4:
         7f:16:4d:45:76:ea:c6:1a:21:b7:07:05:53:ff:30:22:24:0f:
         69:ba:ce:8a:a4:d0:7f:14:ce:6f:4f:48:20:6d:a9:27:6a:0a:
         b0:d3:69:bf:df:01:ac:f8:81:b5:cd:9c:7b:d6:de:a5:4d:ff:
         d4:8a:22:db:3d:59:73:d9:67:0c:37:1e:61:6e:1c:e7:5d:cc:
         bb:f2:91:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:53:48 2025 by rpki-client