Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/6e2bd95c-74fd-3fe6-95fe-3db3f22c8199.roa
File:                     6e2bd95c-74fd-3fe6-95fe-3db3f22c8199.roa (raw, json)
Hash identifier:          xO21k72+iEqQK5zrSC2TyrABlMIX+3V0WGVc8n5ddxs=
Subject key identifier:   8B:36:8D:AC:DB:E2:91:1B:0B:6F:58:D4:4A:91:9A:60:1C:EB:2D:B0
Certificate issuer:       /CN=2c480684-ece9-4dd6-8ec6-0437d826102d
Certificate serial:       010D0C9F4328584AD807A58759A9B8F9951AF680
Authority key identifier: DB:6F:31:8B:7D:79:70:F6:0C:C2:07:20:D2:13:6F:F4:FC:36:55:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/6e2bd95c-74fd-3fe6-95fe-3db3f22c8199.roa
Signing time:             Wed 13 Aug 2025 14:50:46 +0000
ROA not before:           Wed 13 Aug 2025 14:50:46 +0000
ROA not after:            Tue 11 Nov 2025 15:50:46 +0000
asID:                     46616
IP address blocks:        208.114.58.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/2c480684-ece9-4dd6-8ec6-0437d826102d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/2c480684-ece9-4dd6-8ec6-0437d826102d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d8:07:a5:87:59:a9:b8:f9:95:1a:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c480684-ece9-4dd6-8ec6-0437d826102d
        Validity
            Not Before: Aug 13 14:50:46 2025 GMT
            Not After : Nov 11 15:50:46 2025 GMT
        Subject: CN=a31c71b9-abcc-449c-b327-35d3f4d93f3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2b:c9:d5:a4:b7:23:ac:7a:92:3a:91:68:62:
                    bf:4c:14:43:f9:d4:28:98:95:cc:e3:ce:1a:48:cb:
                    2d:6e:8d:76:36:2e:79:9c:46:48:4f:84:48:80:ac:
                    76:03:3c:4f:d3:b1:cc:0e:5f:89:33:76:23:a5:99:
                    23:08:aa:2d:fd:c0:e4:69:0c:de:6e:86:f6:08:0e:
                    82:b5:16:9d:d7:d7:bc:ad:1c:45:2d:51:b8:77:1b:
                    3e:00:c7:26:01:ec:bd:c1:09:ce:b4:86:63:17:b4:
                    a1:97:01:c4:2c:34:9e:dc:a1:33:e4:29:b6:21:91:
                    80:6f:14:65:c2:02:29:3a:27:37:57:d2:2d:47:60:
                    4e:9a:59:62:66:2f:0d:b9:32:7f:79:70:5c:0a:33:
                    f0:6d:a5:c2:2d:03:9e:fc:f8:1a:e7:85:be:25:a4:
                    bf:1c:99:62:39:7f:19:f8:17:db:e1:10:4e:80:1e:
                    ee:16:fd:1c:d1:f7:2a:f6:8d:c5:f3:0d:df:e3:cd:
                    28:74:e5:80:7f:4f:0a:35:9c:f2:0f:23:f6:b5:47:
                    49:c5:1b:d8:dd:af:ac:92:eb:80:7f:dc:da:57:f1:
                    61:92:ca:22:1e:9a:b5:89:08:dc:56:00:26:c6:67:
                    34:84:6e:de:ac:dc:b4:ff:c3:20:d6:b4:12:ca:06:
                    e0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:36:8D:AC:DB:E2:91:1B:0B:6F:58:D4:4A:91:9A:60:1C:EB:2D:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/6e2bd95c-74fd-3fe6-95fe-3db3f22c8199.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/2c480684-ece9-4dd6-8ec6-0437d826102d.crl

            X509v3 Authority Key Identifier:
                keyid:DB:6F:31:8B:7D:79:70:F6:0C:C2:07:20:D2:13:6F:F4:FC:36:55:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.114.58.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:1a:f4:b9:b9:15:b6:b3:1e:41:9d:41:e5:31:d3:34:32:96:
         9f:3f:40:37:8d:30:00:a9:97:c8:39:b6:a8:e9:17:4d:ed:83:
         dd:e0:81:57:56:31:89:38:45:fd:f2:b2:f0:37:f4:3e:a3:fb:
         5e:7a:25:47:da:1c:c8:86:e7:f8:0b:3a:f1:69:0b:06:6a:5e:
         8b:be:c6:9b:53:4d:91:1b:4e:ac:cd:d8:a9:38:00:f6:c7:08:
         c1:36:ec:69:9e:9f:ab:f9:cb:9b:58:15:c7:32:fe:21:d9:3b:
         3e:77:c9:57:e6:c2:55:b9:1f:6a:d5:49:9d:62:95:1f:6d:7e:
         11:77:25:03:cf:85:13:e5:5d:84:ac:a1:d3:21:e9:ce:9b:ea:
         08:58:2c:ef:8c:9c:3a:36:25:bb:1f:23:8a:45:06:6f:1b:e7:
         51:a1:bb:bc:fb:74:85:da:c0:c6:3f:f4:fa:03:bd:4b:0e:0d:
         c3:b0:80:ff:ee:23:58:8b:f5:32:c5:8f:92:f8:27:22:1a:c3:
         0e:03:b7:66:94:03:21:8b:e0:d4:12:5e:d0:20:6f:de:68:13:
         13:2d:1e:51:76:f0:bd:63:38:f9:cc:79:4e:30:95:a0:0b:f2:
         81:0b:0c:aa:ed:23:3c:c4:80:c4:61:0e:4d:21:d2:69:28:c0:
         77:de:33:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:07:21 2025 by rpki-client