Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25/18085e4c-06d9-3646-a69d-aded2ef7ca30.roa
File:                     18085e4c-06d9-3646-a69d-aded2ef7ca30.roa (raw, json)
Hash identifier:          4L9qHKGHJDHn61ykxFrlr+x85n2VaZD5VujUUBrXlFE=
Subject key identifier:   6B:B0:B0:95:B2:7E:DD:DE:36:0D:D6:D1:72:26:9D:A3:92:F9:BB:85
Certificate issuer:       /CN=fb2256ec-ce11-47ff-92a6-4ba188570a25
Certificate serial:       010D0C9F4328584B8BE2253DA87844EA62EB30C0
Authority key identifier: 38:F4:1F:2B:B5:40:90:F4:90:62:3B:C6:F4:BD:8D:B3:37:69:0C:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25/18085e4c-06d9-3646-a69d-aded2ef7ca30.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     22711
IP address blocks:        206.83.176.0/20 maxlen: 24
                          2620:116:f000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25/fb2256ec-ce11-47ff-92a6-4ba188570a25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25/fb2256ec-ce11-47ff-92a6-4ba188570a25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:25:3d:a8:78:44:ea:62:eb:30:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb2256ec-ce11-47ff-92a6-4ba188570a25
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=4f38498f-b5f5-4730-afaf-36a4b49ef180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7d:50:36:50:8e:e0:29:97:8b:1d:00:0a:92:
                    91:66:a9:af:2a:a3:0a:35:39:af:87:0e:ff:68:06:
                    6a:61:c8:62:77:b5:3d:72:cd:7d:b6:54:3a:64:46:
                    ad:0f:10:a5:7c:35:87:6f:ba:5d:ea:4e:7f:57:94:
                    9f:1b:cd:33:7b:7c:3b:b1:c8:36:9f:96:0c:73:30:
                    b3:6d:23:79:f3:2d:3a:3e:06:ca:d5:28:43:ef:58:
                    8b:9b:b8:d1:0c:30:0f:9e:7a:75:67:19:eb:0e:35:
                    a4:aa:5e:65:a8:20:f4:78:32:fb:70:00:d5:76:14:
                    f6:24:32:d3:e9:ef:37:75:3c:cc:2e:95:8b:5b:c2:
                    5c:b8:63:aa:13:6e:44:d6:d0:d4:a0:93:12:33:c3:
                    d2:20:99:3a:76:a8:28:be:ac:a4:ea:be:ef:50:78:
                    7b:0e:2b:55:91:9d:5b:40:42:b0:e5:17:78:50:52:
                    3d:43:42:d1:9f:7a:d7:86:ed:19:bb:ee:e3:c5:50:
                    de:aa:1a:b2:0b:de:9a:12:91:9d:49:8a:1d:f5:6f:
                    eb:b8:54:e7:4b:58:6a:32:58:86:64:70:d4:b8:84:
                    5e:f3:ac:db:00:b3:8d:c0:ca:b0:df:2c:f7:19:b5:
                    fc:45:4f:9b:70:f8:25:3e:15:aa:ee:97:95:3c:03:
                    e1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B0:B0:95:B2:7E:DD:DE:36:0D:D6:D1:72:26:9D:A3:92:F9:BB:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25/18085e4c-06d9-3646-a69d-aded2ef7ca30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25/fb2256ec-ce11-47ff-92a6-4ba188570a25.crl

            X509v3 Authority Key Identifier:
                keyid:38:F4:1F:2B:B5:40:90:F4:90:62:3B:C6:F4:BD:8D:B3:37:69:0C:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.83.176.0/20
                IPv6:
                  2620:116:f000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:11:49:aa:de:65:59:31:31:49:37:1e:cf:92:20:f5:b8:8e:
         23:d6:7b:ab:a2:fe:f7:e2:6d:c0:19:a1:51:c3:2d:0f:61:05:
         b1:3b:6e:b5:c0:3c:78:84:22:9e:29:18:e3:90:98:56:78:b9:
         ea:54:4f:a5:18:19:e5:7f:3a:2e:96:d6:3b:ab:f9:58:34:49:
         b2:57:a0:dd:82:33:f1:c3:36:2f:4a:fe:e5:85:b7:95:f8:c2:
         a9:47:4c:c8:e9:5e:15:ce:6c:87:bd:7b:44:03:41:9e:8e:ca:
         60:01:08:4e:f8:54:e9:27:f8:32:a9:72:6e:83:67:f0:12:a3:
         29:de:1b:a0:32:3f:b4:69:a5:10:48:b7:65:08:ba:cb:78:34:
         1f:07:4f:52:40:3f:3e:c3:53:85:1f:c7:42:54:26:40:f3:82:
         e8:80:1f:79:1a:a8:09:a9:13:e8:8e:2c:0b:3a:4a:af:61:07:
         08:58:82:ec:02:14:ae:49:13:9b:e1:87:aa:02:3c:59:57:0a:
         05:9d:c5:b6:01:6b:07:d0:29:a7:ad:52:8b:de:56:32:db:39:
         83:3f:24:f6:61:c7:24:29:77:72:01:46:75:4f:96:f5:2e:e9:
         d3:90:8b:fc:5d:fc:cd:95:4a:ec:73:84:de:96:23:aa:7f:55:
         fb:92:36:1b
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEuL4iU9qHhE6mLrMMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmIyMjU2ZWMtY2UxMS00N2ZmLTkyYTYtNGJhMTg4NTcw
YTI1MB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk
NGYzODQ5OGYtYjVmNS00NzMwLWFmYWYtMzZhNGI0OWVmMTgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnX1QNlCO4CmXix0ACpKRZqmvKqMKNTmvhw7/
aAZqYchid7U9cs19tlQ6ZEatDxClfDWHb7pd6k5/V5SfG80ze3w7scg2n5YMczCz
bSN58y06PgbK1ShD71iLm7jRDDAPnnp1ZxnrDjWkql5lqCD0eDL7cADVdhT2JDLT
6e83dTzMLpWLW8JcuGOqE25E1tDUoJMSM8PSIJk6dqgovqyk6r7vUHh7DitVkZ1b
QEKw5Rd4UFI9Q0LRn3rXhu0Zu+7jxVDeqhqyC96aEpGdSYod9W/ruFTnS1hqMliG
ZHDUuIRe86zbALONwMqw3yz3GbX8RU+bcPglPhWq7peVPAPhewIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFGuwsJWyft3eNg3W0XImnaOS+buFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mYjIy
NTZlYy1jZTExLTQ3ZmYtOTJhNi00YmExODg1NzBhMjUvMTgwODVlNGMtMDZkOS0z
NjQ2LWE2OWQtYWRlZDJlZjdjYTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZmIyMjU2ZWMtY2UxMS00N2ZmLTky
YTYtNGJhMTg4NTcwYTI1L2ZiMjI1NmVjLWNlMTEtNDdmZi05MmE2LTRiYTE4ODU3
MGEyNS5jcmwwHwYDVR0jBBgwFoAUOPQfK7VAkPSQYjvG9L2NszdpDEQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9mYjIyNTZlYy1jZTExLTQ3ZmYtOTJhNi00YmEx
ODg1NzBhMjUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQEzlOwMA4E
AgACMAgDBgAmIAEW8DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDAEUmq3mVZMTFJNx7PkiD1uI4j1nurov73
4m3AGaFRwy0PYQWxO261wDx4hCKeKRjjkJhWeLnqVE+lGBnlfzoultY7q/lYNEmy
V6DdgjPxwzYvSv7lhbeV+MKpR0zI6V4VzmyHvXtEA0GejspgAQhO+FTpJ/gyqXJu
g2fwEqMp3hugMj+0aaUQSLdlCLrLeDQfB09SQD8+w1OFH8dCVCZA84LogB95GqgJ
qRPojiwLOkqvYQcIWILsAhSuSROb4YeqAjxZVwoFncW2AWsH0CmnrVKL3lYy2zmD
PyT2YcckKXdyAUZ1T5b1LunTkIv8XfzNlUrsc4TeliOqf1X7kjYb
-----END CERTIFICATE-----
Generated at Mon Oct 20 22:21:36 2025 by rpki-client