Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25/bb5a7ca1-3331-331a-bc29-294398077a39.roa
File:                     bb5a7ca1-3331-331a-bc29-294398077a39.roa (raw, json)
Hash identifier:          L2K1KnPhgpP/T3prfbMDxzGKbEJsN3VV/Q8Zed7qZrA=
Subject key identifier:   78:DC:1B:A7:BA:7B:47:B7:ED:0B:ED:A7:39:F0:D7:88:F0:C7:C2:B0
Certificate issuer:       /CN=fb2256ec-ce11-47ff-92a6-4ba188570a25
Certificate serial:       010D0C9F4328584B8BE22528823364791A37CEC0
Authority key identifier: 38:F4:1F:2B:B5:40:90:F4:90:62:3B:C6:F4:BD:8D:B3:37:69:0C:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25/bb5a7ca1-3331-331a-bc29-294398077a39.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     14157
IP address blocks:        206.83.176.0/20 maxlen: 24
                          2620:116:f000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25/fb2256ec-ce11-47ff-92a6-4ba188570a25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25/fb2256ec-ce11-47ff-92a6-4ba188570a25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:25:28:82:33:64:79:1a:37:ce:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb2256ec-ce11-47ff-92a6-4ba188570a25
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=0a0fe0e5-17fe-4a9e-99db-6ee88c7aee5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f3:da:b4:c3:c6:59:31:a6:74:1c:19:7e:99:
                    12:4c:6d:3f:62:58:d5:89:d7:3f:b9:70:90:85:cd:
                    55:4c:20:05:50:b4:53:f7:b2:20:a0:0b:d1:79:5d:
                    57:fb:aa:83:3c:92:54:35:7d:da:8d:d4:5c:f2:01:
                    10:e5:59:82:de:ce:dc:e2:af:34:79:9d:46:3a:19:
                    61:88:15:9e:19:b1:f2:5b:f6:7f:c0:0c:23:7a:5b:
                    25:1b:7c:6e:7d:eb:a5:31:74:b8:7e:18:92:c1:b9:
                    75:d3:80:77:b1:9d:b8:26:c2:4b:28:66:e0:a0:f7:
                    56:26:18:c4:6b:10:01:eb:24:5d:25:94:5a:73:9e:
                    3c:71:58:67:46:bd:78:ea:a4:fd:a9:13:15:26:ff:
                    f0:b8:fd:c3:cb:e3:37:e6:d6:d3:e5:cd:f7:05:d0:
                    1d:19:e6:85:ad:f2:bd:b4:72:d0:ef:b0:ef:2f:c0:
                    6d:81:b0:6d:fb:02:f1:eb:b7:8d:45:38:40:58:cc:
                    ec:96:37:78:e3:b5:99:dd:6e:a8:86:32:71:1a:54:
                    0d:ae:57:40:9f:63:47:b1:8f:7e:1c:80:27:a1:bd:
                    b7:46:0a:d5:97:2f:4a:69:44:ca:5e:49:46:03:c5:
                    71:fc:53:c3:00:6a:90:e1:b2:43:05:38:99:5b:5c:
                    0d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:DC:1B:A7:BA:7B:47:B7:ED:0B:ED:A7:39:F0:D7:88:F0:C7:C2:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25/bb5a7ca1-3331-331a-bc29-294398077a39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25/fb2256ec-ce11-47ff-92a6-4ba188570a25.crl

            X509v3 Authority Key Identifier:
                keyid:38:F4:1F:2B:B5:40:90:F4:90:62:3B:C6:F4:BD:8D:B3:37:69:0C:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.83.176.0/20
                IPv6:
                  2620:116:f000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:e2:4b:bc:cb:13:72:13:16:94:d7:ba:50:21:c2:ef:60:6d:
         89:fd:59:44:65:0d:cc:b1:56:74:df:6a:4b:3c:f5:95:75:64:
         ad:6f:db:8b:e6:1c:69:07:f7:c1:9e:cc:a4:3c:25:df:3f:84:
         f8:95:91:88:5c:5c:97:6f:97:0d:cc:c1:03:29:db:a4:52:d8:
         a2:56:95:28:39:aa:7d:8c:7e:0d:26:05:12:f7:92:6b:b8:6b:
         19:1b:09:e9:b7:49:f4:8a:bc:73:77:87:02:93:7d:f2:b7:78:
         83:a9:ec:dd:09:56:c9:b4:f4:c6:53:5e:3d:89:4a:6d:48:9a:
         a9:b1:37:72:87:34:15:56:a9:f7:ad:60:5a:f5:ae:06:17:88:
         fd:41:93:d5:54:5f:61:0e:e2:c5:19:10:2d:ed:eb:4d:89:f3:
         84:ad:fb:8a:10:0e:61:52:e1:15:2e:ba:6c:dd:b4:54:00:38:
         36:e1:d8:52:17:a9:49:92:cc:23:7b:c4:7c:a8:81:35:5d:9c:
         d8:00:5b:3c:0b:58:b1:d3:ec:97:ef:3b:47:bc:fe:a1:7c:65:
         c5:3a:88:14:1c:9d:97:6b:37:04:1e:35:b6:4f:56:12:bb:45:
         d2:53:5f:7b:e2:57:06:11:2a:ff:2f:45:1a:50:1c:c6:ae:28:
         45:27:1b:4f
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEuL4iUogjNkeRo3zsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmIyMjU2ZWMtY2UxMS00N2ZmLTkyYTYtNGJhMTg4NTcw
YTI1MB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk
MGEwZmUwZTUtMTdmZS00YTllLTk5ZGItNmVlODhjN2FlZTVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPPatMPGWTGmdBwZfpkSTG0/YljVidc/uXCQ
hc1VTCAFULRT97IgoAvReV1X+6qDPJJUNX3ajdRc8gEQ5VmC3s7c4q80eZ1GOhlh
iBWeGbHyW/Z/wAwjelslG3xufeulMXS4fhiSwbl104B3sZ24JsJLKGbgoPdWJhjE
axAB6yRdJZRac548cVhnRr146qT9qRMVJv/wuP3Dy+M35tbT5c33BdAdGeaFrfK9
tHLQ77DvL8BtgbBt+wLx67eNRThAWMzsljd447WZ3W6ohjJxGlQNrldAn2NHsY9+
HIAnob23RgrVly9KaUTKXklGA8Vx/FPDAGqQ4bJDBTiZW1wNIQIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFHjcG6e6e0e37Qvtpznw14jwx8KwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mYjIy
NTZlYy1jZTExLTQ3ZmYtOTJhNi00YmExODg1NzBhMjUvYmI1YTdjYTEtMzMzMS0z
MzFhLWJjMjktMjk0Mzk4MDc3YTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZmIyMjU2ZWMtY2UxMS00N2ZmLTky
YTYtNGJhMTg4NTcwYTI1L2ZiMjI1NmVjLWNlMTEtNDdmZi05MmE2LTRiYTE4ODU3
MGEyNS5jcmwwHwYDVR0jBBgwFoAUOPQfK7VAkPSQYjvG9L2NszdpDEQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9mYjIyNTZlYy1jZTExLTQ3ZmYtOTJhNi00YmEx
ODg1NzBhMjUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQEzlOwMA4E
AgACMAgDBgAmIAEW8DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBi4ku8yxNyExaU17pQIcLvYG2J/VlEZQ3M
sVZ032pLPPWVdWStb9uL5hxpB/fBnsykPCXfP4T4lZGIXFyXb5cNzMEDKdukUtii
VpUoOap9jH4NJgUS95JruGsZGwnpt0n0irxzd4cCk33yt3iDqezdCVbJtPTGU149
iUptSJqpsTdyhzQVVqn3rWBa9a4GF4j9QZPVVF9hDuLFGRAt7etNifOErfuKEA5h
UuEVLrps3bRUADg24dhSF6lJkswje8R8qIE1XZzYAFs8C1ix0+yX7ztHvP6hfGXF
OogUHJ2XazcEHjW2T1YSu0XSU1974lcGESr/L0UaUBzGrihFJxtP
-----END CERTIFICATE-----
Generated at Tue Oct 21 05:32:27 2025 by rpki-client