Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b5c9e51-e636-4d9a-b58a-74fcd4db9457/cc6903d8-15ba-38fa-8f09-80715d944951.roa
File:                     cc6903d8-15ba-38fa-8f09-80715d944951.roa (raw, json)
Hash identifier:          cmkvkOJDUtAa/D1JZRlPbRTfM7c04igq5wopyoAcje8=
Subject key identifier:   5A:5A:E3:4D:AA:69:C4:C1:E9:05:B1:26:92:F3:68:A1:DB:C0:6E:9B
Certificate issuer:       /CN=6b5c9e51-e636-4d9a-b58a-74fcd4db9457
Certificate serial:       010D0C9F4328584B1AD172D289D241D0E64CC880
Authority key identifier: 69:FD:25:4D:A3:9A:58:BF:6B:88:64:0B:57:9F:A6:39:E2:DB:E9:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b5c9e51-e636-4d9a-b58a-74fcd4db9457.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b5c9e51-e636-4d9a-b58a-74fcd4db9457/cc6903d8-15ba-38fa-8f09-80715d944951.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     8111
IP address blocks:        129.173.0.0/16 maxlen: 16
                          134.190.0.0/16 maxlen: 16
                          192.75.96.0/24 maxlen: 24
                          192.75.97.0/24 maxlen: 24
                          192.75.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b5c9e51-e636-4d9a-b58a-74fcd4db9457/6b5c9e51-e636-4d9a-b58a-74fcd4db9457.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b5c9e51-e636-4d9a-b58a-74fcd4db9457/6b5c9e51-e636-4d9a-b58a-74fcd4db9457.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b5c9e51-e636-4d9a-b58a-74fcd4db9457.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:72:d2:89:d2:41:d0:e6:4c:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b5c9e51-e636-4d9a-b58a-74fcd4db9457
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=b1573ec3-f755-4dc0-9ed1-41d46734d815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:66:13:c5:8c:95:e6:ef:53:53:20:29:6e:8d:
                    a6:f3:5f:96:69:ad:75:08:c9:a6:c8:50:e3:73:fe:
                    3f:09:09:f1:91:a5:63:bc:d6:83:ef:60:90:57:ec:
                    30:e8:f1:64:4e:c1:0e:4c:c7:fc:2d:ca:ab:3e:27:
                    27:ea:48:61:60:37:c8:92:4c:57:80:c0:03:c1:e1:
                    5f:43:07:e5:af:14:c8:34:f8:f0:4d:3b:ab:ab:bc:
                    2f:dc:d3:4d:ac:ff:db:d5:97:54:2d:f6:e8:d9:c1:
                    2e:60:d0:e3:2c:5a:a2:04:39:9d:68:53:4d:94:8b:
                    be:c2:af:50:78:b1:4a:06:6a:b9:8b:3f:26:ee:8a:
                    2b:a9:95:68:5a:2d:04:a3:f6:b7:00:9e:8a:c0:02:
                    53:7d:c0:b5:f4:bc:87:49:24:b8:82:d4:2f:4d:a3:
                    19:10:7c:ae:35:27:e7:62:7e:61:96:4a:6a:68:04:
                    00:85:15:7b:f3:cd:b6:4c:c2:07:e2:d4:bd:b3:55:
                    42:d5:35:df:b2:60:d8:05:c5:a6:cc:ca:3e:8a:15:
                    72:9a:b5:66:62:f2:18:40:00:d0:19:b0:52:dc:ff:
                    6e:a2:0b:02:23:5f:d1:22:eb:25:f5:71:91:1a:d8:
                    50:fe:c6:45:9d:03:ee:5c:a3:03:f1:20:e5:7b:5d:
                    80:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:5A:E3:4D:AA:69:C4:C1:E9:05:B1:26:92:F3:68:A1:DB:C0:6E:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b5c9e51-e636-4d9a-b58a-74fcd4db9457/cc6903d8-15ba-38fa-8f09-80715d944951.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b5c9e51-e636-4d9a-b58a-74fcd4db9457/6b5c9e51-e636-4d9a-b58a-74fcd4db9457.crl

            X509v3 Authority Key Identifier:
                keyid:69:FD:25:4D:A3:9A:58:BF:6B:88:64:0B:57:9F:A6:39:E2:DB:E9:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b5c9e51-e636-4d9a-b58a-74fcd4db9457.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.173.0.0/16
                  134.190.0.0/16
                  192.75.96.0/23
                  192.75.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:85:80:e1:33:30:38:9e:94:3a:5f:a1:42:14:35:98:1f:b2:
         9e:28:46:8e:29:9f:11:55:10:2e:27:23:20:3a:01:b9:5a:92:
         65:86:7a:81:ad:56:ca:b6:28:0a:2e:18:44:14:a5:19:2a:1a:
         0b:19:9b:92:e7:b9:b0:90:ac:89:16:09:2a:7a:c1:d8:2e:a4:
         ba:ee:43:bf:a3:c2:52:e9:81:39:23:20:58:85:ee:1f:33:51:
         5b:72:ba:33:10:26:9c:38:44:77:94:4d:d7:67:ce:3c:b2:8f:
         50:ac:02:ba:e2:17:50:c3:72:ef:02:9d:e6:b2:d4:15:70:a7:
         3d:8c:4f:9e:14:b8:0b:78:75:93:77:5c:d1:ab:57:36:ef:dd:
         b2:1b:a8:66:38:c9:c5:61:85:a0:d6:9e:b3:77:29:af:b7:83:
         e5:67:c8:27:76:3a:c4:f2:2a:13:fb:46:c9:86:3f:dc:69:07:
         6b:bc:db:aa:9a:83:55:e1:e6:c5:18:a8:82:90:46:b0:f7:97:
         44:1f:71:57:d1:4d:f8:6d:9d:c3:33:08:14:b7:d5:d3:f4:11:
         ec:32:a5:2e:ff:0e:af:19:89:ef:aa:e3:ee:ad:fa:70:d2:be:
         9d:ab:88:7b:e1:ef:7e:67:58:f2:c0:e8:d6:51:32:e0:23:81:
         a9:13:2f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 01:33:05 2025 by rpki-client