Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/010f2d76-bde1-3a42-bf1e-ef12d3d55022.roa
File:                     010f2d76-bde1-3a42-bf1e-ef12d3d55022.roa (raw, json)
Hash identifier:          mlDmySAjyVg2ehCtv2TwzY4iNe2yLB8Npji1gSQMXL8=
Subject key identifier:   00:E5:E8:BA:0A:53:8B:DB:5B:20:C6:8C:71:10:6F:A0:D7:DB:1C:04
Certificate issuer:       /CN=1e268aaa-6306-4988-99f7-d5802a67b577
Certificate serial:       010D0C9F4328584B4AF118E908E1464E3DFF8018
Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/010f2d76-bde1-3a42-bf1e-ef12d3d55022.roa
Signing time:             Tue 23 Sep 2025 18:43:18 +0000
ROA not before:           Tue 23 Sep 2025 18:43:18 +0000
ROA not after:            Mon 22 Dec 2025 19:43:18 +0000
asID:                     14593
IP address blocks:        173.250.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4a:f1:18:e9:08:e1:46:4e:3d:ff:80:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577
        Validity
            Not Before: Sep 23 18:43:18 2025 GMT
            Not After : Dec 22 19:43:18 2025 GMT
        Subject: CN=67908b3a-6c85-4972-84c4-f1d91e132604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b3:62:19:4c:bc:49:39:66:d9:55:18:0e:a9:
                    02:68:ed:71:5a:19:07:28:63:3c:6a:9e:c9:2a:b1:
                    44:ff:d5:df:1d:db:1b:e6:cb:75:b0:51:14:76:11:
                    8b:19:74:08:e2:ab:76:1a:aa:bc:b9:13:61:db:7a:
                    c1:d1:04:05:91:3e:56:bc:1f:89:a4:c9:77:ed:54:
                    e6:a5:fb:75:0e:98:82:67:1d:9c:1f:8e:a8:09:a3:
                    98:33:c5:1e:b1:b8:92:f5:01:98:13:c2:4e:f0:d8:
                    c2:5d:92:e9:d7:86:ca:d8:f2:5a:1e:01:6f:0d:55:
                    5f:08:b6:72:91:19:fd:17:21:79:e4:d3:fd:ba:5d:
                    e7:a1:1a:5c:1c:43:5e:86:24:5f:ac:65:64:ed:0b:
                    ac:17:9d:2f:7e:62:05:87:4a:f3:e6:24:20:f3:4e:
                    e7:2f:b4:e9:a3:91:b8:dd:5e:3e:25:14:93:53:a6:
                    14:18:b0:9d:1f:d8:13:3d:38:4d:1d:f9:32:fa:df:
                    00:4d:2f:77:4f:8b:0b:bf:0d:61:ce:30:50:4d:a8:
                    46:a5:3e:27:19:0a:b6:d0:c6:f7:87:d2:cd:33:a7:
                    6b:c2:d3:9d:ba:a4:62:ae:89:85:53:0f:66:eb:ad:
                    4b:3e:92:54:db:e2:b3:54:8d:25:d2:3c:c7:7e:42:
                    dc:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E5:E8:BA:0A:53:8B:DB:5B:20:C6:8C:71:10:6F:A0:D7:DB:1C:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/010f2d76-bde1-3a42-bf1e-ef12d3d55022.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl

            X509v3 Authority Key Identifier:
                keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.250.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:d1:c7:83:10:3a:12:d6:fa:48:74:a7:35:e3:b9:24:49:6a:
         a2:d3:12:4f:95:0e:3b:43:9d:4d:ef:c7:89:cf:1e:9d:b0:31:
         81:44:c2:41:ca:39:40:16:2a:0e:39:f5:5b:76:67:2a:5e:dc:
         36:d5:c8:b4:1d:39:a4:6b:ae:f3:8b:af:a6:7d:85:8b:8f:18:
         14:c5:b4:bd:3f:1e:76:7e:a1:cd:2a:96:73:6a:38:85:64:8b:
         6b:3d:62:5e:50:b7:4b:86:09:77:ca:fc:4d:e1:07:d0:cd:57:
         e0:e6:e1:e1:21:04:06:4c:63:9a:bc:1f:1b:88:c5:dd:8a:31:
         45:bf:6e:3a:30:49:cc:df:3f:be:f5:d2:ea:5a:07:7c:43:48:
         ef:20:17:35:ba:49:9f:ed:6a:92:bb:3f:31:97:53:f6:c2:9a:
         80:7c:ac:c5:f3:cd:c1:48:c2:0b:a4:6c:a2:8f:62:99:f9:60:
         1a:7d:45:d6:da:9e:a0:fb:2f:e6:18:f7:1c:7c:7d:e7:93:5b:
         bc:3a:05:77:ed:2d:e0:f4:c0:2a:cd:2e:d2:e9:b8:b1:b7:46:
         5e:2f:cc:0f:2f:df:db:65:ae:17:6e:f2:60:67:b5:8c:08:14:
         29:e0:6d:33:ea:be:f2:b7:ac:ac:e5:14:90:74:7f:2e:a6:63:
         6f:1f:eb:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:07:37 2025 by rpki-client