Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/a5dac968-7289-3f6a-92b6-17627ddae8e3.roa
File:                     a5dac968-7289-3f6a-92b6-17627ddae8e3.roa (raw, json)
Hash identifier:          CdYzzC2jfRBsR7CJjgJH3X87bqZZkj1R6JMK0cpQI5w=
Subject key identifier:   2F:01:CA:4B:A0:E8:32:2D:A8:32:9D:3E:CB:89:75:69:F8:04:BC:B3
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584B23319B2A42D56CE753A4A600
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/a5dac968-7289-3f6a-92b6-17627ddae8e3.roa
Signing time:             Tue 09 Sep 2025 13:00:41 +0000
ROA not before:           Tue 09 Sep 2025 13:00:41 +0000
ROA not after:            Mon 08 Dec 2025 14:00:41 +0000
asID:                     6922
IP address blocks:        206.254.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:23:31:9b:2a:42:d5:6c:e7:53:a4:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Sep  9 13:00:41 2025 GMT
            Not After : Dec  8 14:00:41 2025 GMT
        Subject: CN=27bfdee5-d564-417b-9020-15fa39afa89e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:92:3d:5d:1c:84:37:5a:49:16:95:58:f0:55:
                    55:14:55:3c:ab:5f:c8:75:a3:13:39:d3:b1:1d:0b:
                    06:4e:ba:c0:41:e9:68:20:8e:8d:62:cb:da:0f:c4:
                    a9:a0:6a:07:1c:71:d2:f0:a9:d8:78:60:7d:3f:19:
                    0d:9a:e9:a0:3e:a2:60:b7:f4:7e:a7:bb:29:1c:5b:
                    5a:e8:a6:d9:97:f7:90:6a:0d:2b:12:70:50:5b:1c:
                    c3:6d:30:b1:43:80:db:6e:dc:0a:91:e6:e6:d3:3b:
                    df:0c:03:eb:97:16:87:87:9c:99:1d:28:2b:1a:61:
                    d5:0d:64:a0:c7:28:29:5a:5d:de:bc:d3:ae:1c:e9:
                    ae:74:9b:6d:c5:86:52:91:39:1b:27:eb:6e:07:23:
                    27:12:12:a5:d0:87:e2:23:38:1b:b8:53:36:c8:b7:
                    fd:7e:68:7b:58:da:33:0c:5a:5e:b7:20:3d:2f:41:
                    1b:77:cd:ba:e3:48:64:f5:95:d8:76:9f:32:2a:71:
                    fb:57:38:c1:83:0b:9f:e6:13:1c:57:6b:61:68:7d:
                    6e:3a:b9:34:42:bc:00:1c:e4:00:15:11:9f:5b:1d:
                    10:69:7d:5a:ad:9c:ea:68:ac:e4:5f:84:c9:d8:37:
                    2f:82:b5:ab:c1:aa:a2:98:ca:9e:67:45:87:d7:60:
                    52:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:01:CA:4B:A0:E8:32:2D:A8:32:9D:3E:CB:89:75:69:F8:04:BC:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/a5dac968-7289-3f6a-92b6-17627ddae8e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.254.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:b7:a4:f2:f3:d6:1f:cd:be:b9:a9:ae:ec:32:44:b1:6e:3c:
         a4:4d:79:74:0b:78:20:75:54:28:75:dd:3e:fe:87:ce:67:ee:
         43:55:bf:0b:df:4d:45:72:ee:74:82:b7:e0:6c:3b:b8:07:20:
         f2:e0:59:9b:7a:77:e9:59:7f:22:4f:a9:4e:c4:0e:3d:66:8e:
         a5:e6:1f:3e:0e:9c:60:46:c4:08:3e:b9:5d:4a:9e:48:ca:5f:
         15:d0:cc:98:fa:c5:5b:5f:57:29:7f:2a:1f:30:9d:0d:45:fd:
         eb:41:d5:be:f9:e8:43:7e:e0:95:12:28:5b:62:7d:77:2b:04:
         d2:76:c6:e4:fa:1f:ae:9f:78:55:b9:bf:a3:6e:df:43:68:4e:
         44:8a:d3:2d:43:9e:0a:29:df:a7:8e:a4:3c:fe:b7:08:d2:d0:
         c2:77:03:37:80:16:9e:d4:77:e2:16:a1:d3:72:7b:bd:14:7d:
         27:49:8e:c9:12:43:b8:1d:de:93:0b:20:42:67:0a:e4:3b:67:
         6b:76:ac:d3:ad:94:19:65:ab:46:76:ce:bd:21:18:43:b5:63:
         22:c7:5c:af:d4:86:a3:2d:af:4b:b3:74:d5:a2:09:b2:0b:bc:
         2d:e3:0a:0b:74:94:42:d4:91:f0:13:e0:67:b2:10:8e:a9:05:
         b8:10:b7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:02:25 2025 by rpki-client