Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/04525e4f-2d87-3427-9319-d137e4a382fa.roa
File:                     04525e4f-2d87-3427-9319-d137e4a382fa.roa (raw, json)
Hash identifier:          ccy3cKsVepAi/p5UBUmH7UlGYlZtH4otVGEiLtcWws8=
Subject key identifier:   B9:1C:68:EE:BC:6D:4A:21:BE:47:96:EF:71:47:3D:F5:7B:46:7E:D0
Certificate issuer:       /CN=ccfe663c-8878-4cc0-a772-17e76a493040
Certificate serial:       010D0C9F4328584B477C9DBCE6BC3C331A461940
Authority key identifier: FF:62:FA:82:57:51:D3:39:FF:4E:2C:90:21:55:BE:D4:A8:D8:DE:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/04525e4f-2d87-3427-9319-d137e4a382fa.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     7018
IP address blocks:        206.121.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/ccfe663c-8878-4cc0-a772-17e76a493040.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/ccfe663c-8878-4cc0-a772-17e76a493040.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:9d:bc:e6:bc:3c:33:1a:46:19:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccfe663c-8878-4cc0-a772-17e76a493040
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=38fc76b8-2591-4ccc-a48e-29e15cd99262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a9:b4:4e:d6:13:b9:71:eb:ea:f4:6c:e0:74:
                    1b:32:71:a6:14:1c:f1:ff:84:2d:a5:71:60:8d:6e:
                    c2:52:dd:5b:e4:d0:a3:d7:eb:f4:f7:8f:04:d0:87:
                    15:f7:29:4e:0e:d4:fb:98:d0:46:10:de:e2:8d:8e:
                    9c:d0:61:65:67:db:aa:47:f9:6a:bf:0d:9d:5e:90:
                    94:a2:40:06:a5:c0:9a:5a:09:fa:75:5e:75:39:6d:
                    75:41:c3:1f:9b:f0:3e:fb:ce:cd:93:a9:2e:32:bb:
                    81:4e:2d:6a:02:09:63:f9:29:c1:76:d8:4e:23:b4:
                    db:69:76:69:16:65:4c:e8:ab:19:ef:59:27:af:b0:
                    58:32:45:5a:ec:8e:92:59:90:18:44:ff:f4:d1:f1:
                    f3:ba:fa:3f:70:5e:5d:15:92:b1:05:c1:d0:ca:75:
                    fb:17:dc:41:8f:c2:03:21:f9:cc:d3:ab:c7:f3:90:
                    8b:7a:fb:4f:81:af:25:a2:11:68:20:5d:d7:f7:ef:
                    9b:4c:69:c2:6e:52:bb:5c:e3:7f:81:72:44:13:23:
                    b9:3b:e0:c9:42:ef:11:92:25:09:40:e5:34:fa:8f:
                    c2:2a:6d:87:0a:d3:b1:a2:51:09:77:30:3b:c1:2c:
                    96:05:c4:4c:9c:a2:67:c9:f8:c9:c2:f9:8a:c9:94:
                    14:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:1C:68:EE:BC:6D:4A:21:BE:47:96:EF:71:47:3D:F5:7B:46:7E:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/04525e4f-2d87-3427-9319-d137e4a382fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/ccfe663c-8878-4cc0-a772-17e76a493040.crl

            X509v3 Authority Key Identifier:
                keyid:FF:62:FA:82:57:51:D3:39:FF:4E:2C:90:21:55:BE:D4:A8:D8:DE:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.121.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:4e:ed:6c:f3:7a:f3:07:fb:b4:55:ee:b9:e1:22:3e:03:0c:
         5d:cf:10:ed:f0:8a:2c:47:7b:49:f8:84:b7:b3:57:ac:3a:ab:
         66:f1:10:85:17:29:82:d1:3f:fd:75:91:f8:b8:80:48:80:99:
         0c:89:a9:9c:c8:9e:fa:60:fe:86:63:57:c1:92:94:2a:e1:58:
         67:40:ed:9e:a4:cd:8c:6e:5c:ad:71:ab:38:9c:d7:31:72:8b:
         ad:cc:09:ad:f2:71:e0:1b:23:e7:25:cf:7e:c8:9b:95:38:40:
         18:1a:76:c0:7b:31:d9:79:86:62:12:3d:4a:c1:57:aa:cd:6e:
         8e:ce:9b:16:c7:8c:94:71:7b:ae:f7:c4:b4:eb:e5:fb:ee:20:
         3d:f8:a3:d3:8a:4a:c3:f4:90:0d:1d:06:84:21:51:34:bf:d1:
         23:9d:80:d9:c5:f4:81:58:eb:b8:e9:bf:be:3e:34:be:76:a1:
         9b:df:1c:ce:90:ec:e3:ee:58:43:54:05:78:65:dc:a0:ea:af:
         9c:e6:42:b9:be:e9:dc:aa:5c:5d:2f:de:91:df:9a:9f:f3:ea:
         98:35:ca:ea:48:4f:c1:04:53:fe:8f:07:af:c0:fd:2b:35:93:
         a8:1c:87:56:8e:b2:a0:35:89:54:ce:e9:7b:98:c0:8a:65:b3:
         97:0b:2e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:27:55 2025 by rpki-client