Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/05ca5ecc-ab51-37b3-bb62-559337d0d389.roa
File:                     05ca5ecc-ab51-37b3-bb62-559337d0d389.roa (raw, json)
Hash identifier:          S8/hSNz3V56hL5s5extNyYoRwYVcVFhVdaoG3Nl93f8=
Subject key identifier:   1F:EC:77:A2:05:AD:E4:BB:F6:A1:CD:12:5D:ED:D9:41:E5:53:0A:0C
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A7A4B37C2D91647069FC12EB0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/05ca5ecc-ab51-37b3-bb62-559337d0d389.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     852
IP address blocks:        207.6.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:37:c2:d9:16:47:06:9f:c1:2e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=ac45ced7-a276-42c4-b9ea-1b80f9c04fab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ac:20:a4:a3:59:d2:ef:c5:1c:c9:90:e2:12:
                    93:cb:47:54:c7:65:5a:60:f3:f7:d4:b5:91:44:83:
                    64:72:55:a2:c3:c8:a8:64:2f:b0:19:62:14:9d:6e:
                    e0:35:66:8f:a4:a8:04:ac:56:44:61:f5:f7:05:4d:
                    71:c0:40:1c:d8:d7:9d:15:4c:21:f4:c9:f1:23:ba:
                    ab:4e:c4:6a:79:f7:0c:07:5f:62:0f:37:9e:b4:7a:
                    6c:39:bc:04:0f:34:35:40:45:63:8f:7a:f0:bf:dd:
                    40:30:fa:f7:96:46:b3:60:63:b4:84:31:ba:86:f5:
                    86:80:8d:17:e6:d7:7d:a1:57:62:b8:97:3d:36:98:
                    b5:21:5e:1b:08:f5:68:69:26:eb:6f:32:17:35:46:
                    2b:16:0e:63:bc:3c:b2:df:6a:b7:56:17:80:f0:91:
                    fc:47:2b:60:e7:61:77:43:6f:44:f8:fe:bc:d4:87:
                    b0:50:5c:58:a1:4d:af:cd:46:01:b7:f0:03:11:c9:
                    87:86:9e:b3:e1:33:90:2f:3e:c3:1d:df:09:11:68:
                    8d:f1:9e:23:84:16:27:56:ab:ca:9f:55:8e:ae:e0:
                    5c:b1:f7:9d:b3:39:ac:45:5b:5c:62:75:fa:48:b1:
                    32:24:81:9f:14:ed:10:d4:92:72:40:9c:10:ed:c0:
                    53:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:EC:77:A2:05:AD:E4:BB:F6:A1:CD:12:5D:ED:D9:41:E5:53:0A:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/05ca5ecc-ab51-37b3-bb62-559337d0d389.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.6.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:a0:34:f8:46:b7:0f:51:e0:7c:62:ad:a3:97:49:89:87:cd:
         19:c7:b7:2c:fb:ac:60:0d:14:32:12:79:a2:7f:42:3f:d1:cb:
         a3:60:58:6c:31:4f:9f:34:a0:64:cc:19:95:d7:4d:ee:a2:6d:
         1a:b8:2a:32:06:0a:c5:d4:40:54:c8:dd:61:d0:5d:a2:70:ba:
         0b:92:51:6b:f9:33:f4:6d:29:fa:1d:89:40:f3:04:09:6c:5a:
         23:c9:5d:62:fe:62:91:4a:8d:e0:fa:ca:76:7a:bb:cd:0a:33:
         94:b6:95:ed:2e:1f:ae:cd:3e:0e:23:46:0a:00:b3:b2:c5:b1:
         36:65:ec:98:44:73:ed:1b:24:99:29:e1:46:6a:ac:ae:29:65:
         cc:9b:7e:7d:b3:d9:21:4d:25:63:30:23:2e:ef:e5:b9:7c:f9:
         08:0f:aa:a0:78:4d:24:15:45:17:e9:25:f4:13:76:af:a4:fb:
         ec:8c:c0:82:64:05:61:9b:a8:fe:d0:0e:0e:76:a5:da:5a:80:
         12:8b:60:e4:3a:29:3c:6e:46:94:99:1e:e9:a1:d7:fb:5f:35:
         76:f3:4d:9d:61:58:86:9b:42:c5:6c:82:0f:f1:5d:f7:8f:ad:
         9b:22:32:bb:6e:6f:99:65:35:c2:bd:fb:8f:5b:51:19:2b:fb:
         db:c4:27:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 19:38:00 2025 by rpki-client