Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/ed935b2e-5a37-32c2-bedf-bf176e74c567.roa
File:                     ed935b2e-5a37-32c2-bedf-bf176e74c567.roa (raw, json)
Hash identifier:          7mnIk8/jfauA26XMYsPazBo8L4747Ey9xAbPHgvRzi4=
Subject key identifier:   35:56:94:0E:63:57:2F:EA:C8:EB:8D:22:17:E7:4B:5E:7D:C5:51:EC
Certificate issuer:       /CN=6406ab50-470a-4f0f-ba5e-7500a8b97cd4
Certificate serial:       010D0C9F4328584B758C959A6C420C7EA5FE2A60
Authority key identifier: B7:0E:58:89:ED:AB:C8:83:04:25:60:8A:16:D1:DC:4D:3D:10:42:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/ed935b2e-5a37-32c2-bedf-bf176e74c567.roa
Signing time:             Thu 09 Oct 2025 01:00:28 +0000
ROA not before:           Thu 09 Oct 2025 01:00:28 +0000
ROA not after:            Wed 07 Jan 2026 02:00:28 +0000
asID:                     400628
IP address blocks:        206.227.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:8c:95:9a:6c:42:0c:7e:a5:fe:2a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6406ab50-470a-4f0f-ba5e-7500a8b97cd4
        Validity
            Not Before: Oct  9 01:00:28 2025 GMT
            Not After : Jan  7 02:00:28 2026 GMT
        Subject: CN=7e89fe51-e975-4aa5-8db9-c41ed7c7fb78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:34:f1:2c:ec:0f:04:1b:4f:a5:a1:c7:82:cf:
                    2a:47:b0:aa:7f:7a:e7:93:fc:b9:20:32:59:68:77:
                    bb:a9:35:d6:c2:b2:ce:9c:09:14:2a:a2:ae:dc:e1:
                    15:1a:4d:de:b6:fe:b2:4d:10:69:4e:1a:70:91:9d:
                    d3:b0:82:bd:c4:c4:c5:64:e5:01:2c:40:10:e5:49:
                    d8:75:ac:5c:d8:30:47:e9:e0:69:98:1a:ca:42:a0:
                    9a:20:2a:1f:56:1e:05:5c:d9:57:51:85:22:d1:e4:
                    ce:57:c7:1c:ec:e7:b6:ab:38:1e:4c:a4:8b:59:b8:
                    43:9a:d2:d3:9e:4b:5e:fe:73:d2:34:78:59:bf:52:
                    33:d0:e5:60:9d:13:33:7e:71:87:6f:65:e6:85:e1:
                    d0:c4:b9:35:91:69:31:31:04:aa:e2:e3:a2:db:37:
                    a5:35:ff:e6:0c:16:3c:c2:f8:b4:7a:77:09:d8:50:
                    94:00:cc:d4:09:b9:fe:3a:d8:c8:30:ad:be:ba:83:
                    da:77:7a:ab:29:93:b1:e7:10:93:07:06:e2:ba:3c:
                    16:da:32:2f:59:5b:2f:12:99:e8:41:8d:9b:d7:49:
                    45:39:11:c8:64:31:e2:c6:ad:05:9b:8e:88:bb:59:
                    8b:e2:56:6a:5c:b7:de:cd:8f:cd:10:b0:aa:9a:ea:
                    2a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:56:94:0E:63:57:2F:EA:C8:EB:8D:22:17:E7:4B:5E:7D:C5:51:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/ed935b2e-5a37-32c2-bedf-bf176e74c567.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.crl

            X509v3 Authority Key Identifier:
                keyid:B7:0E:58:89:ED:AB:C8:83:04:25:60:8A:16:D1:DC:4D:3D:10:42:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.227.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:85:6c:61:c4:f2:03:52:5b:c0:fb:13:49:9a:31:a4:10:69:
         6c:93:31:a8:58:be:f8:cc:21:ba:af:86:9e:fb:60:ec:3f:7e:
         73:99:6d:dc:8d:91:d0:d0:fe:8d:e8:7a:dd:5e:0d:88:0d:bd:
         23:4e:4c:a4:02:b3:20:42:05:d1:40:2d:92:f4:89:1a:97:01:
         d6:1e:9f:34:87:e1:00:da:d1:3b:ae:0d:f5:92:f0:b6:6b:78:
         76:ba:90:bf:ff:ef:b1:af:f0:a5:99:83:2b:0b:d1:a5:54:ab:
         18:73:eb:1b:a5:1f:4d:e1:38:09:23:b5:0c:f6:79:a4:25:b9:
         2b:0a:d8:ab:fc:10:a8:ac:80:fa:52:6b:23:a0:85:ae:25:24:
         95:e5:a4:0f:eb:f6:2f:21:1a:b6:45:c2:bc:64:7d:30:92:b8:
         7d:31:fa:72:f5:d2:e8:0e:ac:10:f8:8a:39:bd:91:8a:85:45:
         d0:f7:3a:60:86:5d:f6:75:78:98:f5:73:99:fd:2e:5b:db:fb:
         ad:50:9a:4c:59:1f:5c:aa:9e:ad:06:0f:15:a5:7f:bc:8f:22:
         9e:09:62:6b:da:1f:ae:87:d0:ed:ac:81:e4:74:bb:f5:c1:91:
         16:9c:e9:ee:53:9b:d3:ce:f5:28:23:1c:16:c0:bf:d7:82:e6:
         13:7c:b4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 23:43:59 2025 by rpki-client