Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/699094db-4cf2-30e8-b4da-74abd132aa0c.roa
File:                     699094db-4cf2-30e8-b4da-74abd132aa0c.roa (raw, json)
Hash identifier:          lNKy+tnuPXJXe72k4FEbznbcuy9XJH31zdIIraAGyHc=
Subject key identifier:   6E:4E:E2:D1:2F:04:42:3A:77:60:CE:4C:DE:9A:07:85:A6:BB:EE:C3
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584A698B332F1210BB5A799A0A90
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/699094db-4cf2-30e8-b4da-74abd132aa0c.roa
Signing time:             Sat 05 Jul 2025 01:00:50 +0000
ROA not before:           Sat 05 Jul 2025 01:00:50 +0000
ROA not after:            Fri 03 Oct 2025 01:00:50 +0000
asID:                     202
IP address blocks:        206.164.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:69:8b:33:2f:12:10:bb:5a:79:9a:0a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul  5 01:00:50 2025 GMT
            Not After : Oct  3 01:00:50 2025 GMT
        Subject: CN=2aa0a77a-17f2-437c-afdd-cccb88561457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:64:6c:2f:a7:fe:28:98:c3:f6:8b:79:1f:f4:
                    b4:9e:23:c9:92:31:fc:25:11:d5:6a:11:02:ad:d2:
                    95:98:6a:6e:9a:88:c2:55:fb:b2:1e:50:04:00:04:
                    81:d2:5f:3d:18:50:43:f0:77:d2:71:5f:30:dc:d6:
                    af:a5:bd:18:5c:06:95:41:cf:df:3e:4f:e6:2f:82:
                    70:88:5c:71:d3:4a:37:54:e7:63:ac:bd:28:c0:96:
                    47:0c:d8:a6:66:a4:dd:62:7d:cb:02:ed:eb:61:6c:
                    c3:76:04:bb:7f:bb:ef:05:a0:cc:65:6c:c5:bf:42:
                    e3:82:76:da:bd:cc:34:99:bc:c0:96:fa:fe:af:95:
                    7a:1a:eb:81:39:2a:77:b8:88:17:e7:d6:7a:03:f6:
                    a1:d6:9f:f7:e0:91:28:c3:f0:a5:07:34:b7:14:5d:
                    7a:54:e3:c8:8b:a9:5c:e1:8c:2d:ab:fa:ac:d2:d5:
                    c1:d5:e0:85:cf:ed:ea:21:f8:79:b4:d0:fc:0d:af:
                    50:42:28:fa:c6:82:6b:b7:53:9c:18:e7:76:e5:42:
                    6a:14:7a:cb:80:cc:5c:30:8a:df:ae:7f:a7:32:2d:
                    ef:4f:7a:ec:bb:7a:9e:fe:d2:03:b5:3c:46:bb:7a:
                    bc:19:ed:97:b9:e5:da:c6:30:e0:f0:6d:0b:d5:97:
                    c2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:4E:E2:D1:2F:04:42:3A:77:60:CE:4C:DE:9A:07:85:A6:BB:EE:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/699094db-4cf2-30e8-b4da-74abd132aa0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.164.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:09:f9:b3:ee:e3:26:fe:67:4e:a2:c3:d4:14:9a:bd:5c:4e:
         51:8c:82:40:d4:95:1f:7b:c2:c3:99:ae:ec:9b:a9:85:ed:79:
         d1:90:97:8b:66:24:32:8c:bb:67:c8:9d:77:df:85:bf:1d:5f:
         0a:1a:c5:0b:c7:f2:f1:fc:8f:d2:9c:a6:1a:ea:35:9b:34:55:
         c5:66:11:47:8a:13:b0:b0:8d:8a:c2:6e:97:3d:7a:32:6d:e5:
         f7:80:24:2d:4e:93:55:f1:22:50:02:aa:cc:ba:93:f7:93:12:
         f8:32:5c:3c:d9:11:a6:aa:de:94:c1:61:33:90:e6:57:f5:b3:
         1b:2e:1e:39:52:bb:50:93:89:66:98:d9:c0:3d:e0:db:b2:e0:
         95:0a:36:36:4a:6a:de:67:35:00:ea:16:09:30:69:ef:43:a0:
         32:02:4c:ba:7f:82:91:c8:79:64:7d:d2:a5:db:5d:bf:61:3e:
         4f:fb:aa:aa:1d:40:07:6f:76:48:c6:20:54:3f:ff:70:1d:52:
         a7:cc:41:09:94:e8:3e:e6:9b:6f:be:9f:4d:a1:33:5e:ec:bc:
         cb:67:a4:21:bb:db:c4:d0:e5:0e:f3:6f:8a:83:bf:c9:ec:74:
         c7:e0:ae:c6:94:83:08:f3:ac:e7:b5:5b:e5:36:33:de:06:1e:
         50:dc:e8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:09:18 2025 by rpki-client