Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/42064f1e-6d92-3d41-aa21-71617bd5ac10.roa
File:                     42064f1e-6d92-3d41-aa21-71617bd5ac10.roa (raw, json)
Hash identifier:          NZFUsR2sBuIDlJcnlMEDlX4jYxwEGEtdP8eNiNNVB4A=
Subject key identifier:   73:6F:2A:BD:CB:59:8D:5B:88:91:5B:E6:EC:A9:60:EF:66:65:1A:4E
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584B2FC196770332A7EAF6850980
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/42064f1e-6d92-3d41-aa21-71617bd5ac10.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     16462
IP address blocks:        206.12.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:96:77:03:32:a7:ea:f6:85:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=769b33bc-bbdb-41a3-bbc6-b424e003cd9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:16:4d:5d:fe:f6:e2:01:85:df:d9:ba:dc:39:
                    ac:f7:05:83:30:d8:65:bc:db:44:b7:9e:36:3c:69:
                    ac:11:c3:ee:ba:68:2b:0a:b2:aa:cb:e0:cd:f3:31:
                    f2:d9:ff:e1:0e:03:9e:dd:e0:0d:56:4e:17:45:2d:
                    04:50:ef:5f:ff:7b:f1:1a:e6:fa:33:e1:c9:ff:65:
                    e4:74:d7:24:09:61:dd:45:29:36:05:64:55:68:54:
                    22:b8:80:29:a8:82:ba:dd:db:94:bc:e5:9c:35:a8:
                    97:4e:69:3e:4d:37:00:42:cd:82:0d:ca:7d:35:36:
                    3a:1a:c9:c4:a7:e2:1b:73:d5:5c:e2:6a:98:fd:cf:
                    61:a3:2e:2f:4a:37:f5:fa:45:32:72:b7:96:c1:11:
                    62:22:b4:d5:05:26:9b:2d:7d:28:22:e2:14:b2:03:
                    51:5c:53:a3:b4:e1:0e:6b:6c:69:ec:14:f8:f9:b4:
                    18:d2:38:d0:4c:ba:37:b7:6f:d6:ff:dd:f1:9d:fe:
                    85:94:6f:34:fc:3e:32:2d:f9:f5:0b:18:ba:19:c4:
                    58:31:56:75:40:81:d1:c3:15:b4:69:18:99:8e:54:
                    ce:98:8f:0a:a9:ca:7f:7a:9e:4f:75:dd:04:b4:75:
                    51:1f:54:ea:4f:75:7b:ca:dc:93:7c:c2:8c:68:2c:
                    e2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:6F:2A:BD:CB:59:8D:5B:88:91:5B:E6:EC:A9:60:EF:66:65:1A:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/42064f1e-6d92-3d41-aa21-71617bd5ac10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:62:0c:ff:43:56:9a:5c:38:52:78:a6:1d:9d:5d:84:6a:eb:
         a1:01:ca:16:a6:20:70:8c:32:d0:21:6e:d1:9a:d0:a5:1e:1e:
         1a:35:f5:82:48:7e:77:50:85:b8:e1:64:82:2e:5d:2a:bb:27:
         f1:91:98:de:fe:7c:76:38:73:88:7c:3a:f5:86:ed:97:58:14:
         44:3f:d9:c5:5e:54:13:9a:4d:ab:34:e1:65:a7:81:6d:8c:86:
         8c:4e:81:59:cd:b8:23:8d:ae:ac:e3:eb:58:6e:fe:27:c1:59:
         1a:a0:bb:d6:aa:b6:2e:1d:b0:ad:8d:2e:14:2f:0d:00:21:e0:
         46:08:b3:fc:4d:b5:82:9f:57:05:ec:89:27:14:61:8c:b8:5f:
         af:1b:e0:74:37:64:e7:72:49:79:c4:ae:a7:eb:31:fb:f8:9a:
         e3:66:35:0b:da:72:b7:4a:8d:56:9d:2d:8f:58:21:12:bf:97:
         f6:88:01:75:ea:4a:f5:e7:c2:63:e7:8e:33:81:58:59:9d:e4:
         ca:f1:5c:00:23:ad:65:9e:93:4e:b4:b9:06:0b:61:9b:f2:3d:
         9d:26:13:7d:7f:53:b4:10:ad:a9:7b:e5:93:79:bb:d6:35:1e:
         15:3d:4d:de:20:f8:7a:05:bf:53:9d:fc:0c:73:2e:f7:24:8f:
         bc:87:5a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:02:20 2025 by rpki-client