Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/83175b21-65b9-313b-b414-9bcec84a56bf.roa
File:                     83175b21-65b9-313b-b414-9bcec84a56bf.roa (raw, json)
Hash identifier:          v/My0EcKBdeGZQo3JWgMM+Cw3wctp2Nq+Te8kkPzkN0=
Subject key identifier:   41:BA:49:86:CA:D7:06:D5:C6:08:AF:F2:68:DC:DA:FB:FB:29:03:E5
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584B21CC27434D93F26008DAF300
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/83175b21-65b9-313b-b414-9bcec84a56bf.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     16462
IP address blocks:        206.12.56.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:27:43:4d:93:f2:60:08:da:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=0b2e5343-18f0-443d-82be-5ef420ea9880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:75:04:cd:d4:ce:36:1b:96:a8:d5:2b:e7:ea:
                    a5:2d:f1:1e:6f:92:47:ec:7f:df:26:12:1e:de:66:
                    ae:f4:8f:22:98:28:36:69:70:b1:c9:3e:14:75:e4:
                    bd:2c:de:c9:e9:6c:1a:6b:58:6c:e7:5a:3b:30:03:
                    66:89:c5:9b:97:45:85:99:f4:9f:69:e4:7e:e4:e0:
                    58:7d:1c:a5:8b:2e:aa:67:33:76:b4:ba:ae:98:a8:
                    4e:a2:b6:e5:19:32:65:1b:25:86:85:fe:2c:82:dd:
                    d0:68:12:04:8c:57:29:3f:67:04:ed:8e:ba:a8:68:
                    27:9a:93:3b:d0:9a:fa:6a:af:48:58:04:2e:fe:8c:
                    b1:21:d1:f9:34:49:6c:6e:65:14:24:b3:31:46:10:
                    ea:50:f5:00:72:be:93:fe:ef:84:01:43:4f:3b:9a:
                    df:85:f0:13:75:da:af:12:b3:b4:ee:2e:34:96:71:
                    b0:b1:11:16:6a:2a:c2:69:b8:c5:23:fb:51:ef:b4:
                    97:f3:ae:a4:84:98:3d:70:9d:44:5c:42:27:8d:bb:
                    16:36:84:a6:f6:97:f5:dc:00:18:5d:31:fa:0d:57:
                    65:82:30:84:8c:79:cf:c6:d0:49:53:95:24:54:27:
                    db:c3:fe:23:38:e5:5e:03:08:b1:8a:a7:89:54:e8:
                    81:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:BA:49:86:CA:D7:06:D5:C6:08:AF:F2:68:DC:DA:FB:FB:29:03:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/83175b21-65b9-313b-b414-9bcec84a56bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:e8:37:e5:59:4e:e4:68:d2:ea:2c:52:35:08:90:da:0b:2e:
         aa:1c:aa:96:04:f6:cc:48:ef:fd:41:71:4e:b3:f8:24:fc:69:
         78:51:6c:0a:93:93:1b:55:39:e2:64:89:0a:8c:07:81:18:79:
         9f:e3:54:36:d7:e0:28:ee:7f:c0:6f:8a:8e:ab:13:71:43:b2:
         29:9c:f6:20:8d:e1:40:33:21:66:05:7e:f1:a5:70:8d:48:a3:
         d3:04:35:ba:ba:cb:00:f8:f9:65:16:80:90:9f:39:db:d9:c1:
         43:7c:87:73:c9:e2:e6:98:78:cf:3a:a0:4d:3e:18:2a:ba:de:
         55:56:61:f6:4e:50:e1:75:d3:e7:7e:44:07:f8:68:a3:a3:9c:
         e5:a7:25:00:46:8d:a4:ab:c3:cd:d2:1b:cc:27:b0:da:d5:c0:
         3d:cf:52:5a:ae:fa:32:8c:23:87:7d:9c:0e:04:ca:6b:68:a8:
         5d:52:61:0c:5e:3f:e1:39:62:83:14:b3:9f:c5:f7:77:b1:4b:
         c4:5a:2c:a5:65:b3:fc:62:fa:3f:b5:41:54:6a:b6:3f:58:9d:
         36:40:b3:5c:7c:75:d4:27:41:24:a4:23:46:44:4e:40:35:e6:
         21:5d:46:09:10:e8:b4:8d:5c:9b:1d:2b:c9:7b:f7:50:24:d4:
         8a:b8:60:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:02:20 2025 by rpki-client