Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/4776c406-bb79-3a7c-82ee-ccea249e90c0.roa
File:                     4776c406-bb79-3a7c-82ee-ccea249e90c0.roa (raw, json)
Hash identifier:          RF1lf/Zdh9USlhnYN8fVXohC7SHh5CoudZ9aW+XUbsw=
Subject key identifier:   A4:98:CD:DA:16:93:14:5B:BE:00:57:A4:0D:F4:5B:85:67:24:BE:68
Certificate issuer:       /CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265
Certificate serial:       010D0C9F4328584B23C0EE4D935AD5EA528851C0
Authority key identifier: 6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/4776c406-bb79-3a7c-82ee-ccea249e90c0.roa
Signing time:             Tue 09 Sep 2025 17:49:43 +0000
ROA not before:           Tue 09 Sep 2025 17:49:43 +0000
ROA not after:            Mon 08 Dec 2025 18:49:43 +0000
asID:                     7029
IP address blocks:        206.174.128.0/22 maxlen: 24
                          206.174.144.0/22 maxlen: 24
                          206.174.152.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:23:c0:ee:4d:93:5a:d5:ea:52:88:51:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265
        Validity
            Not Before: Sep  9 17:49:43 2025 GMT
            Not After : Dec  8 18:49:43 2025 GMT
        Subject: CN=ac1bd5a5-7c21-477f-bd21-65c1f927cee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7c:9a:05:3b:55:47:de:a3:75:8d:a0:0c:33:
                    7e:e6:d2:67:ae:25:0b:c3:9b:a1:f1:dd:b6:7d:ca:
                    66:74:a0:99:11:bb:10:fa:e2:c7:d0:52:9c:f0:04:
                    17:0e:a6:fa:7d:31:fa:20:ee:8a:83:5f:c4:ae:8d:
                    c7:a6:c1:9c:2b:6f:d7:3e:11:f8:6f:6b:03:33:ac:
                    9a:c9:87:d1:a4:54:3e:db:42:5c:91:3d:ec:94:83:
                    ad:8a:0e:27:0c:b0:0e:d9:ca:36:0a:16:f8:b6:03:
                    68:d0:c7:ab:06:d2:14:ca:df:44:8e:01:d5:84:da:
                    f4:b2:da:f3:65:9a:2b:70:4e:63:32:2d:92:68:3f:
                    9f:72:a3:22:4d:58:7d:ee:e7:fe:bf:57:4e:29:94:
                    42:60:2f:51:0b:55:40:e9:1e:8b:cd:a0:00:f6:d7:
                    36:8b:69:23:94:54:81:f9:95:91:c8:8d:65:86:08:
                    01:e8:28:66:74:2c:55:0b:79:9a:8b:b4:e3:c1:30:
                    99:4b:e3:d7:04:e4:b0:34:8a:ea:e6:bb:f9:1d:b9:
                    19:29:6f:82:bd:e5:01:c4:c4:45:e1:3f:5a:fb:12:
                    b6:92:44:f6:2b:b4:91:94:53:1a:6f:b9:a4:7c:d1:
                    f9:03:47:e1:48:43:5c:98:d3:19:11:c7:f2:4f:f5:
                    9c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:98:CD:DA:16:93:14:5B:BE:00:57:A4:0D:F4:5B:85:67:24:BE:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/4776c406-bb79-3a7c-82ee-ccea249e90c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl

            X509v3 Authority Key Identifier:
                keyid:6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.174.128.0/22
                  206.174.144.0/22
                  206.174.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:c9:06:ec:aa:63:83:d0:28:3d:0b:28:bb:fa:86:f2:c3:d2:
         d8:6a:13:89:ec:d6:8e:1d:04:d9:6d:7a:74:bc:32:11:0f:46:
         a0:2f:45:f9:38:c1:fd:d2:c1:22:d1:8d:29:0e:ba:12:58:3c:
         85:ed:88:99:ba:9a:10:29:d4:c2:03:4b:b4:a2:b2:f9:9d:ca:
         58:f0:ef:0c:5e:f7:40:52:87:29:f2:3a:04:41:08:01:e3:1a:
         5b:ea:bd:f5:94:e9:7b:2b:66:db:a9:90:91:ec:71:e2:a2:8f:
         1f:74:8f:6c:c3:45:2a:29:a5:9e:9e:12:ae:9b:e3:12:7f:9a:
         41:6c:81:a1:99:71:55:cc:98:28:4a:ee:44:80:87:18:0c:00:
         ad:19:95:6d:86:48:cf:15:71:b4:a5:dc:4b:d2:99:26:06:24:
         8e:bc:84:53:9b:57:b5:8c:9c:ea:7c:e4:05:f0:70:1f:fb:58:
         85:b0:e3:56:5e:4d:8c:ab:52:ae:31:9c:79:d1:e1:07:93:ce:
         f6:de:5d:2c:70:8e:1f:ac:5d:ca:50:d7:38:15:78:1b:23:51:
         0c:ce:26:85:ed:3c:e6:db:e5:31:13:26:7a:66:f3:65:1d:46:
         c6:0e:a7:f9:eb:4b:1b:e8:b6:31:81:62:e7:1c:13:f2:c2:8b:
         2f:6b:bc:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:25:38 2025 by rpki-client