Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/0d5ac58d-6f68-3109-a97b-d89cfbc28300.roa
File:                     0d5ac58d-6f68-3109-a97b-d89cfbc28300.roa (raw, json)
Hash identifier:          Yr56cJN93u+oeRgRqox8wXdY3tNJaajReYN+qFA9eDc=
Subject key identifier:   41:8D:9C:63:2F:E8:CE:2B:1D:14:AD:AD:10:DD:01:DA:A5:F1:BB:04
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F4328584B79BCC896B0BD25C206EF3380
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/0d5ac58d-6f68-3109-a97b-d89cfbc28300.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     398704
IP address blocks:        206.212.243.0/24 maxlen: 24
                          206.212.245.0/24 maxlen: 24
                          206.212.247.0/24 maxlen: 24
                          206.212.250.0/24 maxlen: 24
                          206.212.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:c8:96:b0:bd:25:c2:06:ef:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=1dc93c41-c5d5-458a-a252-2e649ada22c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:58:d1:26:76:92:0b:8a:fd:3d:b5:fc:46:85:
                    97:83:91:2e:07:e8:cf:e5:a0:df:0a:48:c9:eb:c9:
                    9a:f9:5e:85:8e:8a:a9:0f:a0:33:6f:8b:76:d3:bc:
                    21:6c:07:f8:ca:fd:65:81:00:55:9c:af:37:91:20:
                    15:90:d2:ff:ea:71:a5:44:bc:6e:e1:1e:cc:ce:25:
                    29:5f:3d:f5:15:91:6d:88:78:d1:92:0c:fe:9e:41:
                    0c:de:1c:d9:cd:4b:9d:bf:de:28:4f:81:38:b2:08:
                    74:37:53:33:10:e4:00:b0:82:5e:ad:83:a0:90:87:
                    3b:ca:f4:fa:9d:4f:35:5a:77:ce:39:4c:01:65:b2:
                    81:95:1f:62:fc:d1:0e:ce:d4:b3:c2:57:ef:5c:e5:
                    6e:15:61:1a:18:88:cf:63:ee:3d:38:74:bb:12:38:
                    81:18:eb:80:8f:17:e8:10:ee:d7:dd:9f:99:f3:20:
                    18:27:b0:be:6a:88:a6:d1:21:66:bb:a4:66:18:07:
                    10:05:78:8c:17:e7:de:6f:d9:84:72:d9:a4:1a:1f:
                    ea:b2:b8:19:1a:45:66:77:65:63:f1:18:83:28:5c:
                    2f:5d:a7:b3:3a:ae:63:fe:c7:d8:f4:6f:18:9a:68:
                    f1:b4:e8:ed:7c:9b:b2:6f:17:45:2c:dd:47:f9:e3:
                    5f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:8D:9C:63:2F:E8:CE:2B:1D:14:AD:AD:10:DD:01:DA:A5:F1:BB:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/0d5ac58d-6f68-3109-a97b-d89cfbc28300.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.212.243.0/24
                  206.212.245.0/24
                  206.212.247.0/24
                  206.212.250.0/24
                  206.212.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:a4:ca:a8:6d:ce:58:a4:f1:2d:ec:fa:87:af:7b:91:19:56:
         06:b6:81:37:2b:1c:34:20:1f:9d:db:c3:04:05:4c:ea:3b:b1:
         cf:2e:88:a6:46:12:e4:43:a9:7d:83:28:7b:fb:fc:80:b3:bd:
         67:f1:8a:51:c7:fb:2c:0d:c3:2b:0d:97:17:00:53:b8:58:39:
         86:87:1b:65:63:21:ab:1d:4c:2b:39:70:c5:47:b8:cd:6a:da:
         2c:f8:a2:6e:ae:9e:2a:85:32:e7:d1:e2:ce:e7:f0:89:e4:3e:
         13:3f:76:0a:b4:96:31:7a:d0:13:4c:55:70:35:8e:7c:60:f2:
         22:7c:cf:1d:c5:03:22:d5:09:05:e7:1e:47:61:6f:7c:ae:60:
         a3:8f:41:48:4a:27:bb:01:bf:a5:0a:40:05:5e:03:65:b7:98:
         89:d2:8e:cb:df:c7:29:55:84:5c:3d:24:4f:43:24:c1:c3:8b:
         47:c8:9a:14:4b:79:8f:7c:63:f5:f9:a9:fc:7b:6e:28:3e:37:
         cb:d1:b9:ec:82:b3:a3:1f:d5:5b:99:b6:7d:76:5a:72:3d:80:
         07:c4:f4:53:22:3b:03:e3:c1:00:c3:6f:57:b0:5d:c9:8b:bd:
         7f:68:fa:bd:ad:35:b1:b2:9c:b9:df:73:5c:c5:b7:7e:91:18:
         cb:6a:8b:cd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Oct 11 18:25:55 2025 by rpki-client