Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/afb88ebe-750d-3013-b774-fadcc301a7a5.roa
File:                     afb88ebe-750d-3013-b774-fadcc301a7a5.roa (raw, json)
Hash identifier:          +WeknnOEI8mZpKnfj462Y9KbodQ/+uuvqUNL9QKYXoY=
Subject key identifier:   0C:E8:06:0A:FA:04:CA:EA:48:FF:A1:AF:8D:06:C5:6B:BE:9A:94:BF
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F4328584B6201ED7C7FB55997455BA980
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/afb88ebe-750d-3013-b774-fadcc301a7a5.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     400409
IP address blocks:        206.212.240.0/24 maxlen: 24
                          206.212.242.0/24 maxlen: 24
                          206.212.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:01:ed:7c:7f:b5:59:97:45:5b:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=5eaf37a7-58a8-47d1-b414-145dfdb2c824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ed:9f:e5:d8:69:8d:15:4d:ef:ff:cc:a0:11:
                    aa:f9:d8:eb:58:0a:3a:22:23:c6:a5:6d:bc:3d:ed:
                    f3:3e:a9:7f:3e:3b:ff:25:32:d1:cd:ab:bf:33:f1:
                    f1:df:3b:96:fa:af:a2:eb:9c:26:e8:26:aa:ea:9e:
                    18:e4:96:2a:62:1d:2e:59:e1:0a:23:59:7d:b3:11:
                    a7:3d:aa:aa:e3:69:73:e5:d3:ff:8b:1d:9e:8e:47:
                    01:1b:53:13:07:84:ac:92:73:c8:5a:84:76:ce:1a:
                    64:c4:63:a0:cf:ce:45:2b:5c:66:86:55:7f:04:e8:
                    df:b5:17:4b:be:2c:19:0d:60:a2:c8:c9:71:ed:9f:
                    b2:ef:ad:2b:43:3c:4f:2a:20:53:14:19:1c:5a:85:
                    a9:a5:7c:fa:57:6e:c2:8c:8d:06:83:b7:04:17:b4:
                    a6:6d:b4:34:6f:1f:61:1a:95:01:4e:ac:4c:35:69:
                    e2:c0:46:77:13:8e:df:47:d2:2f:76:8b:08:cd:04:
                    8c:f4:3d:27:45:05:ac:d2:fd:62:57:4e:86:46:e7:
                    0b:17:fe:55:88:51:da:d6:a9:be:7d:0d:42:41:c4:
                    9e:32:9a:f5:1c:eb:7d:3c:83:1c:93:2a:f2:18:bb:
                    15:ae:41:a5:11:3a:89:4b:78:45:68:59:4b:fd:5a:
                    cc:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:E8:06:0A:FA:04:CA:EA:48:FF:A1:AF:8D:06:C5:6B:BE:9A:94:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/afb88ebe-750d-3013-b774-fadcc301a7a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.212.240.0/24
                  206.212.242.0/24
                  206.212.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:91:ce:41:ca:b0:f0:84:f9:e0:27:cf:0f:75:d5:fd:f7:1f:
         31:08:3c:57:01:06:c0:d9:81:50:68:1e:e0:1f:23:3f:a8:92:
         e5:17:31:f5:ac:3d:5c:b9:1f:29:50:f7:30:8a:55:a3:87:e7:
         49:26:73:1a:e5:6d:24:a1:7d:91:cf:cc:0d:9a:40:fc:23:41:
         98:d1:9e:07:7e:7c:88:4c:03:86:dd:e8:bb:6c:7b:46:ad:41:
         86:48:53:e0:2c:34:aa:dc:5d:c8:b3:77:63:ee:b3:0c:b0:55:
         c1:46:98:bb:83:e9:42:5b:51:92:66:df:fe:2b:37:40:60:5f:
         15:b9:ec:f0:cb:af:2b:38:7c:fe:c8:16:ec:56:e8:57:85:86:
         be:e9:e7:21:d6:39:e5:57:39:02:be:5a:1e:de:e7:a5:5d:6f:
         51:46:2f:13:ee:56:6e:69:ba:db:ac:ce:95:9c:0b:bd:68:76:
         63:66:95:f5:d3:aa:c8:34:65:54:b9:ba:42:5a:67:98:16:dc:
         a4:0c:2e:48:7f:a0:3c:9f:ef:d0:f4:64:3e:ab:7b:70:8a:ea:
         15:73:94:bc:e7:ea:6f:b8:00:64:7a:f8:08:2c:7b:55:79:82:
         7f:81:b1:dd:4f:a4:3f:03:8a:85:19:27:ee:fc:53:89:a7:cb:
         f6:44:2d:10
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEtiAe18f7VZl0VbqYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWUzZTk5Y2MtNzk5Mi00YWMxLWEyNTYtOTE3Y2NlMDc1
MzJlMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk
NWVhZjM3YTctNThhOC00N2QxLWI0MTQtMTQ1ZGZkYjJjODI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAme2f5dhpjRVN7//MoBGq+djrWAo6IiPGpW28
Pe3zPql/Pjv/JTLRzau/M/Hx3zuW+q+i65wm6Caq6p4Y5JYqYh0uWeEKI1l9sxGn
Paqq42lz5dP/ix2ejkcBG1MTB4SsknPIWoR2zhpkxGOgz85FK1xmhlV/BOjftRdL
viwZDWCiyMlx7Z+y760rQzxPKiBTFBkcWoWppXz6V27CjI0Gg7cEF7SmbbQ0bx9h
GpUBTqxMNWniwEZ3E47fR9IvdosIzQSM9D0nRQWs0v1iV06GRucLF/5ViFHa1qm+
fQ1CQcSeMpr1HOt9PIMckyryGLsVrkGlETqJS3hFaFlL/VrMXwIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFAzoBgr6BMrqSP+hr40GxWu+mpS/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTNl
OTljYy03OTkyLTRhYzEtYTI1Ni05MTdjY2UwNzUzMmUvYWZiODhlYmUtNzUwZC0z
MDEzLWI3NzQtZmFkY2MzMDFhN2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWUzZTk5Y2MtNzk5Mi00YWMxLWEy
NTYtOTE3Y2NlMDc1MzJlLzVlM2U5OWNjLTc5OTItNGFjMS1hMjU2LTkxN2NjZTA3
NTMyZS5jcmwwHwYDVR0jBBgwFoAU2RNicrf45rV9n/DguoV/tj3NwN8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTNlOTljYy03OTkyLTRhYzEtYTI1Ni05MTdj
Y2UwNzUzMmUuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAztTwAwQA
ztTyAwQAztT4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAB+RzkHKsPCE+eAnzw911f33HzEIPFcBBsDZgVBo
HuAfIz+okuUXMfWsPVy5HylQ9zCKVaOH50kmcxrlbSShfZHPzA2aQPwjQZjRngd+
fIhMA4bd6Ltse0atQYZIU+AsNKrcXcizd2PuswywVcFGmLuD6UJbUZJm3/4rN0Bg
XxW57PDLrys4fP7IFuxW6FeFhr7p5yHWOeVXOQK+Wh7e56Vdb1FGLxPuVm5putus
zpWcC71odmNmlfXTqsg0ZVS5ukJaZ5gW3KQMLkh/oDyf79D0ZD6re3CK6hVzlLzn
6m+4AGR6+Agse1V5gn+Bsd1PpD8DioUZJ+78U4mny/ZELRA=
-----END CERTIFICATE-----
Generated at Sat Oct 11 18:30:00 2025 by rpki-client