Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f0730400-44bf-3e9a-9b44-6da157cafbfc.roa
File:                     f0730400-44bf-3e9a-9b44-6da157cafbfc.roa (raw, json)
Hash identifier:          KYP3GxDurk8krO7gUPlq3hBVqbGWAjJ1wdOy+hkyUO0=
Subject key identifier:   E8:AF:D3:44:03:66:0F:72:56:43:3A:49:39:6D:31:F1:E2:27:B9:E0
Certificate issuer:       /CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Certificate serial:       010D0C9F4328584B80B761E2CEDF7631DCAF8780
Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f0730400-44bf-3e9a-9b44-6da157cafbfc.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     5511
IP address blocks:        206.48.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:61:e2:ce:df:76:31:dc:af:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=6678e594-6587-48a3-a951-71a016ac01a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ad:d4:f4:18:44:b4:81:b3:08:a7:af:9b:4f:
                    28:f4:a1:25:00:e8:44:b8:21:b1:3c:bc:da:27:8e:
                    fa:0f:20:09:73:d3:b6:f3:4f:b6:c3:0d:0e:78:aa:
                    14:73:e4:c7:89:29:bb:49:33:21:57:87:c7:a6:04:
                    ae:1f:26:cd:b5:b5:2b:5f:28:0f:de:9b:38:50:89:
                    e1:34:d6:23:d9:ae:1a:e7:a2:1c:a7:37:06:46:a4:
                    d9:ed:e8:ab:5d:bc:ce:14:a5:21:09:66:23:6c:73:
                    68:66:4e:dd:e8:ac:4f:6c:10:80:6a:02:e7:57:33:
                    f4:1b:43:46:61:f0:4f:86:01:92:0c:71:ca:05:ac:
                    ad:9c:55:44:4c:d4:c3:8b:a8:5b:e4:bc:08:62:8d:
                    59:d8:1e:15:f3:f0:f0:80:3e:bf:d9:4d:7e:0e:3b:
                    ca:94:86:46:c6:1a:49:38:cb:04:99:ea:cb:b6:80:
                    30:2b:f4:a9:bd:97:b5:44:2f:ef:53:7a:7e:1c:50:
                    fa:8b:8c:f4:5d:c9:b5:24:d5:62:cb:04:d1:6b:09:
                    92:80:bb:17:74:91:59:c0:96:ab:ad:e6:e7:be:f2:
                    ee:2f:c1:46:34:32:97:58:de:8d:77:9b:c8:a6:d7:
                    c1:38:42:ca:f0:c5:48:6e:e7:de:24:d7:fb:12:ba:
                    c2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:AF:D3:44:03:66:0F:72:56:43:3A:49:39:6D:31:F1:E2:27:B9:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f0730400-44bf-3e9a-9b44-6da157cafbfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl

            X509v3 Authority Key Identifier:
                keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.48.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:86:7f:41:34:35:4f:03:86:44:2b:4b:b7:bb:7b:0c:4f:60:
         c4:5c:6d:46:ce:ab:e8:7b:16:7c:60:34:af:13:a6:c6:55:4c:
         9d:19:07:14:4a:fa:9f:aa:fa:af:00:9a:9a:b9:81:20:63:cd:
         7b:3b:9d:a8:20:4f:c5:c6:9f:c3:a8:25:cd:98:7a:84:78:0a:
         ab:33:c4:01:6c:6e:aa:28:60:83:51:47:9c:10:cf:3a:2f:aa:
         0c:c3:97:8c:f0:2d:07:49:f6:be:5b:a2:4b:8d:51:7b:cb:8f:
         46:2c:b2:4c:1a:02:d6:40:0c:81:f0:0d:11:e1:1d:02:c5:32:
         cc:1b:8d:e8:2a:7a:a2:7a:cd:f4:d8:08:c5:f8:77:ac:3b:5b:
         1e:48:97:c2:4b:5f:34:d7:1e:67:91:c7:f8:c6:09:74:09:dc:
         a0:ed:5c:e3:b6:f9:cd:a2:4e:a3:c8:76:c1:1f:33:85:b8:59:
         4f:f4:dc:f9:26:a0:24:69:81:ae:6c:75:f1:58:7a:8e:ee:d1:
         f1:37:b4:1d:59:a1:37:37:18:a2:77:e4:44:0b:08:66:c4:0c:
         28:37:2e:97:3c:74:b8:34:59:ec:bf:c8:14:73:37:69:73:7f:
         60:36:de:59:8c:f0:ec:b5:85:75:da:ac:6d:2d:15:e9:53:33:
         c7:92:ca:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:22:51 2025 by rpki-client