Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0c9dde20-a0e5-43e3-909b-aae15eae3752/39a77810-30a3-372e-830e-aae5c89981a4.roa
File:                     39a77810-30a3-372e-830e-aae5c89981a4.roa (raw, json)
Hash identifier:          /8VMBJZeV09vlUG8dTkizbgn7LJ7urpzr3U3LyGANh8=
Subject key identifier:   17:9E:9D:4C:9A:62:66:8C:87:52:4F:87:CB:C9:03:A9:32:67:0A:E1
Certificate issuer:       /CN=0c9dde20-a0e5-43e3-909b-aae15eae3752
Certificate serial:       010D0C9F4328584BAD624BE172ECF7C926FA5680
Authority key identifier: 24:74:F8:7F:03:0D:99:15:CD:B7:C0:74:44:5C:B4:43:31:17:96:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0c9dde20-a0e5-43e3-909b-aae15eae3752.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0c9dde20-a0e5-43e3-909b-aae15eae3752/39a77810-30a3-372e-830e-aae5c89981a4.roa
Signing time:             Wed 29 Oct 2025 01:00:31 +0000
ROA not before:           Wed 29 Oct 2025 01:00:31 +0000
ROA not after:            Tue 27 Jan 2026 02:00:31 +0000
asID:                     32681
IP address blocks:        206.197.44.0/24 maxlen: 24
                          2620:b8:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0c9dde20-a0e5-43e3-909b-aae15eae3752/0c9dde20-a0e5-43e3-909b-aae15eae3752.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0c9dde20-a0e5-43e3-909b-aae15eae3752/0c9dde20-a0e5-43e3-909b-aae15eae3752.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0c9dde20-a0e5-43e3-909b-aae15eae3752.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ad:62:4b:e1:72:ec:f7:c9:26:fa:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c9dde20-a0e5-43e3-909b-aae15eae3752
        Validity
            Not Before: Oct 29 01:00:31 2025 GMT
            Not After : Jan 27 02:00:31 2026 GMT
        Subject: CN=8df88e50-20dd-46c1-a7b2-7bd247462764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:eb:6b:d8:dd:b3:52:f2:04:fc:66:1f:dc:13:
                    47:73:db:93:16:04:04:2f:1b:32:12:8a:49:02:18:
                    c9:c0:b7:05:4a:2f:c8:3d:94:6b:9d:7c:73:00:55:
                    64:9b:e3:41:f0:20:97:a5:96:42:60:fc:f8:e1:5b:
                    c8:e1:55:17:88:94:9f:bd:d1:33:99:81:5d:62:6d:
                    b9:9d:28:4b:d7:13:92:ed:cd:49:3d:1d:53:15:3f:
                    de:7f:71:e6:47:53:fa:d2:3d:da:64:c5:cf:1e:a9:
                    84:4e:57:f2:5b:23:d1:fa:ef:3e:ce:e9:bc:69:6d:
                    fa:f5:79:ac:6d:cb:b9:cb:78:97:9b:97:df:6a:9e:
                    67:19:31:79:00:48:60:78:92:06:1a:bc:07:e8:61:
                    d5:67:5d:8a:b4:38:86:20:22:aa:a6:15:63:07:f8:
                    7d:93:e0:80:c6:29:f3:1f:fc:2b:be:10:c5:2f:85:
                    67:ac:b5:51:4b:f4:76:f7:9b:c5:a8:20:6a:80:a1:
                    65:e8:00:f5:cf:10:81:11:e7:78:03:fe:ba:8d:5a:
                    ca:a0:24:ed:3b:ae:cf:48:d2:03:bc:64:ad:b2:be:
                    6a:15:93:a9:12:98:0d:68:da:64:43:c4:69:38:bf:
                    c3:de:fd:0b:9e:a0:04:8a:78:8a:b0:36:d0:db:18:
                    c7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:9E:9D:4C:9A:62:66:8C:87:52:4F:87:CB:C9:03:A9:32:67:0A:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0c9dde20-a0e5-43e3-909b-aae15eae3752/39a77810-30a3-372e-830e-aae5c89981a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0c9dde20-a0e5-43e3-909b-aae15eae3752/0c9dde20-a0e5-43e3-909b-aae15eae3752.crl

            X509v3 Authority Key Identifier:
                keyid:24:74:F8:7F:03:0D:99:15:CD:B7:C0:74:44:5C:B4:43:31:17:96:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0c9dde20-a0e5-43e3-909b-aae15eae3752.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.197.44.0/24
                IPv6:
                  2620:b8:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:69:da:33:24:4b:44:74:c1:d5:8c:d4:5d:1b:49:f9:c8:5e:
         e7:d6:df:9f:8b:d7:7c:3d:dd:55:e0:b1:b8:0c:5e:a7:7e:5a:
         ca:32:30:ce:85:89:44:59:b3:2c:b1:e0:fe:00:a9:5a:e0:dc:
         12:a4:40:89:1c:00:37:3b:12:96:d8:b0:27:eb:99:cb:df:d9:
         83:92:bc:12:d5:d6:2c:41:a4:67:e2:81:f9:9c:6e:2a:61:36:
         7c:a7:d4:be:f5:98:5c:ba:ec:5d:41:70:a7:68:13:ca:f4:23:
         d9:2f:fd:bb:2e:13:ec:3a:90:4e:dc:9f:1b:d0:db:84:30:24:
         84:0c:f6:d9:d7:24:35:a5:41:9a:92:60:61:cc:52:e7:f6:dd:
         12:24:12:d0:ec:e9:e3:ce:14:ca:1b:1c:3d:74:15:49:f0:9b:
         b3:e0:33:cf:0a:07:42:ea:1f:f6:4c:f3:6f:33:b1:38:34:6b:
         fc:fc:68:5b:2e:4e:ac:98:07:e3:1a:32:8e:e9:5a:bc:f2:df:
         fe:16:f8:bb:e2:7c:24:e2:98:8b:af:72:0a:a4:68:0d:2d:30:
         b9:b6:ce:3d:99:5f:2a:09:dc:71:78:1f:ec:c6:7f:10:61:d5:
         7d:0e:7c:ee:8e:f1:b7:5c:60:8c:a5:4b:71:c0:9c:70:f7:ec:
         82:5c:a9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 14:45:49 2025 by rpki-client