Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/ec73c5f8-2a98-3834-af37-9e7b4d60accf.roa
File:                     ec73c5f8-2a98-3834-af37-9e7b4d60accf.roa (raw, json)
Hash identifier:          gCtcqPuNUiJR3g+Vmfs1niZPdjUFftLxoK7uwJF9m2Q=
Subject key identifier:   EE:3D:0B:6C:D1:FB:60:5A:2A:17:59:12:DD:41:BA:D4:54:A5:FE:71
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584B2FC1B95284FDC69292FE4884
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/ec73c5f8-2a98-3834-af37-9e7b4d60accf.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     15318
IP address blocks:        206.167.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:b9:52:84:fd:c6:92:92:fe:48:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=88cfdce8-a3c4-4b3a-84bc-3bd241493af7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fb:77:f0:f2:43:f8:7c:0c:b3:4b:f7:e3:18:
                    96:8e:54:01:9c:c8:2d:a3:76:fa:35:43:29:95:8d:
                    42:5b:e0:8a:eb:49:3e:95:b6:3a:c6:1a:70:63:2e:
                    c3:60:3f:be:46:d0:5d:94:49:18:ed:4c:06:99:5d:
                    ee:4d:b3:49:21:6e:c5:0b:5b:f3:3e:90:88:24:f8:
                    54:14:39:f9:56:44:36:63:bb:5e:9b:f1:06:b0:db:
                    07:cd:ab:e4:f3:79:11:1a:71:ca:20:eb:c2:3e:8f:
                    c2:5a:af:01:f1:2f:1f:f6:c0:0c:4a:e7:ec:24:18:
                    1c:45:74:6c:4f:74:5c:de:1c:cf:69:40:7e:1f:a6:
                    6b:d1:db:9e:80:cd:db:c2:df:54:31:21:f1:ef:f6:
                    0d:a1:16:4d:4f:64:57:6e:7b:f0:ed:e1:6d:05:96:
                    82:f3:f7:b2:c2:8e:66:91:d2:b6:0e:be:1f:ce:94:
                    60:5d:83:9f:96:c4:fd:e4:d1:7c:74:4b:56:36:fc:
                    25:d8:a6:25:c8:6d:54:fd:b2:04:7c:5a:07:d7:09:
                    75:24:84:b1:29:72:71:cd:5c:34:3b:86:e6:ca:10:
                    c7:bc:ec:cf:07:24:1d:24:27:5d:68:dc:32:8f:a7:
                    bf:33:ab:3c:fd:f6:1e:a7:33:ac:90:7a:10:96:72:
                    7c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:3D:0B:6C:D1:FB:60:5A:2A:17:59:12:DD:41:BA:D4:54:A5:FE:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/ec73c5f8-2a98-3834-af37-9e7b4d60accf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:41:62:18:82:05:9e:ec:5f:9c:95:1a:5d:3b:05:eb:e6:11:
         4f:29:74:98:6a:90:67:71:f7:96:f9:b7:26:66:7b:f4:75:2e:
         69:5a:2e:5d:8e:11:d1:7f:24:8e:16:c9:bc:f8:9d:00:d6:8d:
         85:d0:7c:34:20:d5:21:da:b7:be:23:59:12:1b:5b:2b:20:42:
         31:7e:93:20:a9:98:bc:9e:1d:82:59:2f:87:44:13:dc:3b:77:
         f5:ba:e8:4a:35:87:7a:5b:dc:9a:bd:d7:a1:26:fc:78:7b:22:
         aa:20:d0:21:39:f5:ba:03:f6:f4:d3:e8:33:be:6c:6a:81:69:
         0e:47:dc:64:3d:37:ed:5b:39:3c:ef:c4:b8:d2:ae:a6:b0:26:
         72:4b:7c:eb:3c:58:98:2e:19:2d:5f:49:a8:40:c9:2e:4c:d7:
         43:ff:a5:cc:e8:94:b3:95:4f:4f:21:8f:93:15:0f:56:bc:81:
         7b:90:53:c7:d7:0e:47:64:85:98:08:b1:40:de:ae:67:97:67:
         e4:c5:fd:98:83:f2:55:a6:bd:61:94:27:e2:2c:69:69:5e:3e:
         73:7a:56:12:7b:f5:b5:30:7b:8f:26:fa:1e:9c:13:f9:51:66:
         7b:e4:c0:f9:93:f4:1f:82:57:50:72:c4:2d:3b:5e:3e:71:a2:
         60:29:64:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 13:48:23 2025 by rpki-client