Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a3fb8cd0-06c8-3f7f-a083-9240bba0b9b0.roa
File:                     a3fb8cd0-06c8-3f7f-a083-9240bba0b9b0.roa (raw, json)
Hash identifier:          FunLb9kNJAlMfaZruKSornlJ8+xV8cNnb31hbn9d3qs=
Subject key identifier:   60:F8:5F:3C:D2:42:A0:89:A1:97:92:28:15:35:46:DD:C6:F4:95:1E
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584B16A16E28BEC0E7576604C940
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a3fb8cd0-06c8-3f7f-a083-9240bba0b9b0.roa
Signing time:             Fri 05 Sep 2025 01:00:33 +0000
ROA not before:           Fri 05 Sep 2025 01:00:33 +0000
ROA not after:            Thu 04 Dec 2025 02:00:33 +0000
asID:                     20197
IP address blocks:        204.84.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 10 Sep 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:16:a1:6e:28:be:c0:e7:57:66:04:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Sep  5 01:00:33 2025 GMT
            Not After : Dec  4 02:00:33 2025 GMT
        Subject: CN=7e5b08a5-c683-4f58-afa7-b0e122119396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fe:89:34:92:ec:b0:8f:fb:80:d6:b9:24:82:
                    e4:dd:f2:f5:5d:f0:16:00:b2:3d:e2:ee:23:fb:0d:
                    11:ce:b3:88:95:42:ff:ff:28:40:52:9b:e4:5d:e7:
                    ec:07:d4:50:37:c6:bc:22:2a:11:59:6a:d7:6f:5c:
                    10:c7:b3:99:b1:2e:68:ce:8c:5a:0b:df:04:9a:a5:
                    fa:11:10:7f:10:ff:7e:1b:b7:af:52:31:0f:9d:c2:
                    20:fa:3f:22:b1:67:07:93:29:97:47:1c:a4:b3:51:
                    b0:d1:05:60:3c:01:18:7f:27:56:0c:f8:f9:7b:9d:
                    0f:61:a7:c2:ca:5c:21:3c:d7:c8:8d:25:da:ee:c0:
                    fe:38:7a:44:73:7d:bb:d5:18:24:a6:0e:cf:c6:83:
                    cc:fb:a3:47:72:3f:dc:2d:a1:c6:b4:9d:79:b6:0b:
                    5d:5e:57:8c:15:20:b6:48:9f:ee:88:82:11:52:26:
                    b3:2f:44:42:75:84:14:46:41:4d:cd:fc:ab:3d:6b:
                    e0:46:6a:f8:74:de:1c:b7:7f:75:7a:83:f7:c2:d5:
                    4c:83:f1:13:6c:ec:77:b7:72:e8:9d:33:41:44:7f:
                    8a:25:17:36:1d:4a:2f:fc:c7:2e:a8:69:a0:2b:27:
                    31:2a:cf:99:52:51:d3:f5:62:86:fa:6e:38:d9:5e:
                    74:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F8:5F:3C:D2:42:A0:89:A1:97:92:28:15:35:46:DD:C6:F4:95:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a3fb8cd0-06c8-3f7f-a083-9240bba0b9b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.84.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:08:6a:01:3c:46:0c:24:38:11:7e:7f:6c:75:0e:0c:77:8a:
         7b:9a:94:da:0c:07:64:0d:92:c9:7c:1d:f9:08:bf:d5:b9:af:
         bc:35:9c:95:58:98:3f:6f:41:4a:d1:be:a7:cf:a3:10:20:53:
         ad:9d:d1:59:c5:a8:7d:23:5b:2d:13:26:37:3f:ec:9f:f1:34:
         53:56:1d:13:f3:31:15:0f:80:0d:a2:5f:19:2f:a0:9c:f8:5d:
         9b:d7:83:2e:6c:e2:6f:9c:82:64:65:c7:4b:0e:a6:ce:94:8e:
         40:f7:64:bf:3a:38:bd:12:45:40:c7:6a:50:a4:7e:8b:7d:d5:
         65:7a:78:42:9d:ba:46:fe:a0:d3:e5:d0:8a:85:d2:42:c2:74:
         34:8f:f3:8e:fb:da:09:1a:b9:73:c1:6e:44:7e:c3:27:aa:93:
         60:a6:b9:73:05:f9:ca:5a:c0:1f:61:60:da:18:f9:10:12:19:
         e5:18:60:d9:d5:a0:50:95:18:15:3f:63:a8:1a:b2:62:48:e3:
         59:1f:31:14:05:86:2c:93:34:ce:dd:8a:3d:fd:6c:f9:12:a6:
         4a:f3:fd:50:8b:36:d4:c3:11:6a:d6:73:bd:85:68:93:4f:3f:
         13:1b:33:bb:d7:f8:5a:6d:be:f5:fe:8f:73:1a:02:ca:e9:4e:
         28:ff:d7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:22:31 2025 by rpki-client