Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/10e86cf9-f8b5-3b6b-aa25-cdc526774664.roa
File:                     10e86cf9-f8b5-3b6b-aa25-cdc526774664.roa (raw, json)
Hash identifier:          Qu8o7aY//N2mYjOXudjqIiwMtiDSCQ5mQnlALGa9CjU=
Subject key identifier:   29:75:5A:37:02:71:ED:E8:49:64:2A:8F:EE:E9:28:E9:ED:C8:F6:37
Certificate issuer:       /CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca
Certificate serial:       010D0C9F4328584A6C55DAABC75C1FC8AF939F00
Authority key identifier: BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/10e86cf9-f8b5-3b6b-aa25-cdc526774664.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     399575
IP address blocks:        206.204.234.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:da:ab:c7:5c:1f:c8:af:93:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=10fba1e6-45fc-4622-8df8-ca894e0b0e92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b3:54:74:bf:2c:88:fd:c3:3b:5d:0c:07:f3:
                    04:93:fb:4b:f0:75:0a:65:47:94:3e:78:0d:cc:b5:
                    04:a4:d3:1d:fd:12:ca:54:a0:22:fe:e6:15:75:7c:
                    1c:76:fd:70:0d:29:4e:4a:95:ef:1b:35:34:7d:64:
                    c8:45:85:c5:a7:22:2c:bb:09:c0:77:63:53:77:7c:
                    89:d2:21:81:e9:19:ef:a9:c3:7f:59:7c:80:cf:af:
                    36:e4:54:68:f6:44:1e:2e:c4:f7:86:b7:cb:47:70:
                    cd:fe:90:c2:27:d8:47:75:6d:46:6f:4f:9e:73:b7:
                    77:c7:02:8e:f0:55:69:8f:0c:b3:98:a5:2f:8e:6b:
                    c0:e2:2c:e6:a4:bf:50:42:83:01:6c:3b:06:7d:a0:
                    d0:70:bf:d0:60:58:0d:61:1c:34:6f:ce:33:29:f5:
                    18:8d:91:92:03:63:52:e7:b1:9d:f8:68:62:66:d2:
                    9c:ca:76:d0:fb:21:0d:82:d8:09:11:b8:b6:9e:1c:
                    b7:f7:f0:cb:85:c2:a6:ef:23:fe:a7:69:d0:6a:13:
                    c0:c8:ec:68:0f:04:53:67:14:27:b7:bc:44:dc:d3:
                    30:c2:ae:e1:5d:11:41:6e:f9:37:2e:d4:9a:73:23:
                    91:3d:ae:d9:cd:3a:23:04:17:91:e5:58:0e:81:2e:
                    96:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:75:5A:37:02:71:ED:E8:49:64:2A:8F:EE:E9:28:E9:ED:C8:F6:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/10e86cf9-f8b5-3b6b-aa25-cdc526774664.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl

            X509v3 Authority Key Identifier:
                keyid:BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.204.234.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:fa:2e:b6:ca:c1:2f:ad:10:b1:7e:f0:8a:c0:8e:9c:66:00:
         46:f5:b7:34:b0:af:d6:54:f3:f4:55:08:04:dd:20:eb:f7:b6:
         c3:4f:d0:0d:0d:af:63:76:fa:8c:bd:5c:43:d5:33:31:45:db:
         b7:21:15:ce:8b:a9:21:ad:cc:fd:39:07:7d:89:c6:7f:18:05:
         10:03:27:03:99:59:6d:a2:bc:6e:55:af:da:e5:5e:df:48:14:
         fa:9f:00:36:46:4b:0a:70:4a:8f:26:1f:7a:a9:81:37:1c:4c:
         ff:39:36:1f:66:e2:20:cf:6b:db:31:72:33:a2:92:36:b2:94:
         f0:ca:a0:4d:37:e7:22:21:a9:e3:d9:10:79:c5:70:9f:7f:5f:
         69:10:e9:01:ae:d7:9b:a5:89:b5:20:c2:c7:d9:90:4c:42:1a:
         4b:89:80:31:00:de:38:28:f8:08:26:70:b6:9c:26:f4:fa:a3:
         68:67:ef:85:c2:32:58:b0:d2:51:bd:0d:6f:ea:44:78:b2:19:
         80:76:84:aa:35:20:60:ed:33:b5:c7:33:b6:b6:7d:75:81:ef:
         41:3c:b4:cb:48:7f:0d:07:03:4b:69:66:6d:aa:cd:ff:07:4e:
         6a:31:d5:44:ce:63:1c:1e:41:ac:b2:1c:c8:ee:ee:33:3f:4d:
         25:8d:8a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 02:52:01 2025 by rpki-client