Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/4b355674-22ec-36cf-b12c-db24d0a2320a.roa
File:                     4b355674-22ec-36cf-b12c-db24d0a2320a.roa (raw, json)
Hash identifier:          XYYy7IXxjNkm8/r34z+j3+OwqsPhxes+aT062ZiaRt8=
Subject key identifier:   4F:91:9E:B2:0B:A9:47:F3:CB:C3:16:CC:10:0B:BB:D6:CD:CA:12:31
Certificate issuer:       /CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca
Certificate serial:       010D0C9F4328584AF52156A8795C5B221BCCF900
Authority key identifier: BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/4b355674-22ec-36cf-b12c-db24d0a2320a.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     399575
IP address blocks:        216.205.106.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:56:a8:79:5c:5b:22:1b:cc:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=9066608b-5f74-4a3a-9bfd-65c763bbbde6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cd:2b:b0:e1:1e:0c:33:04:c0:65:2d:5a:d6:
                    ac:3d:e8:d9:fa:cc:9b:41:f1:c8:13:79:b7:3e:fe:
                    34:7f:54:ca:a4:c2:5a:d0:b3:89:70:f7:67:5a:d9:
                    91:c1:4e:a9:65:cd:4c:64:d9:71:c9:5f:15:30:3d:
                    44:fe:aa:71:30:b7:91:74:91:e7:d6:7c:5a:a6:ee:
                    bc:47:00:2f:fe:35:0c:4a:9e:51:19:99:43:68:8b:
                    e2:27:32:20:ed:47:f7:14:29:f9:63:ef:04:be:27:
                    c1:81:1d:64:5c:2d:95:4b:c3:2a:43:38:14:f8:38:
                    c9:15:49:57:69:20:00:12:9e:c8:2b:c0:00:63:94:
                    59:28:b7:b0:7f:d7:73:91:25:47:82:f0:45:14:cc:
                    ee:e6:7b:31:e5:2e:83:81:3c:24:b0:77:57:67:38:
                    94:65:69:aa:f3:9c:7c:07:38:5f:0c:ff:04:90:47:
                    a2:06:fb:cb:a0:47:3d:e6:74:d1:0f:86:8a:96:fa:
                    6a:65:38:3c:64:5d:a1:f1:55:16:c8:e5:e7:e6:a7:
                    86:f4:59:0a:d4:23:98:d3:a9:c6:6f:96:c1:f2:56:
                    86:3e:58:40:50:a3:23:ce:58:61:b5:54:3b:b8:07:
                    af:1c:0f:17:35:47:bc:1f:3d:fc:a3:db:81:27:75:
                    f7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:91:9E:B2:0B:A9:47:F3:CB:C3:16:CC:10:0B:BB:D6:CD:CA:12:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/4b355674-22ec-36cf-b12c-db24d0a2320a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl

            X509v3 Authority Key Identifier:
                keyid:BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.205.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:2f:65:7b:49:90:bf:b7:b1:c6:8e:c8:ce:4a:8f:69:f8:38:
         76:64:ff:69:c3:de:df:63:dd:71:3f:76:4e:bd:61:72:d0:39:
         bd:b0:ec:85:0e:43:a4:75:2c:bd:ad:9a:f9:37:9c:23:46:09:
         e8:f2:13:15:13:a5:4a:dd:74:36:12:a6:9b:f3:a3:99:ec:62:
         4c:c2:c5:9a:3d:71:77:03:1a:0d:a4:ea:0e:6b:2e:f2:a2:bc:
         a3:49:79:45:9c:32:dd:4f:5c:a1:51:f7:f4:a7:fb:c4:e1:c8:
         a7:42:51:02:8a:ec:8d:32:e2:04:27:ac:07:a8:75:6f:c5:c8:
         11:9d:7f:f3:7c:3c:bb:5f:84:b1:f9:2f:9e:ed:c9:2a:ef:0c:
         4f:77:da:5a:22:b5:c7:e2:84:71:cc:ac:c7:2c:1d:2e:70:24:
         5d:14:8a:03:2c:2a:9b:a3:f2:df:f1:65:69:b5:a2:bd:c6:06:
         a9:9a:1d:c6:3c:c5:d6:b2:b1:8b:3f:3d:32:4d:b1:3c:95:1c:
         f9:f0:1b:b2:61:50:f9:50:63:d9:88:fe:a8:5a:9f:42:9b:c2:
         d6:2b:f8:43:8c:ec:31:32:78:93:47:be:be:91:2f:d4:33:5f:
         95:48:41:c8:99:47:a5:13:85:06:71:da:cc:c8:3e:92:5a:91:
         41:90:70:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 25 15:07:46 2025 by rpki-client