Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/4a514b4a-2e45-3def-b73d-08af34648514.roa
File:                     4a514b4a-2e45-3def-b73d-08af34648514.roa (raw, json)
Hash identifier:          CBR4XlqNSCQ4+8UDHBuEdLObGz6vOVD8eFulc9lq7uw=
Subject key identifier:   DB:63:FD:8F:4C:B0:73:B2:82:CC:7A:B2:B6:3A:22:50:76:88:57:17
Certificate issuer:       /CN=69686900-f201-4b2c-a1c7-afb725abe47f
Certificate serial:       010D0C9F4328584B3987066491585D9B7EB5B868
Authority key identifier: 46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/4a514b4a-2e45-3def-b73d-08af34648514.roa
Signing time:             Wed 17 Sep 2025 13:00:41 +0000
ROA not before:           Wed 17 Sep 2025 13:00:41 +0000
ROA not after:            Tue 16 Dec 2025 14:00:41 +0000
asID:                     11620
IP address blocks:        207.173.128.0/20 maxlen: 20
                          209.210.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:39:87:06:64:91:58:5d:9b:7e:b5:b8:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69686900-f201-4b2c-a1c7-afb725abe47f
        Validity
            Not Before: Sep 17 13:00:41 2025 GMT
            Not After : Dec 16 14:00:41 2025 GMT
        Subject: CN=3f27a7e0-11fa-44b4-b75d-04158c2d96a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:91:15:2c:ad:54:6e:93:c7:c9:44:73:25:42:
                    85:13:19:a0:91:25:46:21:2c:70:b9:cd:bb:c3:ca:
                    23:3a:1f:02:b3:29:ff:9c:fa:95:b8:0c:70:10:22:
                    7b:01:8e:0e:c5:eb:cb:58:b2:de:81:35:94:da:80:
                    5b:14:2d:77:2f:63:e6:24:51:e7:cd:49:1c:49:99:
                    f7:2d:83:a2:e2:fa:45:45:3e:3e:be:7d:f2:34:a6:
                    a9:6a:19:69:1f:ad:72:ba:3b:f4:35:91:0d:80:03:
                    cf:a6:f4:d8:6c:c8:8c:d6:db:26:77:7b:66:03:cd:
                    25:f4:d7:46:4c:e6:a6:85:f2:f7:9b:91:de:74:1a:
                    61:c6:e4:f4:00:97:11:60:32:bd:c0:b0:e9:9f:64:
                    44:a2:94:d7:f3:ce:2b:cb:d8:89:b5:79:d0:e9:91:
                    fb:b5:bd:89:21:6a:9b:ca:7d:1b:d5:1d:5f:1f:32:
                    2b:eb:cd:d7:b8:ee:6a:dd:25:32:82:00:f9:23:36:
                    ce:fe:c8:95:25:ec:b6:41:31:51:b7:69:67:be:da:
                    7e:38:94:62:bb:32:7e:7b:c0:e6:9f:4b:a2:ce:44:
                    54:3c:4c:b7:e5:93:4d:c9:7f:c5:21:4c:23:af:da:
                    6a:a3:07:7c:87:97:33:79:22:c4:66:d9:74:40:bb:
                    b0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:63:FD:8F:4C:B0:73:B2:82:CC:7A:B2:B6:3A:22:50:76:88:57:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/4a514b4a-2e45-3def-b73d-08af34648514.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl

            X509v3 Authority Key Identifier:
                keyid:46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.173.128.0/20
                  209.210.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:55:4f:63:1b:2b:60:28:7c:7f:4d:b7:0f:60:58:1e:de:00:
         ee:64:f2:57:51:93:72:17:e0:53:3f:de:4c:b0:c9:51:f9:46:
         cf:07:01:41:68:2d:5e:6f:8b:8e:94:8f:8e:b7:c6:16:3d:4e:
         be:d9:3f:59:9a:fe:f3:c2:a4:0e:2e:d0:c0:38:c0:a7:76:e0:
         2b:c5:89:d0:4a:b7:57:14:28:5f:4e:c3:7a:59:4b:22:c3:e2:
         3b:c5:cf:96:eb:93:de:f8:05:f4:ef:6c:ba:83:89:1b:93:6d:
         d1:24:54:ec:e8:1a:e2:d3:d3:8c:06:be:da:62:10:5b:32:d2:
         58:fe:96:9f:a8:20:37:33:c6:94:28:19:f0:60:d8:f8:ee:41:
         43:35:7b:3f:2d:ae:92:aa:18:ca:a5:1a:f3:fc:7e:9e:d9:b3:
         4c:43:e9:46:6c:3b:7f:23:a3:1d:0e:15:1a:26:58:b6:1b:99:
         57:d1:ff:e8:09:ff:30:0b:df:f1:c1:ec:03:21:f0:05:62:86:
         df:84:7f:08:40:0a:91:73:be:c8:c3:3c:ef:1e:a4:ed:b5:51:
         7a:26:fe:2a:64:e5:e2:7d:96:fd:d3:a8:69:f2:2b:5a:16:63:
         db:33:19:34:6b:8a:5f:2c:53:93:f2:44:54:0f:5c:27:31:17:
         99:38:88:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 06:10:19 2025 by rpki-client