Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/80dc5107-33a8-33fa-9c7b-83df45fe7ea7.roa
File:                     80dc5107-33a8-33fa-9c7b-83df45fe7ea7.roa (raw, json)
Hash identifier:          BzyReBaQoQ8cTuLLnEzWP9MASlOHGFf5d8fMIrIfAuY=
Subject key identifier:   C6:B7:BD:D1:D8:21:CE:70:F5:95:9E:91:B7:D8:AC:FC:6F:5A:6F:F7
Certificate issuer:       /CN=0f950b17-8345-41e7-bf75-5481729a0012
Certificate serial:       010D0C9F4328584AD9939BCBA135C284800A9400
Authority key identifier: 56:3C:2B:FC:3E:FC:B4:79:C4:82:D7:6A:DE:DE:73:30:B0:B3:B6:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/80dc5107-33a8-33fa-9c7b-83df45fe7ea7.roa
Signing time:             Thu 14 Aug 2025 04:08:35 +0000
ROA not before:           Thu 14 Aug 2025 04:08:35 +0000
ROA not after:            Wed 12 Nov 2025 05:08:35 +0000
asID:                     32723
IP address blocks:        206.245.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d9:93:9b:cb:a1:35:c2:84:80:0a:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f950b17-8345-41e7-bf75-5481729a0012
        Validity
            Not Before: Aug 14 04:08:35 2025 GMT
            Not After : Nov 12 05:08:35 2025 GMT
        Subject: CN=ff60de85-12d2-4bca-b4a1-6657bb4b710c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e1:e2:a3:99:e2:12:2b:f9:4d:83:00:b0:5d:
                    87:3f:b7:99:50:e4:19:37:ab:85:f5:4b:d9:72:43:
                    b4:2d:67:0b:9d:2b:42:02:2c:f5:ae:2d:33:b8:11:
                    bd:f9:29:4d:98:fb:28:85:f1:f1:f1:ba:aa:d8:47:
                    1c:15:d3:58:73:c0:e8:c6:2a:c2:d0:aa:b0:5f:cc:
                    00:fb:8e:e5:33:2c:0c:e0:4c:80:fb:2e:e6:fc:24:
                    5b:dd:90:85:fa:2a:5a:10:7f:5d:57:75:3c:1a:b6:
                    df:f5:4d:18:fb:b5:d6:50:2a:4d:c1:c9:a5:b2:52:
                    a2:2b:79:b0:ad:e2:2a:a8:06:77:a5:47:02:b2:e4:
                    1c:ba:58:85:f5:14:b7:03:2d:a0:42:a3:f9:65:eb:
                    d0:d1:65:37:73:1f:70:71:6c:10:36:22:7a:ce:4d:
                    cc:7d:ea:99:ab:aa:35:b4:5c:04:48:10:cc:ea:dd:
                    bb:a6:55:ec:ba:6c:bc:30:f7:20:4a:d1:e1:27:b5:
                    99:9e:5d:5e:e9:1d:2b:f2:0f:cc:34:cb:ce:ee:d7:
                    64:b1:9b:76:e4:66:48:fe:3a:6a:b8:b1:4f:6f:4c:
                    54:bd:15:f9:a7:31:a2:a4:9b:3c:1e:c5:3b:91:20:
                    57:d7:0f:90:1f:28:0d:a9:a6:56:7d:d0:9d:e8:5f:
                    96:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:B7:BD:D1:D8:21:CE:70:F5:95:9E:91:B7:D8:AC:FC:6F:5A:6F:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/80dc5107-33a8-33fa-9c7b-83df45fe7ea7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.crl

            X509v3 Authority Key Identifier:
                keyid:56:3C:2B:FC:3E:FC:B4:79:C4:82:D7:6A:DE:DE:73:30:B0:B3:B6:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.245.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:cb:0f:94:14:33:80:22:ae:c7:32:f2:5f:68:68:49:9f:88:
         8c:0f:bd:c8:04:9c:c3:4d:cd:b1:92:9a:d3:f6:42:f0:68:01:
         25:18:b2:c2:01:c7:89:94:2a:21:97:8d:86:98:5c:19:20:59:
         5f:92:4c:48:56:11:53:9d:76:4d:b9:99:78:9c:bf:b4:3e:72:
         e5:e0:23:1f:46:49:2c:7e:6f:5f:ce:07:bb:4a:75:1d:61:5f:
         fa:d4:af:88:ac:d9:9c:8e:eb:77:88:5d:9e:54:31:77:6d:07:
         72:cf:ef:84:2d:10:b9:c6:dd:18:43:14:0b:b0:37:d2:da:c0:
         ff:b5:e0:20:2f:a9:27:9b:aa:f2:38:0d:88:09:4f:05:82:a0:
         3a:0a:98:ca:fd:57:40:2f:07:31:67:24:89:14:62:2b:cd:3a:
         08:ad:95:97:09:38:cc:b8:1b:de:a7:12:94:d8:98:f2:ba:6b:
         e8:0e:59:d1:1a:93:80:e2:7b:1f:3d:a4:53:4f:68:81:6f:a9:
         63:88:95:d7:ac:88:b0:69:48:38:d3:d1:29:b4:0c:ef:10:42:
         91:f1:9c:6c:aa:f3:16:38:c5:31:82:f5:29:37:81:ab:88:10:
         ca:8a:cd:d6:91:73:da:df:6f:94:54:c9:c9:ea:e1:70:a6:2e:
         d6:c4:8e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 23:08:25 2025 by rpki-client