Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b68d593-6e81-44a9-9e8b-fede7b5621ed/f1e3b3f0-6eca-33a6-9ba1-c95d919853ad.roa
File:                     f1e3b3f0-6eca-33a6-9ba1-c95d919853ad.roa (raw, json)
Hash identifier:          ebreLIYa8TG+2RMQZ0cVIPbWRItuD8Eco3kk9OETvDg=
Subject key identifier:   46:73:77:48:BB:43:99:D6:03:92:15:11:B5:A7:82:6D:0F:6E:CA:23
Certificate issuer:       /CN=5b68d593-6e81-44a9-9e8b-fede7b5621ed
Certificate serial:       010D0C9F4328584B0CDC01E0235B646C5DE8A700
Authority key identifier: 06:CF:E3:01:1E:92:B2:C6:66:CD:51:98:4D:60:12:A8:51:9D:08:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b68d593-6e81-44a9-9e8b-fede7b5621ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b68d593-6e81-44a9-9e8b-fede7b5621ed/f1e3b3f0-6eca-33a6-9ba1-c95d919853ad.roa
Signing time:             Mon 01 Sep 2025 13:00:40 +0000
ROA not before:           Mon 01 Sep 2025 13:00:40 +0000
ROA not after:            Sun 30 Nov 2025 14:00:40 +0000
asID:                     40943
IP address blocks:        199.167.208.0/22 maxlen: 22
                          208.91.184.0/22 maxlen: 22
                          2604:3d40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b68d593-6e81-44a9-9e8b-fede7b5621ed/5b68d593-6e81-44a9-9e8b-fede7b5621ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b68d593-6e81-44a9-9e8b-fede7b5621ed/5b68d593-6e81-44a9-9e8b-fede7b5621ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b68d593-6e81-44a9-9e8b-fede7b5621ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Sep 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0c:dc:01:e0:23:5b:64:6c:5d:e8:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b68d593-6e81-44a9-9e8b-fede7b5621ed
        Validity
            Not Before: Sep  1 13:00:40 2025 GMT
            Not After : Nov 30 14:00:40 2025 GMT
        Subject: CN=be19e438-53a7-4cf4-92f7-bf732a1e0ab2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:34:a3:48:c6:cd:3e:7b:7c:d0:44:f9:09:24:
                    6c:d0:ea:0f:30:e2:33:98:33:6c:5e:8c:88:af:af:
                    61:f8:1d:ad:c0:38:fd:84:51:44:50:ef:75:35:ce:
                    6c:11:ef:20:e3:52:ab:cd:07:8b:08:34:29:c5:fe:
                    7b:53:c7:8c:96:80:a1:fc:b9:a7:5c:aa:ab:96:6d:
                    45:de:7a:73:bb:c5:5e:ec:d8:7b:13:e6:c6:7e:2e:
                    a4:63:53:68:0b:04:c6:2e:8d:6c:42:3f:2d:49:9c:
                    5c:e6:0e:3b:f9:3c:b0:1a:d9:88:7c:6b:c6:b8:37:
                    70:36:e8:13:52:fe:b7:bb:8a:3a:cc:84:ba:d4:34:
                    ff:b7:15:cd:f7:07:df:b3:23:5c:4c:1d:b0:e4:6d:
                    21:53:73:3d:84:db:16:7d:50:d2:fe:a4:b6:19:bd:
                    29:16:1d:87:34:d9:59:ca:0c:a1:96:2c:de:0a:1b:
                    84:68:9d:8e:4d:bc:7b:e3:5b:f5:fc:0c:c4:56:58:
                    37:09:0a:0f:69:ee:7d:90:65:da:d7:ff:b9:74:59:
                    81:af:c4:fd:55:6b:0c:cf:18:7d:7f:6e:e2:fe:c8:
                    0f:19:16:dc:6a:f9:f9:2f:0a:7b:e8:9e:85:c6:ef:
                    2b:53:37:81:9c:77:aa:91:0b:4f:10:25:07:b8:32:
                    87:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:73:77:48:BB:43:99:D6:03:92:15:11:B5:A7:82:6D:0F:6E:CA:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b68d593-6e81-44a9-9e8b-fede7b5621ed/f1e3b3f0-6eca-33a6-9ba1-c95d919853ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b68d593-6e81-44a9-9e8b-fede7b5621ed/5b68d593-6e81-44a9-9e8b-fede7b5621ed.crl

            X509v3 Authority Key Identifier:
                keyid:06:CF:E3:01:1E:92:B2:C6:66:CD:51:98:4D:60:12:A8:51:9D:08:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b68d593-6e81-44a9-9e8b-fede7b5621ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.167.208.0/22
                  208.91.184.0/22
                IPv6:
                  2604:3d40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:f0:66:73:8f:4b:62:dd:ad:cf:75:c7:a2:34:21:4d:4f:31:
         c8:bc:93:95:a6:8b:4d:75:d2:e1:33:ff:1b:67:5d:1d:b3:b5:
         b3:b8:13:20:9c:76:4f:36:92:fe:58:ce:41:70:33:31:38:f5:
         8c:b4:36:57:99:8a:e3:ea:49:af:5c:74:51:f1:48:0a:c8:4b:
         36:5d:5a:5b:0f:f5:f4:ee:1b:46:71:dd:95:f6:db:58:6b:9b:
         b6:a5:5b:d5:d8:8c:02:de:8a:a4:98:4d:9d:c5:bd:70:10:95:
         31:d4:13:a2:12:ee:0a:e2:bc:18:46:83:d0:e7:c1:d1:8e:7f:
         3a:e3:0a:67:17:74:e0:02:65:dc:c4:13:51:ee:74:18:d5:dc:
         71:dc:cc:c8:2c:d9:4d:64:31:c7:e9:11:57:aa:94:69:31:b8:
         07:90:85:13:70:89:a1:6e:36:4b:34:c9:ee:20:46:1b:ca:c8:
         a9:9f:c0:03:10:66:2d:2d:c0:0b:00:f9:ff:e0:01:17:f7:34:
         83:e4:e6:c8:35:ac:87:c6:77:67:db:77:6d:1b:d5:a4:e1:92:
         80:91:e3:38:fb:3a:c6:9a:37:19:44:c4:9b:51:26:9a:9e:c8:
         b4:8b:6e:e1:b0:db:14:85:30:68:48:b9:a1:80:93:e5:15:e8:
         3f:02:72:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 21:04:53 2025 by rpki-client