Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/a61681db-9c2d-39f4-ae56-91f2600f6136.roa
File:                     a61681db-9c2d-39f4-ae56-91f2600f6136.roa (raw, json)
Hash identifier:          +LTnBN+01pcUWapg4JRo9gvsCj/Ex/X/fVy4wwwfjNU=
Subject key identifier:   BA:5E:7F:AA:87:EB:C6:7A:CF:B8:F3:6F:64:4A:7A:F7:1E:15:B2:23
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584B5DD1E0CC1A895EBC02A30D38
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/a61681db-9c2d-39f4-ae56-91f2600f6136.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     262287
IP address blocks:        198.145.67.0/24 maxlen: 24
                          209.20.132.0/24 maxlen: 24
                          209.20.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d1:e0:cc:1a:89:5e:bc:02:a3:0d:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=702a7d3f-4692-483b-a6e0-f8146dba72af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:18:c5:23:f0:7c:2d:38:29:c2:a7:1c:95:7a:
                    06:c7:8f:e7:24:a6:04:70:4b:0a:96:61:f6:cb:d8:
                    6f:be:91:c6:4c:24:b8:30:98:da:2b:b7:a7:99:ec:
                    e9:e8:6b:1a:b3:14:e4:d2:b0:bb:1f:ad:5c:99:17:
                    dc:b1:41:04:12:3a:cc:e5:7c:f9:ca:3f:59:2b:db:
                    b6:7e:37:77:f4:7a:dd:73:dd:06:b2:58:d7:17:0b:
                    60:a4:b5:78:c3:4e:8d:a0:6b:c1:62:ae:dc:10:a3:
                    01:fb:26:f5:d4:b9:32:6f:07:be:a6:c8:14:76:bc:
                    74:9a:5d:6b:30:e0:56:38:ac:79:81:46:24:8b:0f:
                    e5:52:66:f7:7c:79:e7:99:3a:cd:fb:4e:63:f6:c4:
                    72:c6:dd:9e:b6:92:a5:34:b0:9e:27:d2:85:5f:12:
                    dc:96:e4:32:72:6f:48:01:6a:38:20:05:24:56:ce:
                    71:14:45:6f:ea:b2:09:88:60:c2:c0:85:ec:53:f2:
                    f9:63:15:6f:c9:c6:ec:0a:32:59:90:c8:17:db:7b:
                    aa:b8:84:7b:cf:dd:8d:71:7d:b3:75:c5:ea:80:01:
                    3b:9d:f8:e2:d0:18:34:df:f7:54:45:9c:d2:0f:88:
                    e4:b6:28:df:be:a1:b8:d3:5a:ce:37:7e:9e:c7:cc:
                    eb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:5E:7F:AA:87:EB:C6:7A:CF:B8:F3:6F:64:4A:7A:F7:1E:15:B2:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/a61681db-9c2d-39f4-ae56-91f2600f6136.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.67.0/24
                  209.20.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:e1:78:65:58:8d:97:ed:cf:6e:3c:64:8c:cc:59:a7:9e:6a:
         21:fb:fc:7a:5c:71:21:f0:90:5a:71:2e:83:d9:f3:9f:24:52:
         9a:1e:c3:93:e4:fa:69:d0:aa:13:80:e2:d2:d4:34:f7:92:95:
         a8:f0:9c:b5:87:52:93:3b:3c:a8:d7:39:c5:d1:cd:fd:df:3a:
         6e:d2:68:ca:d1:14:60:5c:8e:be:8f:96:a0:45:78:3c:86:86:
         ba:d9:cf:ab:a4:e1:76:ce:c6:aa:a9:b5:a1:42:ca:52:14:d8:
         07:1a:5e:c7:f6:1d:1a:fa:c8:d6:f6:c8:2a:d6:93:62:12:f5:
         f0:36:52:62:1e:03:07:4d:b7:fa:71:56:d7:d3:86:c8:17:68:
         ea:ca:de:7a:76:0f:83:ea:af:81:9f:27:dc:b8:a2:6e:02:cf:
         a0:6f:1a:0b:82:41:40:45:fd:72:e6:e7:c1:24:a4:45:a5:70:
         7c:c5:68:54:a5:29:6b:73:71:c0:53:18:93:f9:03:de:0e:e9:
         19:5c:4f:4b:40:58:40:6a:00:20:13:51:ca:8c:57:cb:47:6e:
         42:30:04:59:31:dd:24:27:60:19:2c:06:d2:06:a8:11:9a:26:
         77:92:4a:c8:87:65:f6:c9:2f:a4:92:09:ba:0c:89:c8:35:bd:
         1f:34:8f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 05:53:09 2025 by rpki-client