Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/62f9355e-537e-3edc-ad09-9aeb898f1291.roa
File:                     62f9355e-537e-3edc-ad09-9aeb898f1291.roa (raw, json)
Hash identifier:          XubtewlUyDQUoStMU8DqZUD+qW1ciR4FEiOI4tbIILA=
Subject key identifier:   63:74:7A:C5:08:4A:7C:6B:1B:9A:F5:51:52:37:82:FE:22:0D:99:61
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584A4F05CE17ADA08316047A9800
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/62f9355e-537e-3edc-ad09-9aeb898f1291.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     16462
IP address blocks:        206.12.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:ce:17:ad:a0:83:16:04:7a:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=575ac515-d1d5-4cd7-9a1c-c25eb07d4980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:2b:5c:e6:30:bb:37:51:ca:e1:a0:23:81:65:
                    97:eb:4d:b7:8d:22:15:89:c5:5f:d1:f5:51:01:cd:
                    3a:8b:ab:73:57:1a:31:d0:89:21:da:3e:76:1b:87:
                    8e:fa:5d:8d:d5:34:7a:07:f0:d8:bc:c2:84:e3:0f:
                    4e:93:7e:62:2d:65:be:00:23:bd:c9:65:02:5e:3a:
                    51:e3:f2:ef:09:46:2a:9c:7d:be:1b:ca:74:45:69:
                    65:cf:cd:dc:2b:ff:ed:b0:6f:49:b9:79:72:73:3d:
                    5f:4b:71:f5:ba:37:71:52:36:58:47:45:33:97:f7:
                    79:7f:ab:89:bd:03:21:65:49:43:e1:a2:3b:62:ae:
                    39:73:a4:ad:1e:2e:45:e4:f6:70:c4:1e:3b:60:38:
                    de:98:31:25:94:64:a0:4f:93:0d:4f:25:30:ff:b2:
                    74:15:d2:77:9d:43:69:80:5f:31:c3:e8:7f:f1:a2:
                    f2:df:81:68:72:62:81:b5:50:89:54:5e:4b:3f:be:
                    be:bc:9d:3f:f6:c7:1f:e5:3c:4d:f5:15:95:11:8c:
                    6d:b6:d0:bd:e8:2d:69:7a:6a:e6:1d:92:98:50:f9:
                    d7:ac:f1:e4:9a:f7:ae:fc:77:da:a3:48:27:ee:45:
                    63:02:10:7c:59:4d:2b:91:4d:7f:72:97:36:b0:c8:
                    c2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:74:7A:C5:08:4A:7C:6B:1B:9A:F5:51:52:37:82:FE:22:0D:99:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/62f9355e-537e-3edc-ad09-9aeb898f1291.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:0e:a8:5b:c3:55:09:cb:7f:58:54:6f:50:6e:53:5c:d1:b3:
         8d:5d:dc:47:ef:3e:47:8a:f0:b0:e8:f1:d9:23:29:cb:28:60:
         ce:70:e7:90:42:b8:85:5c:c4:51:42:4e:0b:68:9a:ec:8f:96:
         2a:fd:ae:47:cf:3a:bd:10:96:29:af:ec:02:42:46:d0:07:ba:
         55:c1:1a:fb:ff:bf:13:01:21:74:4d:4e:27:95:2c:05:c6:70:
         36:0e:fa:12:47:c6:aa:f9:8c:98:b6:db:2b:05:0e:41:d9:ba:
         c5:67:16:42:eb:bb:fd:96:fb:3b:8d:42:c8:9a:02:a8:94:f2:
         11:59:84:12:37:96:e1:9f:c2:56:be:ab:9d:5c:82:3a:28:51:
         17:ef:7c:0c:5d:46:bd:4c:11:ba:2d:b8:05:b0:e8:0b:a4:e0:
         a3:8a:04:db:84:af:e7:d7:3e:ec:c5:d0:24:86:a5:ff:55:93:
         68:28:c2:9b:06:cc:a0:ec:24:b4:dd:a9:1e:7f:ff:e3:99:4c:
         79:75:8e:0d:a7:d6:e4:f7:12:37:c5:2e:3a:e7:1f:3f:54:b5:
         11:92:a2:fc:68:e0:41:74:54:28:30:43:42:cd:25:6b:61:a0:
         6d:a2:3d:53:d8:de:c0:e2:9d:f9:15:eb:d0:58:d2:2f:4e:81:
         d7:75:3e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 07:54:48 2025 by rpki-client