Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6c4d41f-6c86-43b8-a910-ebc34abe899d/8e55defb-5d8b-3aca-a9bd-a9e0a68bbd93.roa
File:                     8e55defb-5d8b-3aca-a9bd-a9e0a68bbd93.roa (raw, json)
Hash identifier:          yBkxKfqKVvefPebJ6r+Iml0YME/YQ5zbsYvIclx+36I=
Subject key identifier:   AE:60:73:7A:3A:36:8F:74:D5:21:A2:7A:60:68:75:9A:F5:57:B3:0E
Certificate issuer:       /CN=f6c4d41f-6c86-43b8-a910-ebc34abe899d
Certificate serial:       010D0C9F4328584ACFF0E0EF95130B975F125D80
Authority key identifier: 3B:D6:B1:5D:6A:E5:F6:85:DC:E4:5B:CC:F7:F3:FE:88:C4:BC:35:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6c4d41f-6c86-43b8-a910-ebc34abe899d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6c4d41f-6c86-43b8-a910-ebc34abe899d/8e55defb-5d8b-3aca-a9bd-a9e0a68bbd93.roa
Signing time:             Sun 10 Aug 2025 17:17:01 +0000
ROA not before:           Sun 10 Aug 2025 17:17:01 +0000
ROA not after:            Sat 08 Nov 2025 18:17:01 +0000
asID:                     26531
IP address blocks:        172.84.0.0/18 maxlen: 18
                          199.182.52.0/22 maxlen: 22
                          205.233.93.0/24 maxlen: 24
                          206.130.178.0/24 maxlen: 24
                          2606:e000::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6c4d41f-6c86-43b8-a910-ebc34abe899d/f6c4d41f-6c86-43b8-a910-ebc34abe899d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6c4d41f-6c86-43b8-a910-ebc34abe899d/f6c4d41f-6c86-43b8-a910-ebc34abe899d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6c4d41f-6c86-43b8-a910-ebc34abe899d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cf:f0:e0:ef:95:13:0b:97:5f:12:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6c4d41f-6c86-43b8-a910-ebc34abe899d
        Validity
            Not Before: Aug 10 17:17:01 2025 GMT
            Not After : Nov  8 18:17:01 2025 GMT
        Subject: CN=b23211b9-f77f-4090-8c3c-dc9522c12680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e1:56:57:8a:db:82:05:72:ac:01:5d:01:e8:
                    de:d9:1c:af:1c:c6:4a:10:a2:d4:36:8a:26:24:00:
                    81:c7:51:0c:20:46:cb:c8:dd:31:b9:5f:66:aa:f2:
                    ee:59:26:40:91:1c:3e:c2:78:6c:42:b7:8f:be:73:
                    77:16:72:c6:fa:1e:2a:4b:d3:41:cf:16:ee:25:f3:
                    f6:ec:4a:54:82:50:da:cf:97:ba:cb:af:e6:d3:7f:
                    08:e3:73:6e:d6:e8:88:e1:b2:b4:bd:04:c2:7e:1c:
                    07:49:73:1f:78:5a:59:bc:85:ad:be:9b:e3:af:4f:
                    bb:ce:ca:05:fc:76:af:f2:fe:60:57:d6:7a:1c:07:
                    c8:d0:0c:f6:24:71:67:0c:7c:7e:74:fb:ba:24:1a:
                    d6:f7:4c:d4:a4:50:d2:78:bf:4e:4f:96:02:53:ab:
                    76:51:4f:9a:3e:41:62:86:9c:25:38:54:56:d1:37:
                    08:53:39:62:a2:3d:b6:1f:57:45:d0:a3:2a:04:f1:
                    84:dc:bd:d5:42:40:ed:2e:6f:59:64:1b:87:0b:a5:
                    76:2e:85:0e:b8:fa:f1:4f:a3:aa:0a:ca:e6:fe:b3:
                    d3:73:76:be:11:6a:64:f8:6d:0a:d9:13:68:74:52:
                    fe:88:7c:57:e2:0d:08:af:a8:7c:f3:2b:fe:41:41:
                    97:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:60:73:7A:3A:36:8F:74:D5:21:A2:7A:60:68:75:9A:F5:57:B3:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6c4d41f-6c86-43b8-a910-ebc34abe899d/8e55defb-5d8b-3aca-a9bd-a9e0a68bbd93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6c4d41f-6c86-43b8-a910-ebc34abe899d/f6c4d41f-6c86-43b8-a910-ebc34abe899d.crl

            X509v3 Authority Key Identifier:
                keyid:3B:D6:B1:5D:6A:E5:F6:85:DC:E4:5B:CC:F7:F3:FE:88:C4:BC:35:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6c4d41f-6c86-43b8-a910-ebc34abe899d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.84.0.0/18
                  199.182.52.0/22
                  205.233.93.0/24
                  206.130.178.0/24
                IPv6:
                  2606:e000::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:df:0e:20:10:69:40:64:9a:72:0d:07:41:4d:b6:92:d2:ad:
         51:74:cd:ca:a4:c8:c7:0b:5c:e5:58:e8:20:bb:b8:85:af:57:
         ee:8b:ad:cb:48:1d:f9:46:ba:ae:b6:04:f3:9d:a2:2d:50:3b:
         4f:bb:51:5e:b1:2f:30:a9:13:5a:10:06:cf:7d:44:21:7d:bd:
         51:95:2f:9f:38:bc:9f:63:d0:cd:70:75:df:2c:1f:c3:ee:e3:
         48:69:cf:d3:32:a7:e4:7c:dd:44:67:27:80:5e:9b:4d:f2:48:
         44:f7:fd:40:ca:d2:6c:d7:ba:0c:b6:62:21:9c:7e:dd:22:64:
         c6:a4:42:b3:c2:0e:36:36:a4:de:f7:4e:2e:eb:b2:ea:ff:f2:
         21:26:dd:89:55:b3:d0:ab:88:e4:e3:34:02:08:45:e0:6d:ea:
         70:b0:88:5b:f9:7e:9d:3c:64:6b:d9:18:6e:db:6e:d8:31:d6:
         1c:12:a2:21:9b:92:a8:7f:a0:a7:b5:de:f9:f8:d4:35:32:1c:
         6d:6b:13:a6:a5:e0:52:86:09:19:c0:de:d7:20:c1:9d:ba:69:
         e5:cf:08:dc:de:dd:f5:71:d6:77:66:8c:b2:ab:67:cb:72:1a:
         e6:5a:f7:b0:88:6e:9b:38:5c:4e:7f:69:46:81:7f:c6:e7:6a:
         fc:af:ae:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:50:14 2025 by rpki-client