Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/cd344b44-ee6b-3d84-9102-8379a55d2623.roa
File:                     cd344b44-ee6b-3d84-9102-8379a55d2623.roa (raw, json)
Hash identifier:          kpfcvHPhLecND4tKhwuC4CU1ygh/BXwERlh4+JpTe8M=
Subject key identifier:   19:28:29:85:AB:59:06:DC:11:22:1B:32:27:1F:47:EA:FF:6F:4D:5A
Certificate issuer:       /CN=937a6fc8-35c3-4151-aa2e-2513420f9344
Certificate serial:       010D0C9F4328584B2A2C2ADB62A662D21CB16D70
Authority key identifier: 6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/cd344b44-ee6b-3d84-9102-8379a55d2623.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     13720
IP address blocks:        69.174.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:2a:db:62:a6:62:d2:1c:b1:6d:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=937a6fc8-35c3-4151-aa2e-2513420f9344
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=9d79a951-b706-4b61-9202-3f3251c80e2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8f:e7:b0:8f:3d:d8:b1:e0:6e:83:34:c6:de:
                    1b:01:e1:a9:fa:10:ad:71:f2:a0:3d:0e:a3:50:6c:
                    55:dd:39:72:d0:4d:18:2f:6a:1b:20:d8:b8:19:60:
                    ec:c4:34:49:a7:d4:b4:52:50:7c:d6:d0:6d:81:eb:
                    a0:80:b0:fa:cc:db:5b:6a:12:34:19:74:10:ba:b9:
                    ad:e3:be:d5:ed:19:d9:64:c4:b9:92:5f:c6:1f:f8:
                    30:87:8c:65:f0:71:94:e1:5b:db:4b:a5:1c:b5:5c:
                    c3:fe:eb:c1:a1:d7:a0:7e:7a:3d:73:ed:37:ba:1d:
                    7b:60:34:06:00:78:b3:61:ad:1d:af:58:eb:e7:74:
                    a1:60:02:42:54:be:b7:c9:30:e5:9d:c9:c4:68:b0:
                    fb:13:9f:71:95:99:58:bb:6b:10:bc:91:ec:a5:7d:
                    e2:b0:cf:f0:f4:33:24:ea:a4:30:23:10:ea:ca:e5:
                    20:5d:09:2d:8e:62:ec:48:77:e8:05:ed:75:cc:0a:
                    a6:ec:00:c6:a7:14:92:ca:67:0b:7a:96:63:df:a3:
                    39:d0:40:a4:5a:8f:3c:7c:bf:f2:3b:57:63:72:78:
                    ac:e6:70:e9:b3:ba:b3:c0:ed:fc:f8:a6:56:dd:68:
                    34:58:4a:c7:56:eb:9c:c4:89:0c:f1:68:b9:ad:6d:
                    f6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:28:29:85:AB:59:06:DC:11:22:1B:32:27:1F:47:EA:FF:6F:4D:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/cd344b44-ee6b-3d84-9102-8379a55d2623.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl

            X509v3 Authority Key Identifier:
                keyid:6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.174.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:1d:35:a3:1e:38:0c:c1:af:64:75:41:57:3c:de:9f:5c:20:
         c2:3c:02:39:50:31:9c:f8:ec:cf:53:65:f7:64:dc:ad:89:99:
         6b:1e:da:d4:24:58:28:16:9f:cc:64:22:89:65:da:1d:52:5b:
         da:52:73:c5:b6:bc:46:f4:30:4c:67:c7:88:48:08:d5:e8:66:
         07:35:69:c9:24:ce:86:89:8d:5c:6a:85:41:b2:cb:17:2d:3a:
         16:a5:d2:22:73:83:6a:f9:59:57:2e:d8:78:50:c0:5a:ea:60:
         ef:2b:93:e1:cc:2f:f2:4f:ec:73:42:31:4f:ad:61:1f:d2:c2:
         d4:0a:4d:4f:69:67:0d:8c:ac:99:af:97:3e:13:63:2c:d2:24:
         a1:fd:87:49:74:0c:96:7c:81:8c:8a:df:83:67:92:29:09:67:
         97:05:16:4d:f7:5e:9d:30:ed:ff:1c:e5:fb:ed:a4:aa:d0:de:
         b8:40:52:91:7f:2e:62:16:48:b7:97:c8:ab:f5:95:20:1a:fe:
         3c:3d:0f:9b:a5:aa:17:06:7c:ff:3a:bb:48:d2:38:16:6e:73:
         d9:af:75:63:d9:e6:f4:18:de:cb:b4:68:ca:2a:27:94:c4:48:
         e5:de:41:92:20:e7:ba:30:4b:fb:b2:a2:37:c5:bc:cf:7e:83:
         01:93:fb:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:47:10 2025 by rpki-client