Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f4884f0-11e1-3c9e-9803-23e4d0e8a2c0.roa
File:                     0f4884f0-11e1-3c9e-9803-23e4d0e8a2c0.roa (raw, json)
Hash identifier:          mHJLg1M/0HT9l84NwzEhdkzw9KFVlN/DZncnbTfiYJ0=
Subject key identifier:   02:FC:FF:F7:DB:F3:B9:48:65:1D:5D:79:F4:EC:57:45:47:8C:73:C7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A71EB35464DBABB744DE13000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f4884f0-11e1-3c9e-9803-23e4d0e8a2c0.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     33491
IP address blocks:        69.252.253.192/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:35:46:4d:ba:bb:74:4d:e1:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=b431b953-0f3f-475c-8d96-3128b5e67864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cd:73:5a:82:08:ee:4c:49:eb:97:d6:9b:76:
                    3c:87:59:77:ad:0d:1d:c5:e4:49:2e:0d:12:7f:34:
                    be:82:4c:67:d0:86:90:83:08:35:96:ec:4a:1e:16:
                    a9:1f:d1:95:a4:8a:64:4f:54:4c:5f:14:ca:ce:b8:
                    f7:f3:4e:0a:33:1b:a6:32:f0:3b:6d:bd:b2:61:93:
                    da:bd:0f:6b:48:91:5c:a5:2e:7d:5d:28:55:c1:d8:
                    53:1d:5f:95:fa:0e:d4:57:da:fb:5b:1f:30:8a:ff:
                    9b:67:ca:b6:ed:75:02:a8:0d:b2:ac:0f:fa:d4:41:
                    c2:f8:27:bb:19:95:64:64:d6:e9:42:d3:bb:31:0d:
                    53:e4:87:d4:d3:76:74:fe:1c:1c:5d:14:c7:25:46:
                    b1:06:d0:48:03:63:f9:cd:cc:70:dd:ce:c5:06:b5:
                    1b:73:8a:0d:f0:b3:72:2e:5e:2a:cb:b8:54:59:84:
                    d5:b4:ad:2d:49:38:89:f4:f4:75:d8:39:fb:73:c3:
                    78:21:f8:29:59:54:67:54:8d:5d:74:cc:c9:5b:59:
                    9c:1a:3e:24:cb:8a:88:8b:3a:62:f0:bb:00:d7:a3:
                    50:7b:89:1b:b6:e9:4a:19:4e:54:f1:cb:fb:b1:37:
                    c9:38:f8:eb:67:17:0a:cf:99:b9:e9:db:a3:ba:9d:
                    60:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:FC:FF:F7:DB:F3:B9:48:65:1D:5D:79:F4:EC:57:45:47:8C:73:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f4884f0-11e1-3c9e-9803-23e4d0e8a2c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.252.253.192/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:9b:d8:86:19:51:92:ce:a2:44:54:87:c2:d8:31:3e:cb:35:
         dd:7b:28:5a:cf:1d:2c:a7:55:42:4e:25:c9:66:0f:3d:55:63:
         7e:d4:07:1b:f4:71:0d:6c:3a:91:12:19:43:48:a2:74:11:d7:
         23:67:b0:c6:4f:9a:d8:7b:d6:d5:fd:a7:ed:22:f6:44:fc:6f:
         8b:cf:2b:d3:02:ef:bc:43:17:22:a2:cb:42:ff:3a:83:b8:f8:
         8a:b9:84:bc:cd:98:7b:2e:4b:0f:47:a2:b7:9f:49:c6:eb:dc:
         cf:f9:83:b9:77:0b:08:66:e2:6f:60:c7:8f:4f:ac:74:2d:a8:
         79:d6:9d:4d:7f:4b:81:eb:29:e3:5d:21:ec:50:c5:4f:24:f6:
         86:68:d6:07:39:93:63:16:87:8c:a4:7a:01:d7:28:4e:88:b8:
         d1:c1:9d:6b:df:55:b1:42:a3:b0:69:65:1a:6a:f7:c4:ac:7e:
         32:74:5a:36:47:f5:2c:66:f1:e5:db:33:af:8b:f8:e6:3b:80:
         1f:e1:af:f3:77:0a:67:86:d5:23:32:ce:d2:c9:4c:0a:13:07:
         47:b3:63:19:9c:dc:ff:f3:9a:dc:1a:60:52:1a:f4:bb:e7:a8:
         3d:11:2d:05:46:d3:4d:c2:ac:23:f9:83:e0:1d:42:60:06:0e:
         95:e5:ef:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:12:11 2025 by rpki-client