Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/c1730c8f-6052-35c4-8aa7-0c45b33145b4.roa
File:                     c1730c8f-6052-35c4-8aa7-0c45b33145b4.roa (raw, json)
Hash identifier:          um2D8jM9WZswCOPOhKaUSPIJ8suwptsAJTbmKhFWcMM=
Subject key identifier:   20:14:8C:C6:6F:2E:21:55:66:41:9A:CA:C7:36:9E:39:14:EC:04:93
Certificate issuer:       /CN=590b174f-a815-4e24-9512-3236e7727928
Certificate serial:       010D0C9F4328584B1806D4D28142B61AF6C09500
Authority key identifier: D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/c1730c8f-6052-35c4-8aa7-0c45b33145b4.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     396479
IP address blocks:        69.72.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:d4:d2:81:42:b6:1a:f6:c0:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590b174f-a815-4e24-9512-3236e7727928
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=018d98e9-247f-49fd-8f21-4b81be01fe63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:92:87:7c:fc:3b:6c:8f:63:e3:8b:ba:5b:24:
                    8d:b3:9a:73:6b:d6:08:67:0d:80:f5:35:ca:99:93:
                    0e:eb:ba:e8:ae:ec:20:08:6f:ad:65:cf:a5:e6:93:
                    26:34:80:4e:1a:da:9d:09:47:74:a8:72:b2:88:e7:
                    a8:bc:01:52:c9:79:04:20:af:f0:c0:5c:26:8b:16:
                    54:23:ef:10:e2:b4:e8:c2:75:91:28:a8:3f:e8:e2:
                    b2:11:e6:b0:27:47:8b:8f:59:19:58:fb:66:54:57:
                    43:af:1e:f1:62:f1:dd:1d:5c:c1:8a:99:b0:ce:04:
                    e9:c2:0d:63:23:74:cf:cc:19:c3:2e:55:2e:66:05:
                    c0:62:97:70:ef:3c:f1:43:89:42:05:25:c0:04:9d:
                    98:37:60:f8:82:a3:00:db:05:08:44:72:61:8b:40:
                    d4:12:d6:89:3a:f4:ac:b5:b9:2b:78:82:ee:26:76:
                    a5:91:e5:c5:74:45:3f:c6:5d:f0:24:2e:99:a3:0c:
                    29:58:ec:b9:12:8b:b1:14:94:91:8f:cc:26:61:ff:
                    d1:a2:24:73:8c:55:c9:a9:65:7f:1b:ad:64:7a:b0:
                    15:92:0f:9c:0c:56:b1:5a:65:56:6f:e6:36:eb:fd:
                    ba:58:ac:35:32:c5:a8:b2:04:8c:a4:8f:58:a3:08:
                    94:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:14:8C:C6:6F:2E:21:55:66:41:9A:CA:C7:36:9E:39:14:EC:04:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/c1730c8f-6052-35c4-8aa7-0c45b33145b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.crl

            X509v3 Authority Key Identifier:
                keyid:D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.72.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:ea:76:6b:24:aa:27:10:df:78:b2:05:69:dd:29:19:6d:82:
         db:21:a0:0c:10:c6:ad:08:39:5b:cc:da:90:75:98:b6:79:0c:
         5e:fa:82:19:85:92:3b:03:f9:2c:5e:61:40:77:60:3d:b4:02:
         f0:aa:04:91:4c:f3:b2:5d:cd:1f:72:b5:bc:67:84:e6:b0:89:
         a4:af:0d:3b:b1:ec:f0:69:fe:00:32:d6:12:cd:6d:82:06:26:
         3c:ff:cc:a1:af:e4:d9:be:18:7c:d4:ce:4f:c8:47:3b:3d:8b:
         4c:c4:a0:74:ee:89:fd:df:ae:5e:04:a4:c2:10:4f:40:bd:e9:
         eb:b4:de:b9:ec:68:b7:19:db:d0:39:85:44:ba:c8:08:b4:23:
         38:8f:1c:77:e7:85:ee:95:68:2b:92:21:93:03:7a:41:26:88:
         34:5d:c2:88:e7:13:84:c2:fb:99:d8:15:d0:ac:fd:b3:1a:12:
         48:03:28:fb:dd:f4:7e:40:8a:8f:18:55:f9:41:48:ce:ad:7a:
         cd:6d:da:59:e1:ec:85:a4:b7:bc:1e:2c:e9:53:4a:3c:58:9a:
         ea:2e:9a:ba:6c:b1:9e:0e:84:6d:fc:e9:34:ec:e9:04:9c:a1:
         41:db:d1:78:63:3f:da:14:20:ed:cd:53:65:2e:21:86:23:ae:
         bf:06:e3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:11:12 2025 by rpki-client