Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/5aff8718-1545-3abe-8c8c-1ef8ea46e37a.roa
File:                     5aff8718-1545-3abe-8c8c-1ef8ea46e37a.roa (raw, json)
Hash identifier:          Zc7BiLpx6CWEJY6GdxL2NHHYXzFllSRmUmhT4UcKlgE=
Subject key identifier:   7F:60:AD:F6:DD:F4:95:D3:9F:CD:5F:3F:45:48:32:77:B4:F8:50:90
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584A841250C4BA2621ADFCEC7A40
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/5aff8718-1545-3abe-8c8c-1ef8ea46e37a.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     14813
IP address blocks:        69.73.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:50:c4:ba:26:21:ad:fc:ec:7a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=674d43e7-e60b-4481-8b02-46bda52caf35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5e:1b:0c:e8:67:ca:e1:23:67:29:a4:a8:39:
                    83:c8:71:43:62:f4:f5:47:6d:ef:7c:2c:a2:c9:e1:
                    e6:80:8d:a5:c8:da:1c:47:d1:d0:51:20:71:61:ee:
                    30:d7:0f:04:40:87:6c:a0:75:6e:20:5d:7f:40:2b:
                    67:38:3d:a3:dc:98:a4:68:63:5a:fc:74:95:ea:cb:
                    d3:bb:b3:a1:8f:c3:f2:ed:f0:ce:f6:da:a2:3a:10:
                    f4:70:f0:6c:8e:f3:4c:9e:cc:2c:e8:5c:96:dc:6b:
                    68:8b:a8:7c:8e:e2:cc:99:68:a4:ec:89:1e:0a:0b:
                    c2:54:30:1d:29:32:5b:12:90:41:cd:d4:b9:e7:50:
                    ab:20:0a:5f:aa:49:b1:6c:68:47:52:e3:87:52:02:
                    52:90:7a:3d:7a:e2:32:10:80:fd:98:13:b2:3f:76:
                    4f:3e:b3:ff:b2:4d:ff:f6:6c:93:24:9e:0b:27:b2:
                    db:89:d0:0a:23:e9:a2:c8:0d:76:f8:b3:a6:6f:eb:
                    7d:41:7f:68:58:9b:e0:1f:23:65:b6:9c:76:3a:5f:
                    e2:3c:1c:ff:6d:53:77:85:34:00:0f:f3:cf:d5:5e:
                    6d:f3:b9:ce:69:a6:3e:c9:69:f6:52:e2:e8:d3:5a:
                    a8:c4:e9:04:a7:ad:34:f0:c7:16:17:70:d6:0a:75:
                    76:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:60:AD:F6:DD:F4:95:D3:9F:CD:5F:3F:45:48:32:77:B4:F8:50:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/5aff8718-1545-3abe-8c8c-1ef8ea46e37a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.73.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:27:e2:46:a1:c9:74:4c:17:64:4b:82:0d:9e:4d:ff:0c:7f:
         ed:b3:06:32:17:78:8a:d8:5b:27:66:29:21:12:3e:07:3e:1d:
         90:9f:3d:3e:7a:eb:c3:de:56:4e:6e:a5:28:e8:da:5e:fe:81:
         3c:cb:db:e6:52:23:30:a4:37:d7:1d:47:e0:c3:f8:da:e1:6e:
         99:8d:9b:a9:c0:b9:c6:f6:2c:8d:d5:0c:0c:b6:39:41:cf:34:
         19:90:2f:f5:5d:8c:3c:d2:68:3d:90:1c:ad:85:a5:af:95:fc:
         14:be:1c:2c:f4:5f:e7:e9:15:b3:97:81:96:1a:7f:01:f3:f7:
         23:3e:78:15:a6:91:9d:54:53:8d:b7:d0:b8:bd:a7:af:c0:2a:
         c1:4b:2a:d9:3b:f1:8c:51:58:10:16:af:36:01:01:51:ff:99:
         25:ba:f0:fc:12:2a:9c:65:80:9d:fe:b9:82:66:46:60:5e:0c:
         0e:1e:66:d7:c1:b1:c1:2c:63:93:51:ae:00:eb:cd:5d:72:ac:
         80:91:27:9e:26:6b:93:87:a4:fb:0b:91:9f:d3:7c:df:fa:82:
         3e:c9:b1:59:d6:24:c4:1f:48:3b:fe:1e:fa:ab:77:d3:27:10:
         d4:ca:38:74:44:46:76:e3:8c:de:81:bc:aa:c1:a1:fe:a8:aa:
         19:0b:05:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:46:02 2025 by rpki-client