Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/a5e507b0-52b1-3ee9-83b4-0b8bb9c12868.roa
File:                     a5e507b0-52b1-3ee9-83b4-0b8bb9c12868.roa (raw, json)
Hash identifier:          MwzaKgdjNgK95mgxYd1YOq2kjZuy5jr7nVpeOR070ss=
Subject key identifier:   58:64:B6:DD:AF:97:BF:30:7D:2A:AE:54:E5:4D:80:74:69:04:B1:ED
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584A8410C7406F71F190AC397CB8
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/a5e507b0-52b1-3ee9-83b4-0b8bb9c12868.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     14813
IP address blocks:        69.80.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:c7:40:6f:71:f1:90:ac:39:7c:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=963da053-b8e0-480a-8058-d4d40d381fa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d3:11:76:9d:da:ec:a3:59:a6:fa:66:1a:28:
                    da:70:b8:e2:a5:04:e8:3f:00:ce:56:0d:6d:72:d8:
                    0d:6c:6b:ea:6c:66:48:54:f1:b9:9b:79:9d:df:b5:
                    3d:b5:d8:88:54:26:3d:78:71:fb:e8:9e:a4:b2:21:
                    6d:53:f0:be:ca:91:91:b5:19:f7:1f:51:53:be:23:
                    29:72:88:af:af:2f:d1:f1:72:4a:f4:b0:3d:b4:fd:
                    a2:0c:b9:32:4e:bb:e1:92:75:76:d4:4b:d4:b6:a3:
                    55:ae:82:c5:97:5f:ec:cf:06:4a:32:61:c7:65:af:
                    2f:2c:a3:fc:a2:46:e2:a9:5f:d5:05:0a:fc:ba:cf:
                    24:a7:c9:bf:f6:8f:d5:0f:c5:47:e9:2d:0d:62:01:
                    94:72:70:37:c9:a6:a3:64:77:32:b1:6a:a0:ec:62:
                    27:6f:2d:fe:3b:fb:e8:b8:a7:24:50:5c:c4:f7:57:
                    e5:b2:b3:e4:41:e2:b9:4c:0b:07:75:f6:54:9f:fb:
                    9b:68:e9:41:10:fc:61:96:99:d3:48:3e:fd:9b:7a:
                    34:d6:00:d6:cd:e2:11:5f:65:16:cb:97:14:05:30:
                    44:17:c5:6a:5a:eb:b4:53:94:30:46:0b:49:3e:cd:
                    90:72:92:5b:c0:41:95:68:e0:97:1e:f1:d0:8f:51:
                    60:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:64:B6:DD:AF:97:BF:30:7D:2A:AE:54:E5:4D:80:74:69:04:B1:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/a5e507b0-52b1-3ee9-83b4-0b8bb9c12868.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.80.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:64:f7:c7:ac:d9:73:45:b0:5d:8f:db:80:83:93:75:72:62:
         f0:8e:3a:49:59:b0:11:77:83:35:e4:0b:64:bf:be:48:24:2a:
         18:b7:2b:a1:d9:a9:08:16:cc:c9:e9:f1:80:8a:c6:6d:12:cd:
         9a:e5:97:7b:e5:5f:9d:44:ec:fd:f2:b7:bb:be:bd:1f:9d:43:
         1b:05:be:16:fe:e1:55:70:55:3d:90:60:b7:80:97:9c:a3:37:
         8d:d6:a8:60:cf:63:03:88:c2:1b:8d:7e:3c:47:dd:a8:67:5b:
         00:20:16:d7:6a:e5:ee:a7:2b:20:75:2c:00:61:af:6e:47:78:
         e0:cb:9d:17:40:67:9d:dc:7e:31:b2:61:23:60:87:27:79:31:
         5d:d8:fe:41:76:fe:33:9a:61:a0:2d:de:56:c1:54:ba:44:57:
         3a:40:54:8c:75:f0:3b:d4:77:eb:ae:62:18:d8:d5:66:7d:6a:
         4f:9e:e4:fe:6e:5a:a7:5c:8e:4d:91:5f:25:94:ee:e1:9b:9f:
         74:e3:9b:f6:fe:88:d7:95:c5:eb:7b:0f:08:3b:67:bf:bc:3d:
         c5:ef:df:48:87:36:4d:d3:56:cc:07:e9:c8:2a:93:16:84:fa:
         87:14:14:03:2d:44:9a:10:99:b1:09:25:2a:41:b4:81:41:d3:
         15:bc:af:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:48:24 2025 by rpki-client