Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/b4c07693-8db4-3459-bd67-b55798e49ba1.roa
File:                     b4c07693-8db4-3459-bd67-b55798e49ba1.roa (raw, json)
Hash identifier:          qdLuD7wMDv9cToW7IYQTbi8VY7+Pw46G0DF6m67d5mM=
Subject key identifier:   55:E6:81:B0:12:71:4F:4A:0B:91:C6:BE:4C:E9:A6:F6:F0:BD:9A:84
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584A8410C8934CCE9792B5A84480
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/b4c07693-8db4-3459-bd67-b55798e49ba1.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     14813
IP address blocks:        69.80.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:c8:93:4c:ce:97:92:b5:a8:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=026e6da5-48bc-4880-9c56-47db2c97cac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a9:4c:aa:c7:1a:f7:e1:4a:d0:80:04:ff:9d:
                    97:59:ae:7f:78:77:a8:ab:fb:c9:d2:0f:53:48:08:
                    62:8d:1e:e9:20:df:f1:d5:8a:a9:01:f5:e3:b4:d0:
                    1d:56:73:21:50:0e:66:43:68:88:ea:e6:6b:da:72:
                    82:c2:46:27:e1:5f:64:24:b8:41:48:c2:c9:ea:f8:
                    92:b2:c7:c4:a4:dd:c3:66:98:e2:30:96:5d:1d:2b:
                    54:4a:fa:ad:56:5f:91:68:b3:c9:f1:0d:69:72:b6:
                    cb:ff:6e:d2:14:ab:31:53:c7:1a:e2:d2:5b:7e:16:
                    04:e8:9d:84:2c:42:f6:89:b0:1b:02:9f:a6:ac:8a:
                    46:24:1f:b1:f6:0d:a7:23:40:e5:37:49:af:90:da:
                    db:54:a5:b0:fc:fc:dc:6f:24:08:5e:7f:a9:7b:12:
                    8d:77:eb:b5:a4:56:a5:3b:b5:cb:e0:f5:8a:99:2d:
                    a7:b6:bc:0e:06:96:d5:67:12:b6:30:13:94:c1:82:
                    94:21:ff:ae:9c:ba:1f:bf:81:7a:dd:66:32:05:9d:
                    52:a2:bd:e7:4a:f5:be:48:8c:b5:15:21:fa:ea:63:
                    6a:76:aa:95:38:90:27:ac:ee:4f:06:cf:27:4e:93:
                    44:84:2a:41:a4:0b:08:cc:58:98:e2:f6:8e:34:30:
                    ce:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E6:81:B0:12:71:4F:4A:0B:91:C6:BE:4C:E9:A6:F6:F0:BD:9A:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/b4c07693-8db4-3459-bd67-b55798e49ba1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.80.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:8e:37:ad:3d:d8:36:3b:c3:33:21:4d:83:a1:ba:12:2f:dc:
         d7:e1:dc:82:3d:75:ae:5c:95:82:d6:a5:63:3c:72:43:50:03:
         c5:89:b8:a5:40:4f:0a:34:22:cc:7f:af:49:2c:ae:48:6b:31:
         2c:08:6a:15:44:7a:c1:17:2c:91:a9:4b:2f:da:45:c6:78:22:
         84:03:5d:0f:c6:4b:a7:45:44:7f:2a:b4:89:be:da:fc:f1:b3:
         8c:4d:9a:f4:81:c6:fa:32:30:1e:53:ca:22:29:62:3d:61:34:
         7d:b7:cb:ee:54:9f:e6:5f:94:23:17:3b:8f:ea:a1:d8:6a:cd:
         cd:e1:c2:84:c9:d8:42:ac:2d:af:6c:5b:01:4f:34:80:e7:21:
         73:83:0f:69:d8:2e:d9:35:c1:c5:bd:89:41:86:68:6c:85:1d:
         ff:df:7e:f5:47:4b:19:bf:e9:15:a7:26:d9:42:ae:c1:fb:90:
         09:7c:fb:f2:5d:9f:c4:ee:44:a3:91:22:c8:54:a5:11:0c:54:
         72:9d:ab:27:e5:44:54:19:88:8f:d2:d0:62:27:19:b9:4e:40:
         74:bc:d2:3a:64:ad:62:7c:97:60:ce:a6:32:58:70:31:5c:54:
         27:b7:be:6f:b6:fe:aa:4c:14:bf:69:13:da:ed:7b:00:65:f1:
         3c:e2:f7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:52:16 2025 by rpki-client