Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/e434baa8-d048-319e-b39d-befa2c2cf501.roa
File:                     e434baa8-d048-319e-b39d-befa2c2cf501.roa (raw, json)
Hash identifier:          DCmznd8JBU9yPzEtznNopCjOK7ClIQVngKquLTmiNWk=
Subject key identifier:   30:47:D1:65:05:A2:40:EF:4D:A5:C9:24:BD:8D:2E:9C:7E:DB:C3:FC
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584A8410D776D02148B4CF460580
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/e434baa8-d048-319e-b39d-befa2c2cf501.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     14813
IP address blocks:        69.73.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:d7:76:d0:21:48:b4:cf:46:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=d00334c7-c877-4295-af72-6302806fe645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:68:c2:e3:33:95:9f:3d:d2:a8:3c:92:bf:5f:
                    7f:f6:5b:1b:8c:74:f0:f1:16:7c:0c:6b:16:29:90:
                    36:09:3a:75:75:4c:a0:c8:41:6d:f1:c6:f0:8f:4a:
                    1f:0e:7c:fa:00:fb:0d:cb:3a:ae:47:56:fb:fa:a6:
                    42:91:1a:be:9f:ba:6c:7e:71:76:2c:3b:fe:5a:16:
                    e4:87:16:25:83:ed:12:18:e7:45:dc:3c:5d:db:9d:
                    a0:7b:af:64:cd:22:1e:03:e0:ec:47:83:0f:5e:73:
                    9d:3e:cf:2a:ae:d4:be:d9:e8:ef:5b:04:cb:8a:23:
                    9e:6c:0d:48:75:1e:2e:77:27:2c:9b:02:04:01:7c:
                    23:eb:62:52:26:30:b6:a5:50:fd:cb:55:98:6e:ce:
                    ff:e1:e7:0b:b5:0b:26:9b:5d:1f:6a:7d:0c:75:1d:
                    13:25:52:c0:eb:c3:f9:c0:1f:80:da:3b:96:78:f3:
                    43:11:58:c3:bf:a7:15:09:8f:60:39:44:5d:71:1e:
                    76:26:7c:5a:7b:7e:48:46:8d:86:6a:50:17:d8:4e:
                    02:37:1f:40:eb:54:06:43:76:5b:01:69:6e:0d:5c:
                    38:0b:a0:f5:92:2f:16:04:e1:35:ce:28:22:11:bd:
                    b3:8a:76:fb:ec:06:61:c2:bc:5b:cc:b1:4f:c0:dc:
                    6e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:47:D1:65:05:A2:40:EF:4D:A5:C9:24:BD:8D:2E:9C:7E:DB:C3:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/e434baa8-d048-319e-b39d-befa2c2cf501.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.73.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:36:55:af:54:f3:8a:10:76:c7:1d:73:6b:4b:86:6a:75:00:
         34:bc:3d:a9:83:0a:93:5f:05:eb:62:35:01:e9:86:05:ad:24:
         56:8b:e1:2e:12:1c:59:83:b2:2e:37:92:ec:6b:a6:16:08:55:
         17:19:96:20:44:d4:1d:95:c2:a2:78:2d:81:de:72:3e:3b:a8:
         eb:0a:22:39:cc:50:fd:0b:e0:d2:1e:9a:ea:80:f6:e9:ae:a2:
         d0:c0:00:a5:b4:ec:c7:cb:0f:20:57:2d:02:a3:ed:ab:cd:85:
         4a:ee:98:96:4e:b4:db:11:e5:46:b2:54:f4:dd:d9:8e:f7:3f:
         d1:a4:fa:53:d7:a4:ab:d6:2b:88:20:0d:63:1f:e3:25:3b:a9:
         a4:15:0c:56:26:8d:d6:ce:5f:62:1b:7b:eb:17:69:80:4c:29:
         1d:83:23:1d:95:a6:4f:5e:28:86:a4:94:89:cb:53:af:1c:72:
         df:72:30:ae:5a:b3:1c:31:ff:e0:55:4f:98:11:37:48:64:18:
         43:d4:bb:62:8c:e9:8d:db:34:3b:76:93:a3:79:b5:fe:b4:24:
         ee:d4:79:71:75:6c:24:4a:22:f5:16:c3:d3:6e:d5:11:d1:1a:
         df:c8:3d:c4:bf:fa:12:6d:8f:f4:6e:52:6f:4c:7e:9e:ab:49:
         14:da:9c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:46:50 2025 by rpki-client