Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/556dbc61-61f0-36bb-b83e-63a2b1ed4095.roa
File:                     556dbc61-61f0-36bb-b83e-63a2b1ed4095.roa (raw, json)
Hash identifier:          Fghmic9RCm1r/Z0boH59Z1B7V2+h16VxNcj1BtaSVwQ=
Subject key identifier:   71:08:B5:AE:3E:C8:26:54:E4:40:84:FC:AB:06:7D:18:A1:50:55:CF
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F4328584A43DB0C643102A42A9BD76520
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/556dbc61-61f0-36bb-b83e-63a2b1ed4095.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     21859
IP address blocks:        69.165.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:0c:64:31:02:a4:2a:9b:d7:65:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=05f54e42-f5bb-427b-91b1-195931a6a23b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:52:9f:9e:b1:b1:9d:98:4f:63:0c:81:bd:8c:
                    8d:ff:e3:5d:07:1e:b3:6b:b8:88:be:8f:52:64:0a:
                    bd:dd:2f:83:df:c0:90:9e:2d:0c:65:99:cc:a1:af:
                    ff:43:b2:ee:b2:72:1c:d4:dc:f7:59:bb:ed:98:63:
                    c3:af:76:cb:c2:db:63:75:85:e6:68:dc:ef:4a:88:
                    10:9e:4f:e4:b4:5e:7c:12:bd:23:b5:9b:68:9f:0c:
                    0c:9d:f0:33:94:f3:d1:4e:32:41:7d:a4:54:d4:34:
                    00:7f:57:81:a9:ed:12:82:c2:0c:67:61:6e:70:03:
                    6d:b4:ed:79:8a:06:51:84:5d:f6:b1:f2:f0:15:00:
                    9b:61:4e:0b:04:8f:b3:db:33:98:19:03:eb:11:47:
                    06:24:dd:ad:bf:2c:ad:5d:47:3d:e4:1f:a4:64:3b:
                    04:e1:a3:2b:6d:f2:b7:7c:55:4f:3c:04:53:4b:cf:
                    bc:9a:fa:6a:e5:0f:08:05:50:28:7d:6f:f5:0c:22:
                    c9:a8:27:07:f4:ef:09:8d:dc:ba:6b:b3:63:b8:68:
                    e9:c1:0b:8d:85:17:19:6e:2b:17:85:59:22:34:53:
                    5c:0d:44:16:e1:51:56:8d:34:fb:55:1d:43:1c:44:
                    69:12:59:6c:f2:e5:59:17:5d:ea:20:98:8e:2f:c7:
                    2e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:08:B5:AE:3E:C8:26:54:E4:40:84:FC:AB:06:7D:18:A1:50:55:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/556dbc61-61f0-36bb-b83e-63a2b1ed4095.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.165.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:b0:52:be:5b:d1:f6:28:68:a5:b9:b6:ca:03:01:44:0f:65:
         2a:e4:98:55:69:e6:c2:d7:c1:45:39:b0:8a:e3:7a:3d:c7:16:
         13:dc:c5:c9:58:5e:d5:e3:1a:c7:9e:3a:45:5f:fd:1e:a6:02:
         66:87:94:73:2a:52:92:5f:8c:22:63:0a:75:72:d0:41:00:bf:
         28:6b:04:66:93:52:15:21:5b:37:b8:7c:8f:d7:77:80:71:2e:
         59:d2:5f:b6:97:ca:55:0c:a4:e5:7a:fa:e8:25:07:4b:91:f8:
         24:77:77:44:9d:52:93:b2:63:98:52:29:66:67:a5:9a:7c:26:
         63:bd:41:a0:5a:b6:ca:b5:e0:e8:c9:0a:f2:6f:70:2b:be:91:
         14:bf:2f:20:6b:47:1d:9c:cb:7f:69:a0:22:1a:10:65:28:21:
         50:fd:e7:47:0e:f4:34:1f:a4:f4:c6:fe:61:1b:67:17:8e:b4:
         ab:42:3c:78:e6:76:08:ba:3e:21:14:99:27:bd:51:0e:cd:b9:
         cc:4d:d7:82:96:86:13:28:9e:ca:44:6a:b4:7e:2f:9a:a1:d5:
         c7:04:96:43:60:fd:93:ae:40:ad:ba:d1:3d:20:d6:ab:70:4b:
         f8:05:62:37:4b:b5:de:c4:59:93:f5:6d:db:ab:47:96:9f:73:
         77:0c:3e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:26:17 2025 by rpki-client