Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/b33b775e-e8af-3cc7-a4ad-2f6b632c1e57.roa
File:                     b33b775e-e8af-3cc7-a4ad-2f6b632c1e57.roa (raw, json)
Hash identifier:          tjLSoOqJy6ED+uDViPed3R9iieXu4G+mFhu7ZxS5teo=
Subject key identifier:   68:48:F1:D4:86:2B:EC:65:EB:E6:F2:A4:C5:97:26:67:CF:29:6A:0F
Certificate issuer:       /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial:       010D0C9F4328584A8575F9C2429B2DE9977A1480
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/b33b775e-e8af-3cc7-a4ad-2f6b632c1e57.roa
Signing time:             Tue 15 Jul 2025 01:00:49 +0000
ROA not before:           Tue 15 Jul 2025 01:00:49 +0000
ROA not after:            Mon 13 Oct 2025 01:00:49 +0000
asID:                     152672
IP address blocks:        69.176.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:75:f9:c2:42:9b:2d:e9:97:7a:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
        Validity
            Not Before: Jul 15 01:00:49 2025 GMT
            Not After : Oct 13 01:00:49 2025 GMT
        Subject: CN=af7ac105-7520-48d2-a6e3-ae2543a19d62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b1:5d:48:03:c3:69:dd:a9:67:ed:24:04:ed:
                    0f:ca:29:4f:69:09:fc:93:94:d5:21:63:b1:34:56:
                    9f:9b:9f:14:e0:61:a2:15:84:34:4a:55:ea:10:e4:
                    4d:ee:9e:23:36:45:44:20:ec:3b:ea:45:50:21:e6:
                    79:1e:ca:fa:ca:1c:a2:43:7f:fe:4b:7d:cc:38:47:
                    e8:79:da:29:4b:79:d2:61:fa:28:44:89:c0:e4:2d:
                    de:ac:bf:02:6d:6b:59:de:0f:8a:03:b7:6b:0a:8c:
                    15:8a:a1:83:15:dc:15:cd:dd:6f:d4:65:f6:6a:5c:
                    90:71:a8:17:b5:35:06:09:96:93:9b:d7:7c:c3:1d:
                    b6:37:36:4c:27:eb:28:aa:f8:9b:cf:24:df:1e:90:
                    69:41:a7:db:93:60:31:27:c4:61:d9:64:66:ab:ec:
                    e4:46:0d:a3:2f:cd:d0:80:d5:a8:01:f8:00:3f:7e:
                    1b:9f:c1:2d:4e:5e:4b:69:46:be:a6:d3:42:71:08:
                    85:13:66:10:30:b5:3c:76:23:59:e2:74:5d:b3:69:
                    67:cb:98:bf:6c:6b:d8:b1:f9:c7:fe:f3:a2:62:d9:
                    db:de:af:44:69:de:91:65:1c:e9:68:3c:fb:9a:9d:
                    51:85:36:fe:dd:f5:23:51:f4:59:09:64:4d:a6:ee:
                    48:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:48:F1:D4:86:2B:EC:65:EB:E6:F2:A4:C5:97:26:67:CF:29:6A:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/b33b775e-e8af-3cc7-a4ad-2f6b632c1e57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl

            X509v3 Authority Key Identifier:
                keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.176.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:8b:05:42:5a:6d:2d:19:28:f6:1b:7d:08:b9:0e:ab:be:51:
         e0:67:87:d8:b8:92:46:36:bd:c4:33:a6:ec:1f:03:5e:d8:50:
         ea:10:b4:19:61:68:76:e2:31:74:94:ee:9f:56:fe:81:05:ac:
         20:a3:33:e2:20:1d:74:15:3e:5b:b3:e3:76:d3:49:cf:a4:57:
         ef:f9:67:89:81:cd:33:99:75:e5:17:a5:bc:65:4f:19:6e:75:
         ac:dd:44:9e:e9:d8:88:76:86:82:e9:ca:c2:5b:e3:1c:70:10:
         08:bb:ed:e8:84:86:98:75:1d:35:83:9f:c3:e0:6b:fe:38:b7:
         9d:8f:d3:28:e4:af:01:1e:28:15:ab:c4:09:37:21:d6:7c:0c:
         d2:4c:62:99:87:f0:9e:de:d6:3c:8c:3b:b1:b7:39:33:e6:a6:
         0e:2d:96:a0:84:ca:e0:78:86:e0:a9:8d:ae:8a:8d:2c:46:71:
         2c:74:b5:24:83:e1:e2:6d:14:90:50:04:28:b6:8b:f3:f8:fa:
         c5:1e:d4:78:85:22:a1:51:f2:77:b2:98:67:48:2d:79:74:4f:
         ab:d5:02:22:4d:e4:32:06:60:a3:57:0a:2b:eb:8d:5c:7c:92:
         20:8a:68:82:80:fe:8c:84:ce:b3:de:b8:d9:f9:db:3a:0a:2e:
         9f:ad:bf:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:49:00 2025 by rpki-client