Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/33ce7489-db54-39db-9c9f-ef4714e907bb.roa
File:                     33ce7489-db54-39db-9c9f-ef4714e907bb.roa (raw, json)
Hash identifier:          aFGVQO8FfvKz6is98xV9elznf4YQ2pA8hySoxgdS0/U=
Subject key identifier:   D3:F7:56:C0:BE:9A:7D:7C:A8:56:8B:11:3E:79:CD:15:CC:96:FC:63
Certificate issuer:       /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial:       010D0C9F4328584B153C1DF491271177C27CDF00
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/33ce7489-db54-39db-9c9f-ef4714e907bb.roa
Signing time:             Thu 04 Sep 2025 13:00:41 +0000
ROA not before:           Thu 04 Sep 2025 13:00:41 +0000
ROA not after:            Wed 03 Dec 2025 14:00:41 +0000
asID:                     4540
IP address blocks:        69.51.208.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:15:3c:1d:f4:91:27:11:77:c2:7c:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
        Validity
            Not Before: Sep  4 13:00:41 2025 GMT
            Not After : Dec  3 14:00:41 2025 GMT
        Subject: CN=ee8027a9-b6f7-4357-a8ab-fb3531c5ab64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0d:ce:05:a0:3a:4c:72:18:33:18:35:15:90:
                    7a:b2:bd:28:52:da:a9:cd:6a:81:c1:d7:b0:a0:16:
                    13:3e:2d:0a:33:bc:41:0b:f9:02:09:fa:63:7e:84:
                    e7:f4:a7:3b:9d:af:1b:ce:ee:f8:a5:c8:43:20:c0:
                    9d:9c:5d:9e:1a:90:7b:f8:f0:c4:de:88:b8:25:ff:
                    47:47:b6:0c:72:70:bb:bb:5f:01:c6:b6:02:18:72:
                    22:04:d4:58:69:49:8b:3d:53:be:d9:5b:d8:cd:da:
                    98:48:6b:34:2e:66:61:a8:5d:d7:10:9e:af:6e:ce:
                    fe:49:01:f3:0f:da:23:e4:49:15:a0:5f:49:49:0d:
                    a3:ad:07:01:7d:b9:df:0a:41:f7:72:76:1d:a1:92:
                    6f:64:15:e7:e1:db:57:c6:d8:fc:8d:09:9b:99:1b:
                    fb:b0:5e:41:24:78:64:4a:b5:f1:b0:af:1c:f3:7d:
                    4c:b9:b8:00:76:f7:d2:da:04:82:be:b2:32:35:f9:
                    b4:0a:67:51:7b:2e:38:a4:4d:07:ce:a7:1b:59:e4:
                    0b:7c:9d:47:5c:ae:6f:14:c1:6a:bf:53:3d:24:26:
                    6c:08:e8:1a:cc:26:2a:bd:d6:a2:2e:f8:86:24:d5:
                    08:10:c8:7b:4e:8a:e1:be:ba:91:66:ff:c4:fe:68:
                    64:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:F7:56:C0:BE:9A:7D:7C:A8:56:8B:11:3E:79:CD:15:CC:96:FC:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/33ce7489-db54-39db-9c9f-ef4714e907bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl

            X509v3 Authority Key Identifier:
                keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.51.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:ff:2f:22:7f:1a:53:0a:06:cf:87:49:ad:65:4a:47:8f:50:
         8d:bc:ac:64:d9:86:71:d7:55:9c:36:d6:41:5d:cd:8a:23:55:
         64:e3:80:82:43:17:77:02:f3:cd:db:c9:d2:b4:ba:68:85:71:
         23:80:7c:50:5c:05:f0:01:36:e5:63:e5:0b:94:3b:7d:cf:d9:
         75:f4:cf:7e:0b:f9:72:18:0a:8f:7f:e1:1a:d2:d2:ca:77:79:
         91:73:4e:ec:30:2b:65:d9:82:3f:80:b8:53:4f:b7:23:2d:30:
         ca:0e:b6:6f:3a:c3:6a:1c:20:d5:2f:ff:31:58:59:39:ed:5f:
         e7:8f:5f:57:49:a6:bf:08:0c:be:7a:89:bf:3c:c1:a7:c3:14:
         1f:2c:e6:3c:a7:40:0f:7a:a2:11:37:f8:28:62:d3:b1:7e:74:
         d7:f7:bb:9e:2f:89:05:27:21:21:f3:ba:94:f1:0a:35:84:32:
         6d:dc:a6:14:51:fc:4e:3e:ec:eb:6a:c7:5a:66:90:ea:2f:b7:
         07:70:b8:ca:00:bf:1d:91:6b:a2:3f:d4:00:6b:fd:33:39:09:
         6f:ab:f4:d5:63:1a:68:6b:a1:41:a0:b0:f9:99:34:f6:82:b9:
         6c:e3:fc:a5:74:40:49:3a:a0:4a:35:6a:bd:f1:fc:1e:ee:4d:
         15:14:dc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:25:29 2025 by rpki-client