Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/3750f6f6-4326-3661-8ce8-211ce13d34e3.roa
File:                     3750f6f6-4326-3661-8ce8-211ce13d34e3.roa (raw, json)
Hash identifier:          3d+9e/YovRay8lMURkOsu10AjnrU+jDBEJZ5H4oxpUM=
Subject key identifier:   AA:D1:C5:0F:6C:62:21:AD:1B:61:3E:F4:96:E3:02:97:D5:D9:5B:EE
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F4328584B21CC183724C96FFEA6514FC0
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/3750f6f6-4326-3661-8ce8-211ce13d34e3.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     11260
IP address blocks:        142.67.162.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:18:37:24:c9:6f:fe:a6:51:4f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=61948647-c75f-4da4-9d3a-4c69cc17513d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0f:3d:09:ae:65:bf:6c:08:34:39:f7:fc:77:
                    27:ed:7d:17:e8:d1:f8:64:45:a3:60:1a:98:23:ce:
                    88:c0:e8:2f:e4:f4:22:b3:99:5b:63:6b:f1:ec:ec:
                    b2:7c:d6:16:cf:45:fa:08:7c:1a:0c:da:fc:49:1b:
                    fd:3e:32:ea:66:21:9f:52:dd:74:2c:33:9c:f5:45:
                    b5:71:cd:84:73:93:70:65:d8:a1:84:66:91:3e:68:
                    d5:57:6f:a9:6a:c8:a0:78:6c:a7:09:dd:d8:1d:9d:
                    c1:fb:50:0f:a9:25:62:2f:f2:0b:4d:46:27:a0:5a:
                    42:35:0d:6c:e4:e5:a8:dc:50:3d:d6:53:d4:34:c3:
                    b4:13:31:69:b4:ff:fb:51:e7:91:82:3b:e6:18:e0:
                    35:99:91:6f:11:ee:ee:2c:8a:bd:56:fc:eb:32:ec:
                    c3:d5:a2:be:0d:ca:46:c9:8d:12:8f:e5:1b:6f:7e:
                    37:19:da:4b:17:0c:d0:34:a3:57:be:d9:4d:32:3e:
                    d3:94:4e:91:32:d0:df:38:1b:22:ae:28:f8:a3:ac:
                    3f:b9:74:a9:59:bb:62:18:cb:3d:df:fe:72:3c:cd:
                    04:1d:14:7c:c6:4c:45:40:51:57:14:00:b3:a7:df:
                    2c:a0:b9:e9:bd:3e:0c:73:59:9d:9a:bd:1d:aa:4f:
                    6c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D1:C5:0F:6C:62:21:AD:1B:61:3E:F4:96:E3:02:97:D5:D9:5B:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/3750f6f6-4326-3661-8ce8-211ce13d34e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.67.162.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:be:17:60:9a:30:d9:eb:fe:9b:01:b4:e3:9d:9c:9b:be:a6:
         a3:57:59:05:9b:0e:8b:7c:21:84:37:d5:b1:fe:16:d8:b4:82:
         bf:0a:bf:34:f0:32:7b:be:80:b9:fc:3e:41:4a:9c:50:b6:35:
         c6:d7:d2:56:1a:f9:d7:d4:36:cb:de:24:8f:dd:49:5a:ba:96:
         7f:82:68:16:da:10:8e:eb:71:9e:fd:da:61:fd:fc:48:a1:83:
         85:b1:67:dd:48:e4:75:a2:0e:2c:e0:cc:f4:be:1c:7e:9f:2f:
         d9:2f:8b:30:88:58:bf:3c:c4:ac:ed:05:39:61:be:eb:c5:77:
         3a:9f:26:43:b1:e3:04:6f:5d:aa:f4:7a:5d:8b:37:4d:27:ee:
         0e:ff:c7:00:b9:73:bc:2d:70:7e:03:d4:64:58:ca:86:6d:57:
         c1:0b:9e:8e:4b:0b:df:e1:e1:6c:b0:18:b6:c2:8c:18:14:5d:
         f3:69:3a:ee:f3:bb:e6:34:b7:47:14:8f:e6:1c:60:fa:55:64:
         d4:56:00:1e:d8:40:fb:da:b9:bb:70:ec:b9:01:37:c0:3b:b1:
         c6:d5:c0:94:48:ec:b2:85:75:da:46:3b:5f:94:c1:d1:b7:d8:
         7c:d9:ea:64:8b:e0:56:84:12:29:d8:15:50:ac:49:99:1b:88:
         7a:39:f8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:33:48 2025 by rpki-client