Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/5ee3b35f-cb4f-35d9-bf21-8fdadadb0fa4.roa
File:                     5ee3b35f-cb4f-35d9-bf21-8fdadadb0fa4.roa (raw, json)
Hash identifier:          pKBq3DUJo8w7R3vTm5umFGBQQ/NOqZTGEfoU+VZxgFw=
Subject key identifier:   CE:92:B8:70:34:42:BD:DF:84:87:B7:87:BA:11:8F:4F:97:67:FC:F6
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F4328584B6E91FAF3EFC042D427EEE800
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/5ee3b35f-cb4f-35d9-bf21-8fdadadb0fa4.roa
Signing time:             Mon 06 Oct 2025 13:00:41 +0000
ROA not before:           Mon 06 Oct 2025 13:00:41 +0000
ROA not after:            Sun 04 Jan 2026 14:00:41 +0000
asID:                     11260
IP address blocks:        173.212.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6e:91:fa:f3:ef:c0:42:d4:27:ee:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Oct  6 13:00:41 2025 GMT
            Not After : Jan  4 14:00:41 2026 GMT
        Subject: CN=8dcd5556-cf54-4c40-ab8f-040714de721b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e3:53:94:6f:c7:f4:da:1b:32:80:8a:13:38:
                    71:67:40:d8:8c:d2:01:55:de:fb:97:9f:1e:15:da:
                    03:5f:6b:5b:1d:b6:b1:cf:d3:47:9b:f8:27:d0:6c:
                    36:f6:a7:ad:48:5e:2b:e2:b0:d1:5d:f3:bd:65:84:
                    8c:1b:3d:b3:0e:29:92:af:25:60:09:c8:37:2d:09:
                    60:6f:6a:35:4e:74:43:53:1b:a6:30:87:20:e4:0a:
                    91:fd:96:61:d2:6b:cc:08:f7:ad:7f:28:45:6c:3c:
                    6d:e7:be:a9:b1:4e:e0:f6:78:5d:f6:32:9c:6a:71:
                    3e:bb:d6:49:ba:b3:a8:5a:c3:d5:15:ca:88:59:85:
                    72:ae:95:c0:fe:44:19:78:cf:dd:1f:9c:e4:55:6d:
                    27:76:09:fb:1b:ad:aa:f8:37:9b:71:93:55:79:a6:
                    c1:14:13:69:ec:ac:4c:dd:94:f7:39:c8:b2:3a:5c:
                    2c:11:6a:cd:24:30:33:0e:36:b4:3b:5c:95:a5:4a:
                    37:11:60:78:08:89:da:ac:94:c4:60:f8:9c:95:7c:
                    b9:5d:5b:2f:6f:86:c5:94:86:80:3d:ed:d5:42:1b:
                    f1:9c:a6:c1:d7:62:c0:24:45:75:28:30:34:be:cd:
                    11:b4:4c:95:93:bf:93:31:57:c2:30:51:4f:64:21:
                    cd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:92:B8:70:34:42:BD:DF:84:87:B7:87:BA:11:8F:4F:97:67:FC:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/5ee3b35f-cb4f-35d9-bf21-8fdadadb0fa4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.212.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:56:2c:28:7b:d3:6e:c8:97:5d:d4:d5:43:f5:40:0a:38:83:
         c2:c7:9a:50:da:4c:6b:c4:7e:91:7b:aa:84:ce:86:49:ba:6f:
         d2:e9:31:05:7e:ba:b4:b3:4f:20:55:69:be:e7:3e:1d:2c:50:
         8b:ea:8f:7e:30:c2:45:16:ce:75:be:91:bf:4b:06:34:97:f0:
         36:8c:fd:06:49:0e:2c:d2:d4:9b:8f:b4:41:af:a9:27:7c:99:
         23:45:0f:ab:83:a9:dc:1f:f7:23:42:a3:86:eb:c5:af:88:ea:
         0f:48:9e:d5:31:f4:a6:a6:57:24:0d:37:59:1d:0d:55:77:39:
         17:d8:a2:02:88:3d:06:d9:4f:9c:09:47:32:01:ad:83:4d:75:
         3b:45:35:b9:01:f6:70:ae:49:1c:f4:17:0d:4f:c6:cc:2a:f3:
         e1:c2:96:00:df:dd:7f:f2:54:64:9a:14:83:ba:4d:e7:10:9f:
         d9:98:b9:ed:2a:5c:6a:70:99:e7:fd:7c:b8:68:55:07:c9:f8:
         ef:87:8e:2a:c9:07:fe:03:06:ae:ef:1f:cb:c6:cb:48:bd:3e:
         70:f1:bc:56:79:ea:8e:61:53:52:23:cb:99:37:de:a1:4c:9b:
         a8:51:93:99:c3:d0:40:aa:5e:b1:d3:90:d5:2a:89:57:8e:31:
         d3:fa:a1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 23:36:55 2025 by rpki-client