Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/9c7578b3-4ce1-3dc9-859c-805442284ef1.roa
File:                     9c7578b3-4ce1-3dc9-859c-805442284ef1.roa (raw, json)
Hash identifier:          JyInFi7SRVaNtS4thpvYm4vv509Drmusza6lg8fVzV4=
Subject key identifier:   FA:0D:FD:A4:3E:C9:F6:55:CC:7B:DD:C9:F4:7F:70:93:9A:70:A7:77
Certificate issuer:       /CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
Certificate serial:       010D0C9F4328584B6D2CB98F279EF75E3C7A7380
Authority key identifier: B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/9c7578b3-4ce1-3dc9-859c-805442284ef1.roa
Signing time:             Mon 06 Oct 2025 01:00:33 +0000
ROA not before:           Mon 06 Oct 2025 01:00:33 +0000
ROA not after:            Sun 04 Jan 2026 02:00:33 +0000
asID:                     31898
IP address blocks:        69.48.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6d:2c:b9:8f:27:9e:f7:5e:3c:7a:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
        Validity
            Not Before: Oct  6 01:00:33 2025 GMT
            Not After : Jan  4 02:00:33 2026 GMT
        Subject: CN=ff136f6d-3047-4276-a3ca-8831b265c051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1a:fe:ba:f3:68:46:a9:7b:fc:f1:03:7f:6c:
                    0e:dd:8e:ef:b3:38:b5:1a:99:f1:f4:30:4b:2f:08:
                    36:e4:9a:ab:cf:79:69:df:25:2e:4a:4b:2f:97:f8:
                    86:62:b9:7b:7b:e6:56:3e:f6:4d:8c:ac:8e:0f:2c:
                    de:dd:e7:80:91:fb:0c:9a:1c:fa:0c:ed:e5:35:80:
                    5c:d6:ea:7f:06:c1:33:b0:69:c8:11:82:8f:33:0a:
                    2c:85:3e:16:5c:3e:01:4d:c1:7c:b6:5f:51:66:d4:
                    b1:59:ed:31:1f:8a:95:ff:40:7d:c8:01:58:29:35:
                    3d:f9:a7:f4:6e:b7:a7:89:1d:a0:94:22:dd:ac:c2:
                    fe:bd:ad:a9:3b:4b:97:12:85:f8:d8:6d:4b:3d:3d:
                    5e:6f:26:5f:82:5e:ac:0a:d6:87:62:7b:75:d7:64:
                    14:e0:8f:8d:f8:04:10:22:66:9f:0b:d8:e2:04:c9:
                    a7:bb:0a:74:47:26:ec:e0:7e:14:84:0c:87:2a:0d:
                    0e:65:0e:d9:41:aa:16:e1:ca:40:81:94:6e:d8:05:
                    7c:25:98:7e:6b:0c:fa:e4:b9:f6:73:25:a7:da:9e:
                    70:34:85:70:18:37:81:2c:1b:f3:83:33:6c:96:40:
                    54:af:c4:39:20:c6:26:33:6b:07:26:59:dd:6f:e7:
                    8e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:0D:FD:A4:3E:C9:F6:55:CC:7B:DD:C9:F4:7F:70:93:9A:70:A7:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/9c7578b3-4ce1-3dc9-859c-805442284ef1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl

            X509v3 Authority Key Identifier:
                keyid:B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.48.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:0f:12:70:67:43:c7:96:9d:44:9b:9a:48:f3:5b:b7:ed:ee:
         53:68:0e:50:a8:2e:08:0d:a5:86:0d:96:a5:d6:90:7a:85:ba:
         c8:2d:23:dc:84:c6:08:8d:f0:8b:d7:4b:a4:de:78:d5:00:84:
         f3:30:1e:0a:03:c8:25:7b:c4:d7:0e:ee:2c:78:14:92:6a:5e:
         72:e8:f2:02:03:f4:84:59:e8:31:e2:c7:bf:e9:b2:98:3a:14:
         86:b4:9b:b3:2c:04:ba:7c:87:b7:08:32:65:20:94:c6:d8:41:
         5f:c6:37:20:60:c1:8a:9e:1e:55:26:41:9c:ab:4b:48:e8:b7:
         2d:80:cb:b3:ee:0c:46:e4:68:16:f2:20:83:be:b5:07:e1:f8:
         a3:00:a9:0a:5c:4b:99:dd:eb:ea:dc:4e:07:0b:77:09:a2:93:
         ac:bb:fb:d8:3a:17:6e:0e:6b:4d:88:d0:23:21:e2:43:62:86:
         ed:8b:18:7c:c8:bd:d1:87:39:7d:68:fa:bf:a7:2f:d4:99:47:
         27:a0:54:0c:35:4d:75:57:7c:12:58:96:86:38:87:da:3e:37:
         8a:57:a9:a7:41:5a:d1:37:8d:8f:51:5f:a9:f7:2a:f0:00:15:
         0c:5a:b1:ed:df:2b:0d:a5:bf:b0:34:2a:51:1b:bb:eb:31:73:
         26:4c:00:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:11:34 2025 by rpki-client