Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/360964b0-1eb6-4597-8231-2e448a53e152/9286631d-ad88-36b7-ab49-f5c80f3d5702.roa
File:                     9286631d-ad88-36b7-ab49-f5c80f3d5702.roa (raw, json)
Hash identifier:          oPdsPy34yZjMoD+5KysvBGqFgJCDMtq8XPSV8PCSAbA=
Subject key identifier:   76:7E:D2:46:D2:A3:61:46:13:B2:52:DA:2C:92:1F:A2:CE:9A:5C:31
Certificate issuer:       /CN=360964b0-1eb6-4597-8231-2e448a53e152
Certificate serial:       010D0C9F4328584B13D6A8E7C60D1C19D9DDFF20
Authority key identifier: BD:07:97:1A:0E:2D:23:05:3E:86:63:A6:F6:16:95:1A:F2:64:A9:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/360964b0-1eb6-4597-8231-2e448a53e152.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/360964b0-1eb6-4597-8231-2e448a53e152/9286631d-ad88-36b7-ab49-f5c80f3d5702.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        69.67.160.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/360964b0-1eb6-4597-8231-2e448a53e152/360964b0-1eb6-4597-8231-2e448a53e152.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/360964b0-1eb6-4597-8231-2e448a53e152/360964b0-1eb6-4597-8231-2e448a53e152.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/360964b0-1eb6-4597-8231-2e448a53e152.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:a8:e7:c6:0d:1c:19:d9:dd:ff:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=360964b0-1eb6-4597-8231-2e448a53e152
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=eacc0b88-eeed-4a84-8276-3efa92cd64ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ba:d5:9c:7b:17:0d:79:5f:d3:1d:e3:38:b1:
                    14:fe:e6:9f:a4:a7:50:fa:36:59:a3:5f:0f:99:3f:
                    ea:d5:8f:69:78:85:49:37:65:3a:04:b4:f1:ad:de:
                    6e:30:d7:1d:57:a4:6d:8c:d9:45:77:57:35:01:36:
                    ed:0b:2e:01:d1:65:49:ff:f6:49:b4:f2:6c:03:de:
                    7e:3f:e5:c7:ec:a3:c5:95:2a:9d:f0:ab:e9:c6:48:
                    2f:c6:f8:72:9e:4a:cd:dc:23:34:c7:91:b1:0f:f5:
                    5e:46:e2:9d:d5:dd:23:03:df:12:b6:0e:3f:33:7c:
                    6d:9d:32:66:2f:f9:0f:0a:8c:aa:eb:62:38:6a:b2:
                    75:88:22:1b:d2:7b:9d:69:86:b3:62:e8:8c:25:60:
                    6b:3c:06:84:fc:b3:a4:ea:1d:d0:52:9c:73:18:7e:
                    af:49:6d:ec:6c:22:17:ea:e5:eb:04:fd:19:cd:98:
                    a5:04:82:63:fd:25:69:eb:75:2f:a2:dc:7f:d1:4a:
                    46:ae:d8:e5:16:01:09:44:19:93:3b:e3:ff:e2:e8:
                    01:d5:43:88:23:32:e9:c3:20:11:e8:bb:42:50:2d:
                    93:81:75:07:4c:3d:5d:5b:0c:aa:39:55:94:93:15:
                    f4:9c:97:6a:08:4f:33:91:35:75:4e:e4:64:15:9d:
                    d9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:7E:D2:46:D2:A3:61:46:13:B2:52:DA:2C:92:1F:A2:CE:9A:5C:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/360964b0-1eb6-4597-8231-2e448a53e152/9286631d-ad88-36b7-ab49-f5c80f3d5702.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/360964b0-1eb6-4597-8231-2e448a53e152/360964b0-1eb6-4597-8231-2e448a53e152.crl

            X509v3 Authority Key Identifier:
                keyid:BD:07:97:1A:0E:2D:23:05:3E:86:63:A6:F6:16:95:1A:F2:64:A9:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/360964b0-1eb6-4597-8231-2e448a53e152.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.67.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:ac:a5:bb:75:4d:a7:95:a7:a3:5d:cd:a7:1e:92:e7:34:d4:
         b8:b2:9d:22:c0:36:14:03:df:6f:d7:c7:92:db:5f:d3:0f:33:
         1b:12:56:4e:2b:97:e6:dd:99:2d:b6:0d:18:3e:bc:7c:b5:63:
         fa:20:ab:95:08:e3:96:57:70:16:e0:1e:1b:80:aa:b5:68:6b:
         04:5d:64:71:d9:6d:9a:00:ca:11:e1:3f:7f:b5:09:13:c7:3f:
         33:30:95:19:31:32:03:7e:79:e4:15:51:24:7c:2c:66:39:e5:
         4c:13:c9:d8:a9:17:d7:64:69:8c:15:45:d7:12:18:a2:e5:2a:
         9e:72:3d:1c:81:8d:9b:1a:f8:70:4a:76:70:e4:36:69:0b:6a:
         e0:50:3c:29:c1:c4:ea:bd:b4:71:5b:8a:14:28:28:aa:4c:c2:
         c7:09:1f:eb:47:a3:d4:b1:c9:49:0a:b3:be:6f:1e:f8:da:87:
         2d:af:54:00:33:2b:a3:6a:79:a7:59:e1:2f:57:55:c4:5f:78:
         2d:4b:ac:79:c7:42:4e:dc:6e:83:43:dd:64:41:c0:06:9c:b7:
         af:e3:d7:c6:2e:b4:64:83:2e:fd:37:0d:10:3a:d7:67:86:95:
         48:67:8c:61:32:fe:60:96:a0:68:d7:1a:1b:d4:f3:d4:7b:d0:
         d4:e5:67:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:44:55 2025 by rpki-client