Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44222f2b-1203-4455-b787-472364f47a8f/f9bbeccf-2022-32f1-8438-1debb27b375f.roa
File:                     f9bbeccf-2022-32f1-8438-1debb27b375f.roa (raw, json)
Hash identifier:          1ZJ8d7vt9okqsYTY4sW6nu45sBOc39LP8v7LsFfKmYs=
Subject key identifier:   76:57:DF:99:B0:2E:38:D9:F4:A2:84:EF:EA:16:83:29:07:83:E0:AA
Certificate issuer:       /CN=44222f2b-1203-4455-b787-472364f47a8f
Certificate serial:       010D0C9F4328584A9D30D8112E50CDEB17DB1800
Authority key identifier: DE:3B:4D:6D:84:3B:56:BA:7F:CC:27:30:53:D6:DD:90:A6:AB:23:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44222f2b-1203-4455-b787-472364f47a8f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44222f2b-1203-4455-b787-472364f47a8f/f9bbeccf-2022-32f1-8438-1debb27b375f.roa
Signing time:             Wed 23 Jul 2025 13:01:02 +0000
ROA not before:           Wed 23 Jul 2025 13:01:02 +0000
ROA not after:            Tue 21 Oct 2025 13:01:02 +0000
asID:                     16509
IP address blocks:        69.53.251.0/24 maxlen: 24
                          69.53.252.0/24 maxlen: 24
                          69.53.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44222f2b-1203-4455-b787-472364f47a8f/44222f2b-1203-4455-b787-472364f47a8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44222f2b-1203-4455-b787-472364f47a8f/44222f2b-1203-4455-b787-472364f47a8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44222f2b-1203-4455-b787-472364f47a8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9d:30:d8:11:2e:50:cd:eb:17:db:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44222f2b-1203-4455-b787-472364f47a8f
        Validity
            Not Before: Jul 23 13:01:02 2025 GMT
            Not After : Oct 21 13:01:02 2025 GMT
        Subject: CN=bf6afea5-e8d8-4361-841c-418afd4f3596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:84:c8:81:16:e0:64:96:2c:0f:9c:cb:b0:44:
                    2c:1e:62:64:d2:f8:01:c6:c2:a5:87:6f:5d:ba:cd:
                    ca:63:c0:2f:01:db:60:01:b1:f3:a9:6b:02:a5:18:
                    d6:81:71:c6:16:3b:1c:04:f6:ed:d8:e9:58:b4:4c:
                    4f:e5:62:d4:9d:b9:ce:c6:34:fd:25:6a:72:e6:7b:
                    11:21:cc:b4:29:b3:60:39:24:e2:b1:9b:88:ef:9e:
                    8b:ec:a2:15:ca:e4:30:40:06:21:0d:b8:3f:d7:c1:
                    08:ef:6e:86:c9:bc:26:8c:c2:1c:54:61:cd:3c:fd:
                    88:d7:93:44:8b:b8:81:12:84:b9:e1:45:5c:52:8f:
                    2d:90:52:0f:81:aa:be:94:bd:2d:73:f7:d2:51:98:
                    16:a1:94:92:97:f5:ef:ac:6d:40:bf:c9:a7:87:2d:
                    53:43:fe:b1:82:6b:3d:9b:a7:ac:62:2a:3e:aa:fc:
                    d3:3b:99:52:e9:a9:d9:18:1e:cf:6f:98:7b:67:bf:
                    85:13:0a:a5:85:15:55:b0:23:63:22:82:d8:ef:93:
                    8f:60:5d:20:e1:4a:ab:e6:c5:f5:0b:6c:a9:0b:ca:
                    8e:e1:a1:f8:b9:57:c5:00:fb:c0:ea:95:a3:d7:4e:
                    6d:6b:1f:a2:7f:d8:ca:ff:67:b9:2b:37:4f:7e:e2:
                    36:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:57:DF:99:B0:2E:38:D9:F4:A2:84:EF:EA:16:83:29:07:83:E0:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44222f2b-1203-4455-b787-472364f47a8f/f9bbeccf-2022-32f1-8438-1debb27b375f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44222f2b-1203-4455-b787-472364f47a8f/44222f2b-1203-4455-b787-472364f47a8f.crl

            X509v3 Authority Key Identifier:
                keyid:DE:3B:4D:6D:84:3B:56:BA:7F:CC:27:30:53:D6:DD:90:A6:AB:23:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44222f2b-1203-4455-b787-472364f47a8f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.53.251.0-69.53.253.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:95:af:39:e4:32:42:9c:37:0c:f1:d4:43:bf:85:4a:31:72:
         25:16:f2:46:45:7a:7a:9c:6c:df:c8:dd:b9:2b:34:e8:6f:92:
         3e:f8:89:56:a5:e2:21:58:42:17:7a:92:f2:f9:98:90:b8:ff:
         08:9e:fb:71:02:aa:ab:17:e9:c2:e4:7b:4f:d6:91:f9:aa:c5:
         7b:2d:7a:02:0a:74:01:f2:dc:b0:61:66:b1:b0:8e:cd:f3:10:
         c3:85:80:53:a3:65:29:63:39:e6:61:ec:d9:f6:6c:b9:1b:a8:
         8a:34:d7:90:b8:15:07:e1:3a:9b:89:a4:b9:4c:3c:97:d5:6a:
         5b:e5:48:fc:63:e4:7f:34:94:9c:e1:48:73:4c:56:95:27:c9:
         4b:4a:86:b9:a0:d9:47:52:3d:06:9a:c8:da:01:d3:21:c6:21:
         31:81:b9:ef:da:49:e6:70:81:c2:9d:fe:5b:0b:31:e6:e6:1e:
         c3:c5:64:00:ec:c0:8f:95:77:eb:8b:12:98:e4:a2:b2:3f:67:
         88:3f:e4:e2:39:1e:f8:a5:25:85:64:b1:bb:4a:7b:f5:0a:3b:
         5f:d8:a0:7e:a1:4e:bb:83:0d:8d:c8:d6:dd:7d:1b:28:2c:89:
         74:78:ce:fc:78:7a:e5:17:55:8a:dc:11:5e:9f:21:7d:8e:aa:
         74:10:ac:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:22:23 2025 by rpki-client