Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd0de07-7471-4282-8298-a3a4df46d4ed/c5c8713f-4413-3be5-821b-fadd12f15e99.roa
File:                     c5c8713f-4413-3be5-821b-fadd12f15e99.roa (raw, json)
Hash identifier:          Fu87pZsO+c9wQLG02yz2FqdSZk8/Ly4lXzetHWA/5cc=
Subject key identifier:   7C:A6:F9:C2:4C:38:C9:1B:6C:AC:C3:FF:7F:A7:15:20:ED:07:20:C0
Certificate issuer:       /CN=5cd0de07-7471-4282-8298-a3a4df46d4ed
Certificate serial:       010D0C9F4328584B5141F2C42D49AC49F75B82C0
Authority key identifier: 81:CA:6C:23:10:0C:2C:63:BE:CD:DF:37:56:8C:6C:28:05:E0:76:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd0de07-7471-4282-8298-a3a4df46d4ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd0de07-7471-4282-8298-a3a4df46d4ed/c5c8713f-4413-3be5-821b-fadd12f15e99.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     396236
IP address blocks:        69.194.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd0de07-7471-4282-8298-a3a4df46d4ed/5cd0de07-7471-4282-8298-a3a4df46d4ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd0de07-7471-4282-8298-a3a4df46d4ed/5cd0de07-7471-4282-8298-a3a4df46d4ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd0de07-7471-4282-8298-a3a4df46d4ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:f2:c4:2d:49:ac:49:f7:5b:82:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cd0de07-7471-4282-8298-a3a4df46d4ed
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=49ed2f4b-109e-4f78-8bb4-a564d5e36a25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c9:9d:9a:a3:d7:6b:88:78:08:3c:9e:28:70:
                    7b:0d:e6:f3:f7:c1:ca:dc:10:2b:70:89:23:18:85:
                    c5:c6:70:2e:2f:e2:c7:ba:f8:bb:2a:16:e0:13:10:
                    3f:ac:f3:43:79:0e:2e:6b:1b:05:45:61:25:e0:35:
                    6f:19:28:12:34:49:c2:80:87:22:90:06:20:84:0f:
                    95:50:4f:f2:09:2b:a1:d7:02:f2:d2:c9:ff:d2:c3:
                    b7:af:7c:e2:18:82:a4:fe:d4:2c:03:72:c9:93:33:
                    c3:88:91:46:fd:f5:cf:e0:f8:4d:7d:55:f8:20:31:
                    85:68:d2:31:46:44:0d:cb:f7:de:c0:14:6a:fd:53:
                    3d:1a:01:95:9b:27:01:c7:bd:95:fb:66:8c:cc:04:
                    58:0f:cc:07:b3:70:be:b8:81:e6:ac:1d:c2:8e:c0:
                    db:81:9b:90:6a:fe:56:9f:c5:8f:54:cf:38:0e:05:
                    b6:dd:66:d4:43:f0:00:4d:34:97:3a:ec:80:c3:e2:
                    97:8f:4a:89:75:00:cd:d9:82:c7:b0:7c:f1:d5:33:
                    f9:f3:e3:cf:52:6c:d9:83:44:08:38:3a:a4:bb:cc:
                    30:83:5d:aa:a6:70:79:2d:50:f1:30:ea:51:fc:cd:
                    cf:29:63:07:d9:66:5b:ad:79:30:43:0a:59:b3:40:
                    29:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A6:F9:C2:4C:38:C9:1B:6C:AC:C3:FF:7F:A7:15:20:ED:07:20:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd0de07-7471-4282-8298-a3a4df46d4ed/c5c8713f-4413-3be5-821b-fadd12f15e99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd0de07-7471-4282-8298-a3a4df46d4ed/5cd0de07-7471-4282-8298-a3a4df46d4ed.crl

            X509v3 Authority Key Identifier:
                keyid:81:CA:6C:23:10:0C:2C:63:BE:CD:DF:37:56:8C:6C:28:05:E0:76:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd0de07-7471-4282-8298-a3a4df46d4ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.194.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:c7:c0:82:1a:0a:69:aa:79:72:4f:51:9b:15:d1:53:53:ba:
         5a:b0:3d:a0:37:38:77:2d:0d:de:69:ad:00:e8:1d:9a:b9:30:
         f0:7d:ff:0b:7d:05:b9:48:96:b4:9a:da:df:7a:ca:82:8a:b2:
         63:a6:c5:d2:f3:7a:1a:55:5d:6f:f3:59:ae:aa:9d:70:1c:4b:
         fa:a0:0b:e8:2d:78:7c:7e:07:c6:b8:f5:4e:30:3b:e0:a6:bd:
         c3:f4:78:73:71:f1:11:19:03:be:1d:00:54:f6:87:a8:e3:b5:
         a6:5b:cd:c9:11:0b:76:1f:5b:2c:07:3b:64:4e:18:92:a1:55:
         36:8d:a0:d9:fe:fa:b9:21:ed:70:b1:01:dc:23:35:fb:52:86:
         02:1e:d2:0b:1b:e8:37:07:99:ae:f6:70:5c:f2:ed:14:c3:ad:
         25:5d:f4:e5:a4:22:0b:21:bc:de:43:19:24:43:b5:ef:26:37:
         47:bb:3e:31:51:35:9a:3a:95:23:f6:d4:89:d7:9f:2a:27:33:
         cf:e5:a0:80:77:c1:1e:4d:31:d1:84:e1:77:05:74:e0:c1:9d:
         2e:fd:a9:68:f8:e0:d1:59:96:db:5c:c4:e0:f6:56:d4:1a:67:
         93:c9:e5:2e:fe:63:54:e6:12:99:aa:d9:03:4c:7f:b9:24:d9:
         e3:41:61:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:17:04 2025 by rpki-client