Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5a3947e-e6a7-30f7-a0b4-bd1ab76c41a8.roa
File:                     d5a3947e-e6a7-30f7-a0b4-bd1ab76c41a8.roa (raw, json)
Hash identifier:          l5PbPsQqwUfuACWgoDP5qHFlbiNwDqbjj8Es4XufecI=
Subject key identifier:   F6:D5:9E:B5:49:39:CB:49:8B:5E:58:A1:D7:E2:1F:81:61:72:35:93
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C05E4599E5AC9CACE977000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5a3947e-e6a7-30f7-a0b4-bd1ab76c41a8.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33287
IP address blocks:        69.249.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:e4:59:9e:5a:c9:ca:ce:97:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=6565b9e5-d680-4a99-8414-e9df6336caf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d8:3a:63:53:eb:3a:01:0d:7e:71:c2:03:8e:
                    a2:d6:cd:ec:cd:07:3f:e3:73:41:ff:1b:c5:51:a8:
                    d6:39:e9:90:52:00:2f:44:cf:73:a2:2a:7b:13:b1:
                    28:6d:c1:fb:3d:8b:5b:07:09:a6:f2:4f:a6:9d:66:
                    05:0c:d1:9d:62:4b:e7:89:2f:16:7d:a4:a8:63:f9:
                    80:6e:b6:be:fd:d5:18:9b:d2:04:3d:d5:bf:22:ba:
                    f9:0c:b9:27:3f:68:3a:c2:35:ee:73:55:2b:fc:71:
                    fb:81:20:c7:05:00:44:e4:36:24:84:79:7d:03:a5:
                    e2:d2:28:cf:ee:9a:ba:2b:cb:16:05:d2:ee:0d:22:
                    5b:30:c9:a8:4a:58:0e:b1:3e:d7:0e:94:1d:47:5b:
                    4d:90:9b:3e:85:71:e6:9c:eb:1a:95:98:48:8e:f8:
                    6b:5c:54:02:05:60:d3:7f:9b:20:cb:a5:47:f8:e5:
                    fa:e7:7e:28:eb:75:f0:f0:62:89:0d:11:cc:34:54:
                    6a:ea:b4:dd:0c:13:1c:88:4e:c5:21:3f:6e:7a:04:
                    17:9d:f5:09:e7:ea:09:c3:e0:90:74:14:ed:af:74:
                    36:74:68:b7:20:66:22:32:99:cf:21:50:37:b8:c8:
                    9f:7c:70:de:53:9a:23:78:27:4f:14:a5:9a:57:1f:
                    63:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:D5:9E:B5:49:39:CB:49:8B:5E:58:A1:D7:E2:1F:81:61:72:35:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5a3947e-e6a7-30f7-a0b4-bd1ab76c41a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.249.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:64:1a:73:96:a2:6a:a6:25:b6:70:e4:ff:fa:44:8f:3f:80:
         de:f5:a0:f1:03:df:ce:68:33:29:60:5e:f4:e9:11:d8:c7:c1:
         97:68:87:e0:4a:16:b2:93:f3:74:8b:ae:7f:78:ff:b3:56:04:
         30:9a:e7:5f:12:48:a4:e3:66:a7:4f:9a:c3:ae:07:6f:38:d0:
         77:c8:d6:22:e5:bf:b4:98:ca:86:8f:a3:fe:77:5e:67:58:81:
         65:86:5e:70:e5:5e:15:ec:0e:fe:ca:11:a8:d1:48:f1:75:f9:
         6d:e9:47:d9:3e:c8:88:ef:f6:bb:f7:7d:e1:bf:17:a9:b1:39:
         cd:3d:60:ac:e3:3d:b7:80:88:2b:68:2f:df:a3:88:8e:19:fa:
         14:bf:d0:59:20:c0:6a:bd:0a:6f:fb:cb:6b:0a:99:74:6b:ee:
         65:40:e5:b1:fc:c2:7b:ef:07:b3:cc:d5:b9:ff:7e:dc:72:19:
         12:9f:26:51:3a:83:3d:89:dd:80:6e:10:42:1a:57:95:ce:bf:
         f9:2d:74:59:64:1d:ae:bc:97:1b:d2:17:c1:c0:35:c8:1b:49:
         63:98:da:cc:6d:5a:e7:b8:87:44:59:b5:0a:f8:bd:62:c4:ca:
         0f:a2:76:02:9e:7d:b2:53:0e:9c:51:96:45:17:53:73:f1:78:
         b8:14:bd:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 04:49:36 2025 by rpki-client