Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/2489eab1-fab2-357f-aeb8-08dc32897f54.roa
File:                     2489eab1-fab2-357f-aeb8-08dc32897f54.roa (raw, json)
Hash identifier:          EFQvVfiymFl2sWh0NmvMKTRK+ZEhqkljiTuPTmmT1Xw=
Subject key identifier:   41:61:29:DA:0D:8A:91:0E:86:CC:5D:FD:08:A5:26:E7:13:38:19:D0
Certificate issuer:       /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00
Certificate serial:       010D0C9F4328584A89A613EAE7C0648E2BAC1400
Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/2489eab1-fab2-357f-aeb8-08dc32897f54.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     20419
IP address blocks:        69.28.108.0/24 maxlen: 24
                          69.28.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Jul 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:13:ea:e7:c0:64:8e:2b:ac:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=32d1fb09-e586-479c-9343-ee07c854568c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:39:fc:16:32:ef:56:05:36:dd:de:02:3a:30:
                    0a:61:bb:a0:12:8b:b4:73:3a:c5:d2:ad:98:d1:dc:
                    55:3d:a9:a2:70:1f:4d:4a:a0:82:85:f1:28:80:44:
                    59:fd:cb:73:08:37:b2:83:38:63:f3:7c:37:6e:d3:
                    c2:b6:df:f9:80:53:a3:41:a3:4a:57:77:95:ac:8c:
                    d5:9f:fe:d8:65:4d:17:e8:ab:60:3f:cc:19:b3:d9:
                    f4:d5:79:9a:e7:21:ae:02:70:88:8f:be:b5:ba:df:
                    db:8a:dc:cf:f5:dc:a1:b1:d8:e1:3d:96:a7:5e:5e:
                    94:27:67:c9:cc:28:e2:08:9e:9b:5b:30:ce:ab:4c:
                    35:d5:a6:ca:a8:51:1a:08:f8:24:82:9e:79:84:0a:
                    d3:9d:86:28:17:00:a6:0a:3f:6f:5c:38:cb:53:5d:
                    59:d5:1b:b8:ab:61:9d:60:4a:8e:a0:e4:85:b5:96:
                    f9:46:c6:59:4a:51:d9:9e:b2:96:70:a7:92:52:ca:
                    c9:70:4a:d2:65:b1:ed:6a:d8:f3:e3:06:0c:18:ff:
                    9d:fe:84:67:bf:57:31:9e:1a:20:33:28:09:dc:2d:
                    07:96:b5:90:69:49:80:79:d3:b2:e3:e0:68:32:08:
                    1e:a3:ce:07:75:1a:8d:5e:65:68:6d:ec:3d:5b:06:
                    5b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:61:29:DA:0D:8A:91:0E:86:CC:5D:FD:08:A5:26:E7:13:38:19:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/2489eab1-fab2-357f-aeb8-08dc32897f54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl

            X509v3 Authority Key Identifier:
                keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.28.108.0/24
                  69.28.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:e5:50:07:fc:62:7d:df:e4:c8:2e:a2:33:ec:24:87:2a:49:
         bb:29:19:aa:80:6e:ce:3c:96:e0:cc:59:7f:64:e2:df:f4:57:
         72:57:70:e3:f6:85:6e:e4:7b:02:52:52:63:80:2a:41:4d:8b:
         d3:52:cd:5f:c0:46:ba:80:3c:da:13:fa:76:27:20:d6:00:05:
         24:7a:ae:48:a0:19:3b:77:0e:bb:d8:75:ac:d8:51:c4:51:a3:
         3b:37:26:e5:81:e4:e6:ef:f8:15:a2:df:32:bb:6d:81:b5:ca:
         fc:53:81:4f:0f:d8:c1:71:98:49:a3:73:fe:39:ff:22:16:9d:
         76:bf:96:71:f7:b6:ee:be:ae:93:68:63:7e:64:84:65:69:f9:
         8e:00:6e:a1:05:cd:0e:d7:bf:24:f7:a9:33:6c:b4:1f:d7:36:
         46:2a:d1:63:c3:cd:ff:e6:44:a5:d8:8f:a4:c4:05:5b:bd:f8:
         42:de:a0:ad:32:11:12:02:75:40:59:57:25:a5:19:37:2d:23:
         d7:50:cd:df:d4:13:f9:68:d3:42:bb:63:10:c0:7e:54:8a:d4:
         e6:60:ba:ed:33:ab:bc:b3:b7:1d:8c:ea:c1:8b:63:44:21:57:
         40:20:4f:3f:3a:b0:b9:f5:3e:87:eb:bb:50:dd:16:d7:fa:d7:
         a8:eb:e1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:34:47 2025 by rpki-client