Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/72490e2b-d9c4-3ddd-a82a-8ec002bfb10e.roa
File:                     72490e2b-d9c4-3ddd-a82a-8ec002bfb10e.roa (raw, json)
Hash identifier:          pXom4V5OTL1oJdNewzWAIzr6r3OnpTjf3KYoVZNnz7o=
Subject key identifier:   7B:B3:0E:DC:3C:B7:C3:19:45:50:36:F0:A6:4E:27:E0:55:FB:8C:88
Certificate issuer:       /CN=1d639366-c044-456e-b8c8-0de04a543a0c
Certificate serial:       010D0C9F4328584BAEC7BD65F5E55A2334F72E00
Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/72490e2b-d9c4-3ddd-a82a-8ec002bfb10e.roa
Signing time:             Wed 29 Oct 2025 13:00:39 +0000
ROA not before:           Wed 29 Oct 2025 13:00:39 +0000
ROA not after:            Tue 27 Jan 2026 14:00:39 +0000
asID:                     30059
IP address blocks:        69.61.246.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ae:c7:bd:65:f5:e5:5a:23:34:f7:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c
        Validity
            Not Before: Oct 29 13:00:39 2025 GMT
            Not After : Jan 27 14:00:39 2026 GMT
        Subject: CN=b10a303b-239f-46b7-9f61-5cc19d4c8799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d0:dc:a6:8d:23:03:bf:c2:93:55:92:66:f0:
                    d1:03:b5:36:5b:b2:1d:1e:46:38:86:67:89:33:1a:
                    f2:e6:f1:f7:3b:75:40:d1:4d:6b:fa:55:6c:bd:0c:
                    3f:1e:ff:38:57:f6:8b:c2:a8:44:f7:b3:51:ba:84:
                    cb:0b:83:e8:cb:cc:33:ae:0f:b6:de:58:05:20:f4:
                    c4:de:49:66:35:33:af:9b:97:d5:ef:48:6e:70:b1:
                    4d:e7:f1:97:74:e6:8f:7b:f5:bd:2e:e9:87:da:25:
                    b9:c8:20:5d:cf:98:5c:71:3e:bc:ca:07:9b:6c:8f:
                    67:71:ee:7a:67:e4:7b:ab:3a:49:35:9f:c2:57:53:
                    42:0f:8f:94:f2:a1:a7:4a:df:3c:27:6e:2e:82:83:
                    94:bb:db:2d:ff:15:4c:a4:8a:9b:8f:5f:99:de:c9:
                    82:7c:07:1f:12:79:05:6b:3a:22:08:be:84:ae:38:
                    d7:f7:8f:50:d8:a2:9b:82:77:09:e3:83:7c:a8:af:
                    ea:f4:de:24:82:d8:eb:dc:15:ca:53:e5:cd:6e:d3:
                    45:c8:d6:bc:d3:a5:a7:25:d1:47:04:47:5c:4e:97:
                    74:6e:93:4a:b1:13:e3:bb:28:ff:41:b3:95:e9:81:
                    13:86:f5:f9:7f:89:f9:0f:25:a1:67:8c:01:42:09:
                    47:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B3:0E:DC:3C:B7:C3:19:45:50:36:F0:A6:4E:27:E0:55:FB:8C:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/72490e2b-d9c4-3ddd-a82a-8ec002bfb10e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl

            X509v3 Authority Key Identifier:
                keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.61.246.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:32:66:c1:b7:73:ba:03:5e:ef:85:8e:08:63:d8:e3:4f:6d:
         f1:36:45:79:b3:75:17:be:4e:ad:b6:8e:89:75:c8:51:42:ca:
         34:0e:7a:64:43:04:e4:e4:ba:63:11:3f:c0:85:1f:32:b6:f9:
         d3:4c:df:47:d2:fb:8f:45:c6:ba:cb:f0:7e:92:e7:b2:d9:26:
         2b:1a:9d:ec:d8:a8:a4:f8:03:14:c6:24:d2:bb:e6:69:44:d8:
         30:1e:a7:a2:bb:e2:b8:fe:a4:a6:8b:5a:93:14:b8:e3:92:8f:
         c7:72:a6:c6:b5:08:48:5a:e2:03:5c:51:45:ab:e7:6c:79:c6:
         e7:86:27:ee:5d:3c:18:f1:ba:74:84:99:f5:45:6f:10:4b:2e:
         45:04:cb:2e:43:cf:c0:fe:e4:cc:c0:1d:d9:ce:9b:f1:e0:11:
         e5:b3:77:f9:2a:d2:7c:6f:e9:93:dc:82:88:6d:a4:58:79:1c:
         72:07:98:e2:b8:8c:c1:e9:06:80:71:05:f5:00:ed:7b:3f:01:
         ff:28:7c:dc:23:8c:7c:4c:f9:4c:ca:07:c2:70:8b:fd:96:65:
         66:e9:9a:3b:55:39:08:4d:c1:1a:79:91:a5:c1:77:24:20:2a:
         25:fa:cb:ee:86:dc:ba:e3:fc:53:29:db:9f:de:53:ff:dd:37:
         1b:5e:4a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:13:06 2025 by rpki-client