Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6172d736-c698-4515-a8d5-e8f599b88b89/a8fd4b58-ccfe-343c-b690-183d696a43e9.roa
File:                     a8fd4b58-ccfe-343c-b690-183d696a43e9.roa (raw, json)
Hash identifier:          0Wxwthi1VmSL4uWHf3Mgpv9DxGA6fSDXzhZBnPN5uxI=
Subject key identifier:   67:3E:D2:82:A3:04:12:B5:78:D1:74:2A:2D:DF:21:86:81:BD:6F:21
Certificate issuer:       /CN=6172d736-c698-4515-a8d5-e8f599b88b89
Certificate serial:       010D0C9F4328584A1B601036A705778E047EF280
Authority key identifier: 3C:38:46:CA:19:55:91:B3:98:5F:70:54:AE:9B:4B:95:7F:7C:59:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6172d736-c698-4515-a8d5-e8f599b88b89.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6172d736-c698-4515-a8d5-e8f599b88b89/a8fd4b58-ccfe-343c-b690-183d696a43e9.roa
Signing time:             Sat 07 Jun 2025 01:00:50 +0000
ROA not before:           Sat 07 Jun 2025 01:00:50 +0000
ROA not after:            Fri 05 Sep 2025 01:00:50 +0000
asID:                     55108
IP address blocks:        69.67.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6172d736-c698-4515-a8d5-e8f599b88b89/6172d736-c698-4515-a8d5-e8f599b88b89.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6172d736-c698-4515-a8d5-e8f599b88b89/6172d736-c698-4515-a8d5-e8f599b88b89.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6172d736-c698-4515-a8d5-e8f599b88b89.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:60:10:36:a7:05:77:8e:04:7e:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6172d736-c698-4515-a8d5-e8f599b88b89
        Validity
            Not Before: Jun  7 01:00:50 2025 GMT
            Not After : Sep  5 01:00:50 2025 GMT
        Subject: CN=4a7a106c-c10b-4ef9-8d07-b74bd2c7d625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:bf:d9:59:81:e6:e2:11:cf:2c:c9:ac:9b:64:
                    25:6f:b4:71:aa:15:7a:4d:93:cf:af:e4:48:9c:5c:
                    01:3d:40:23:e0:e6:28:c0:f0:e6:24:ff:6f:c3:21:
                    25:54:25:48:f9:74:63:9c:b5:61:c3:ea:f4:e4:97:
                    94:93:3f:b0:9b:5a:b9:ea:be:bb:ba:45:68:ff:89:
                    4d:2e:97:e9:33:10:7d:1e:e9:c7:6a:75:55:f6:da:
                    2b:89:34:b8:d9:39:66:db:66:cf:82:79:25:55:07:
                    90:88:e8:2f:30:b5:05:57:5b:36:79:9f:e5:78:2d:
                    e6:26:fe:c4:63:13:cf:b8:30:28:38:68:b8:d7:04:
                    5a:bd:fa:4c:e8:34:27:0d:4e:aa:6a:ce:7b:67:c5:
                    59:86:36:33:e7:a8:35:a6:06:19:08:c4:95:b7:98:
                    ef:5a:07:f1:6a:99:81:a3:b6:e1:79:c4:a0:a4:69:
                    d5:54:c7:53:76:cb:2f:a9:23:bb:04:4b:7e:de:17:
                    57:71:77:83:f9:ff:f1:3d:96:8e:7e:b9:07:0e:7f:
                    59:6d:a3:a2:c7:29:4c:dd:d1:0e:af:0e:68:1e:a4:
                    27:0e:83:c1:fd:62:13:af:81:ac:75:1f:23:14:d3:
                    f3:46:3b:bc:d4:5d:fc:80:f1:08:d8:0f:12:a1:56:
                    c2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:3E:D2:82:A3:04:12:B5:78:D1:74:2A:2D:DF:21:86:81:BD:6F:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6172d736-c698-4515-a8d5-e8f599b88b89/a8fd4b58-ccfe-343c-b690-183d696a43e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6172d736-c698-4515-a8d5-e8f599b88b89/6172d736-c698-4515-a8d5-e8f599b88b89.crl

            X509v3 Authority Key Identifier:
                keyid:3C:38:46:CA:19:55:91:B3:98:5F:70:54:AE:9B:4B:95:7F:7C:59:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6172d736-c698-4515-a8d5-e8f599b88b89.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.67.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:84:9a:fb:db:23:26:3e:e2:3d:d3:ce:6f:3e:85:43:17:74:
         97:6d:fd:36:a0:1d:bb:3c:be:1e:2a:1a:43:77:3f:ae:56:14:
         43:84:93:d9:04:06:a5:74:9c:66:b8:d1:18:31:6d:49:30:a2:
         7b:d3:aa:47:6e:d1:3a:93:95:6a:2d:84:4b:92:5e:7c:46:d9:
         49:a2:be:eb:00:8d:cd:14:cc:9b:f1:f5:43:b3:96:e2:17:dd:
         36:e3:ec:f4:b4:07:91:43:47:fc:a1:b6:3d:55:13:77:d5:03:
         a9:9d:5c:5a:04:47:87:3c:76:c1:e6:9c:34:18:63:ab:97:a0:
         a0:a8:3f:d9:50:c5:f1:62:86:f9:50:5b:01:53:89:ed:37:d7:
         8d:19:09:db:09:7e:1a:3b:d8:e2:00:8c:36:68:a4:b6:2d:8d:
         76:24:cf:c0:5f:14:e0:79:c6:bc:e8:9a:8c:33:c2:f2:dc:c1:
         18:f2:c3:67:db:75:98:21:04:5e:f3:e3:9c:05:4a:bd:ce:32:
         82:cc:57:3e:9c:c7:af:d4:2e:f0:e4:8f:27:f5:d9:e0:58:00:
         96:ad:6f:20:29:3e:7f:8c:43:20:f3:94:c2:57:2b:10:52:38:
         6d:5e:24:1b:28:70:d1:91:80:53:9a:3a:ce:7f:72:e2:32:59:
         59:d7:ac:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:07:30 2025 by rpki-client