Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ab217356-76d3-3fdb-9412-842c8a458f80.roa
File:                     ab217356-76d3-3fdb-9412-842c8a458f80.roa (raw, json)
Hash identifier:          6h2yAra3uUBw8Mymx7+IRMdFLCu0I4j/ffF5E+xSCMk=
Subject key identifier:   5B:DE:49:33:83:6F:05:71:C3:76:40:C1:A3:B0:A7:FC:11:B0:AD:6E
Certificate issuer:       /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial:       010D0C9F43285849D275B55B349A883791B95080
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ab217356-76d3-3fdb-9412-842c8a458f80.roa
Signing time:             Sun 11 May 2025 22:10:45 +0000
ROA not before:           Sun 11 May 2025 22:10:45 +0000
ROA not after:            Sat 09 Aug 2025 22:10:45 +0000
asID:                     214271
IP address blocks:        69.176.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d2:75:b5:5b:34:9a:88:37:91:b9:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
        Validity
            Not Before: May 11 22:10:45 2025 GMT
            Not After : Aug  9 22:10:45 2025 GMT
        Subject: CN=d114b157-265f-4f88-a6eb-775b6e59fe51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d0:bc:35:30:87:90:d2:63:70:d1:9a:24:3e:
                    f3:de:9f:a6:b3:d2:ff:e4:cc:3f:9b:42:f6:94:be:
                    ef:4a:e7:1d:ce:45:d0:33:0b:8a:71:c9:3f:db:78:
                    28:e4:68:ab:ae:bd:73:66:cb:ce:ef:aa:d7:c4:05:
                    09:9b:9c:af:0d:cc:c0:0b:68:37:1a:f1:38:fc:d2:
                    d8:df:98:2f:90:49:3d:75:bb:38:78:8b:75:d2:14:
                    7a:8d:19:e4:30:14:16:f2:07:81:c1:b6:0f:d5:ca:
                    78:46:d8:92:62:07:36:22:5c:30:1b:fa:18:fb:f5:
                    13:6f:73:61:99:64:90:0a:0c:5e:5e:24:4d:1d:95:
                    c1:3d:dc:16:d3:c9:36:d4:7f:42:b9:fb:7b:99:5e:
                    de:55:db:a8:71:77:20:30:90:a5:5c:ff:23:82:d1:
                    1c:4f:83:6e:44:29:f6:8e:f4:36:dc:bc:d4:94:6b:
                    6f:d1:dc:33:e5:10:e6:0d:84:08:fd:d2:60:e2:75:
                    e3:ca:fc:18:fd:9e:f2:ed:80:9e:c3:5a:14:40:d2:
                    b8:27:6a:bb:d9:94:25:b4:ba:91:25:4c:d3:09:ff:
                    7d:fa:8b:04:c5:7e:18:ab:82:47:91:70:24:31:0e:
                    b7:9d:80:4e:ba:83:43:87:f2:b4:bd:86:93:a2:67:
                    fc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:DE:49:33:83:6F:05:71:C3:76:40:C1:A3:B0:A7:FC:11:B0:AD:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ab217356-76d3-3fdb-9412-842c8a458f80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl

            X509v3 Authority Key Identifier:
                keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.176.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:1a:7b:6f:d6:92:68:5b:a9:5c:f0:b3:80:24:fb:c6:3f:f4:
         f5:91:da:47:e4:73:70:1e:dc:a5:36:a5:82:3b:21:8a:43:3d:
         c8:85:be:d7:2c:77:69:ce:de:2e:92:52:37:eb:30:98:72:52:
         25:3f:5f:a9:bd:dc:b2:eb:ab:a5:27:ce:02:7d:e1:e8:a5:3d:
         1b:dd:82:db:1d:4f:c6:07:0b:fb:2c:94:e2:72:98:6a:93:8e:
         bc:09:58:9c:ba:dc:c2:7d:f0:b9:32:f5:88:88:d8:84:10:2a:
         9a:6d:18:7f:bf:c8:14:6c:fc:96:76:ab:f3:85:9b:3a:e2:ab:
         47:d8:73:ee:70:71:35:90:39:e7:aa:e4:83:a2:f1:62:7f:f4:
         62:87:ec:2f:43:ba:85:7c:75:b8:bd:ac:a8:d2:72:52:2a:fd:
         1d:24:8f:0a:17:5b:db:27:f6:ba:3d:bf:12:38:b8:b3:71:bd:
         16:66:da:86:b2:fc:90:e0:4e:8c:4d:fb:b7:cd:f0:f1:77:45:
         07:22:f6:79:f5:d9:93:dc:8d:6b:0e:60:bc:ff:8e:ef:b4:63:
         ee:9f:2a:b8:ad:ba:fd:e6:95:f1:af:a0:a4:86:8f:c3:93:fb:
         a9:61:a8:12:91:e5:45:83:a2:db:45:9a:c9:f2:98:bd:ce:48:
         ec:71:a5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:01:28 2025 by rpki-client