Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/c84357d8-f33f-3c67-b65b-b50d4878537c.roa
File:                     c84357d8-f33f-3c67-b65b-b50d4878537c.roa (raw, json)
Hash identifier:          gZ545eH05TJrDvTEcvwhfa8PVlAyJ+HL/g81TBtzHKg=
Subject key identifier:   B2:03:2C:6D:58:A1:92:4A:8A:A9:96:24:86:06:60:8B:0A:2D:CD:E2
Certificate issuer:       /CN=4ff55fbe-39c2-45b4-9aa2-60162d4e2932
Certificate serial:       010D0C9F4328584A60FEE76D9B72A1C8272BA140
Authority key identifier: 1C:FF:40:76:91:B6:60:F1:49:FC:95:03:8F:89:2C:12:4D:4C:01:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/c84357d8-f33f-3c67-b65b-b50d4878537c.roa
Signing time:             Tue 01 Jul 2025 23:31:58 +0000
ROA not before:           Tue 01 Jul 2025 23:31:58 +0000
ROA not after:            Mon 29 Sep 2025 23:31:58 +0000
asID:                     16509
IP address blocks:        69.194.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:60:fe:e7:6d:9b:72:a1:c8:27:2b:a1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ff55fbe-39c2-45b4-9aa2-60162d4e2932
        Validity
            Not Before: Jul  1 23:31:58 2025 GMT
            Not After : Sep 29 23:31:58 2025 GMT
        Subject: CN=d1661b50-3289-4f92-8948-33af1fafcb78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e0:b4:a4:06:2a:e8:d6:45:3d:c8:c8:8b:7c:
                    83:29:3b:1c:d9:93:fb:32:10:4e:79:1a:bb:ee:c3:
                    5f:0c:32:70:7b:f2:b0:44:4e:1a:fe:2e:5a:82:75:
                    01:f8:b3:db:61:14:5f:9f:e7:8c:07:d2:19:ab:5f:
                    ac:55:0d:f8:4a:ad:9b:45:ac:6d:59:c7:09:f0:47:
                    30:51:95:0f:84:de:6e:b4:71:ec:b0:45:1d:68:99:
                    16:d7:a7:4e:b6:6b:67:53:cc:78:7b:d8:06:df:5e:
                    22:fd:1b:3a:8e:c2:c0:d1:27:0a:d0:97:4c:ea:95:
                    c8:e0:5c:33:ac:78:71:72:0b:41:e8:5a:a4:22:78:
                    c5:92:51:14:00:74:e2:9b:5a:f4:c0:80:87:b0:14:
                    dd:00:f4:bb:2d:78:ef:a0:72:b9:87:39:30:4f:e8:
                    f9:f1:83:b5:bd:1a:96:34:0c:d6:4e:fc:cb:91:88:
                    2c:88:8a:ee:32:a4:41:11:ff:95:bd:85:40:18:67:
                    5e:ea:8d:64:a8:f8:ba:ba:3c:8c:5b:50:80:a4:47:
                    c0:5e:dc:af:11:e6:2a:6d:a1:c5:8a:a1:78:d4:88:
                    60:0c:bf:24:3f:c1:82:7c:d0:11:42:dd:b2:83:4f:
                    7e:34:50:22:4b:f1:3a:44:61:43:34:ec:1f:f2:15:
                    f4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:03:2C:6D:58:A1:92:4A:8A:A9:96:24:86:06:60:8B:0A:2D:CD:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/c84357d8-f33f-3c67-b65b-b50d4878537c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.crl

            X509v3 Authority Key Identifier:
                keyid:1C:FF:40:76:91:B6:60:F1:49:FC:95:03:8F:89:2C:12:4D:4C:01:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.194.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:12:ce:61:d6:ff:55:2e:ba:c6:d3:4d:a0:af:cb:7a:58:9f:
         59:36:bb:ba:b9:f3:2d:6f:bb:b7:65:e9:d6:b0:21:5f:54:ae:
         f9:50:23:58:71:16:7f:6b:2c:86:42:5c:05:88:aa:16:8e:59:
         c6:e8:15:5d:c1:37:55:8d:2a:5c:cb:9e:6d:c8:0a:4f:38:2a:
         70:ba:3c:9a:48:bb:ed:5b:da:17:3e:5a:d6:23:2f:37:03:94:
         f5:c7:c2:2d:3a:40:ca:3e:79:ab:10:b8:e2:55:74:e8:fd:a0:
         cf:c3:f2:09:78:4a:0a:3a:dc:78:6d:29:8a:1e:1d:a4:90:3d:
         2c:16:c3:b6:cc:e3:a9:a1:49:33:8e:7d:d6:ea:33:a3:d4:31:
         d5:51:27:1a:a5:27:3d:5f:16:19:da:ca:5c:43:a6:af:6d:88:
         13:d3:8a:b2:22:c6:e2:eb:2e:4b:0d:82:16:08:a1:4c:40:48:
         83:56:e9:c5:39:1d:d3:bf:d9:c3:1d:66:e4:40:b2:63:7a:4b:
         c0:58:c7:69:0d:b5:39:31:7f:f3:ba:62:da:a8:06:8e:69:3f:
         1d:c1:b2:cd:17:6a:92:29:b1:6d:ed:dd:a9:fe:18:f1:e3:68:
         2c:21:dc:8b:d8:5b:98:29:8d:bd:8f:46:97:90:77:0e:05:85:
         3c:3f:b5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 19:55:55 2025 by rpki-client