Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/2aafe8a7-a001-319f-b49b-ee4bd7d3c942.roa
File:                     2aafe8a7-a001-319f-b49b-ee4bd7d3c942.roa (raw, json)
Hash identifier:          5GuXcBMyZtiarSJc0vrEW9LWcBxTiLJiRDYZOx52f+Y=
Subject key identifier:   68:D6:9A:D0:5A:A5:CA:D2:F9:10:1A:30:01:9C:61:9E:B1:AE:91:E4
Certificate issuer:       /CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
Certificate serial:       010D0C9F4328584AFAB6826C4463362321A9E4C0
Authority key identifier: A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/2aafe8a7-a001-319f-b49b-ee4bd7d3c942.roa
Signing time:             Tue 26 Aug 2025 01:00:32 +0000
ROA not before:           Tue 26 Aug 2025 01:00:32 +0000
ROA not after:            Mon 24 Nov 2025 02:00:32 +0000
asID:                     62240
IP address blocks:        69.168.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fa:b6:82:6c:44:63:36:23:21:a9:e4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
        Validity
            Not Before: Aug 26 01:00:32 2025 GMT
            Not After : Nov 24 02:00:32 2025 GMT
        Subject: CN=433df816-ca2c-4170-8c6e-0005c629d111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:5e:9b:fe:4d:a2:b1:1b:e9:33:ef:9a:dd:99:
                    14:33:aa:10:8c:a0:2c:18:fe:09:2b:4d:30:80:f3:
                    74:71:22:58:56:ab:f3:93:b3:a2:f0:42:57:ba:57:
                    b0:08:db:42:4b:6a:cd:27:56:e2:de:e6:b0:d4:76:
                    3c:3a:c0:77:70:84:a0:0f:f6:79:ef:ce:4b:31:8a:
                    df:da:e4:7b:bf:0e:32:52:a6:83:96:e5:2c:78:20:
                    32:52:11:4f:a3:96:f4:90:3f:93:a3:97:e8:da:bf:
                    41:61:6b:a7:d2:4f:b0:90:e3:4c:c3:d1:4b:d1:4f:
                    c4:1a:e8:c3:7a:14:54:be:3d:dc:95:1b:87:4c:eb:
                    62:02:c9:9e:fe:15:85:1f:22:15:dc:f4:bb:8f:66:
                    67:6b:98:a9:65:d0:0f:ff:d2:6b:e1:68:f7:e6:92:
                    e2:8f:17:55:6f:96:b7:0e:25:77:e1:02:58:48:52:
                    1a:59:2e:a9:a4:70:05:8a:0a:ad:3c:3a:db:cd:9d:
                    4f:fd:13:b5:fc:42:2c:5a:f6:ab:7f:73:7e:fd:22:
                    7d:91:b5:8d:d3:27:89:17:61:bf:90:e5:d6:3c:84:
                    70:bd:6e:3b:10:30:a5:87:7a:d0:88:70:73:cc:28:
                    f6:3e:7f:1a:04:51:98:fb:21:bf:82:e3:5e:94:58:
                    15:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D6:9A:D0:5A:A5:CA:D2:F9:10:1A:30:01:9C:61:9E:B1:AE:91:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/2aafe8a7-a001-319f-b49b-ee4bd7d3c942.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl

            X509v3 Authority Key Identifier:
                keyid:A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.168.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:9a:50:ab:3e:42:1a:ff:ca:65:82:d8:a2:c5:77:6d:ec:5b:
         0b:ce:cd:3e:98:94:69:ab:f8:cd:bd:2d:d9:6b:b3:93:57:27:
         b2:fc:c3:02:15:4b:f3:c9:16:c6:78:1e:eb:12:96:62:c3:06:
         ee:13:02:10:83:a3:c3:36:4b:eb:25:03:28:77:19:02:ba:d4:
         bb:61:76:35:1d:55:17:f0:0c:3e:ce:04:7d:89:45:d0:09:a8:
         c6:19:5f:62:9c:07:13:ef:0b:5b:7c:6f:6c:89:b3:7d:e1:e0:
         cc:7b:37:a3:be:76:f4:19:4f:de:6a:eb:0b:e1:d4:b6:03:77:
         39:ba:49:04:d7:4b:83:1e:d5:20:ee:54:ae:2d:09:d8:2d:89:
         81:11:66:32:2c:30:4c:75:d6:dd:7e:41:10:54:3d:56:a1:1a:
         83:c0:e5:3e:f0:c2:88:86:44:65:f8:dd:3f:7f:d1:42:f6:50:
         01:5d:60:af:75:b9:f4:90:e8:87:28:c3:9d:5a:3b:cb:c7:fe:
         cc:bb:0c:bd:8c:81:20:3c:a9:9f:c5:c5:91:88:62:a9:64:16:
         6e:17:db:f2:ad:33:2a:9c:82:6c:33:91:61:93:86:11:f7:6b:
         28:b7:91:e2:bb:4a:f2:83:ae:49:25:7e:be:28:7f:84:b6:fc:
         d7:e7:a0:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr6toJsRGM2IyGp5MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWMxMWQzNTgtNjliOS00Yzk2LWJmNDctZTNlZGQ1Y2Zm
MjE4MB4XDTI1MDgyNjAxMDAzMloXDTI1MTEyNDAyMDAzMlowLzEtMCsGA1UEAxMk
NDMzZGY4MTYtY2EyYy00MTcwLThjNmUtMDAwNWM2MjlkMTExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg16b/k2isRvpM++a3ZkUM6oQjKAsGP4JK00w
gPN0cSJYVqvzk7Oi8EJXulewCNtCS2rNJ1bi3uaw1HY8OsB3cISgD/Z5785LMYrf
2uR7vw4yUqaDluUseCAyUhFPo5b0kD+To5fo2r9BYWun0k+wkONMw9FL0U/EGujD
ehRUvj3clRuHTOtiAsme/hWFHyIV3PS7j2Zna5ipZdAP/9Jr4Wj35pLijxdVb5a3
DiV34QJYSFIaWS6ppHAFigqtPDrbzZ1P/RO1/EIsWvarf3N+/SJ9kbWN0yeJF2G/
kOXWPIRwvW47EDClh3rQiHBzzCj2Pn8aBFGY+yG/guNelFgV1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGjWmtBapcrS+RAaMAGcYZ6xrpHkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYzEx
ZDM1OC02OWI5LTRjOTYtYmY0Ny1lM2VkZDVjZmYyMTgvMmFhZmU4YTctYTAwMS0z
MTlmLWI0OWItZWU0YmQ3ZDNjOTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWMxMWQzNTgtNjliOS00Yzk2LWJm
NDctZTNlZGQ1Y2ZmMjE4L2VjMTFkMzU4LTY5YjktNGM5Ni1iZjQ3LWUzZWRkNWNm
ZjIxOC5jcmwwHwYDVR0jBBgwFoAUoUAcC1VOMwu+PVO2Hd8acJrxAbYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lYzExZDM1OC02OWI5LTRjOTYtYmY0Ny1lM2Vk
ZDVjZmYyMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARajsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACyaUKs+Qhr/ymWC2KLFd23sWwvOzT6YlGmr+M29Ldlrs5NXJ7L8wwIV
S/PJFsZ4HusSlmLDBu4TAhCDo8M2S+slAyh3GQK61LthdjUdVRfwDD7OBH2JRdAJ
qMYZX2KcBxPvC1t8b2yJs33h4Mx7N6O+dvQZT95q6wvh1LYDdzm6SQTXS4Me1SDu
VK4tCdgtiYERZjIsMEx11t1+QRBUPVahGoPA5T7wwoiGRGX43T9/0UL2UAFdYK91
ufSQ6Icow51aO8vH/sy7DL2MgSA8qZ/FxZGIYqlkFm4X2/KtMyqcgmwzkWGThhH3
ayi3keK7SvKDrkklfr4of4S2/NfnoE4=
-----END CERTIFICATE-----
Generated at Mon Sep 8 04:55:51 2025 by rpki-client