Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/86898113-afab-3dca-aada-15fcc2464a87.roa
File:                     86898113-afab-3dca-aada-15fcc2464a87.roa (raw, json)
Hash identifier:          t2hKKfiGu8p657VS45t/GoMsPhoa8OoJcCtI4C/y7a4=
Subject key identifier:   C3:B1:EA:44:95:B9:5B:07:4D:B1:7A:83:6C:51:E3:41:37:32:44:F9
Certificate issuer:       /CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
Certificate serial:       010D0C9F4328584B1806E121C14FCAAC6A03FC00
Authority key identifier: B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/86898113-afab-3dca-aada-15fcc2464a87.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     396982
IP address blocks:        69.48.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Sep 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:e1:21:c1:4f:ca:ac:6a:03:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=9a6048f8-8e46-41b3-b195-1784f8bf9ea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f0:c6:18:a9:ce:30:81:7e:51:7e:26:62:7d:
                    e1:d0:60:74:5b:d1:72:45:e5:94:39:1f:b2:76:fc:
                    fe:1b:93:6d:fb:87:4f:a6:b8:10:51:0b:05:4f:9f:
                    4b:cb:f3:a7:3c:5f:4a:4f:5b:59:b1:02:45:64:99:
                    5d:1a:d7:ba:c6:40:8d:6f:82:4f:2b:95:81:63:33:
                    03:f4:0a:85:f0:8c:e6:fa:8f:41:80:d1:6e:1c:e4:
                    1d:a8:6b:9a:13:1c:23:40:0a:cc:4e:0f:69:19:4a:
                    33:22:43:f9:ae:b0:35:c3:7d:b8:26:0f:68:b6:8d:
                    b4:63:62:75:8b:b3:25:65:e0:64:2e:88:20:f4:47:
                    2c:23:f1:52:d7:b4:ce:36:0a:a8:5b:0d:43:40:e4:
                    a4:b9:78:64:4b:aa:0a:b0:d2:e3:9e:40:2f:c8:d7:
                    78:80:48:b2:77:39:3d:72:e5:41:d1:d9:59:31:67:
                    1a:e1:8e:11:97:27:79:3a:12:34:77:78:25:01:6b:
                    ed:7a:d2:86:b3:bc:85:c4:5c:6a:4e:7a:df:c6:0c:
                    e1:b1:14:f6:52:8b:d5:59:9a:86:ef:cd:2d:91:df:
                    62:77:86:db:99:b9:a6:88:b2:0d:53:03:76:55:30:
                    b6:f0:27:61:dd:2f:94:f3:ba:e5:4f:62:22:79:a9:
                    24:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B1:EA:44:95:B9:5B:07:4D:B1:7A:83:6C:51:E3:41:37:32:44:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/86898113-afab-3dca-aada-15fcc2464a87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl

            X509v3 Authority Key Identifier:
                keyid:B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.48.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:a5:18:12:d6:a1:fa:fd:af:a4:ca:27:f5:ef:55:b4:0b:87:
         86:a3:df:4e:eb:fe:f0:49:7b:1c:ab:84:1c:f0:19:2c:68:ab:
         db:e5:71:14:3f:39:a2:02:de:b6:96:20:c3:35:c1:49:e6:18:
         1a:9f:8c:6c:d2:58:38:99:c7:a5:53:63:2e:ac:32:c4:9b:7b:
         d4:e6:c3:5b:69:83:25:11:e3:91:5d:66:fa:03:3e:42:eb:25:
         95:48:9d:03:79:ca:e6:ad:05:0f:00:61:e3:f1:f2:4d:42:a8:
         96:1e:75:40:6f:3e:cb:00:2d:e1:3f:87:02:d2:13:de:59:71:
         81:c0:f1:dd:8a:e3:27:b9:87:b1:5b:0c:f1:7e:66:fb:99:8f:
         a6:06:8d:ec:a9:d3:5e:7b:0a:e3:04:61:19:51:f5:55:ff:28:
         10:c5:61:83:00:46:50:26:b0:a6:5f:b0:4c:61:e6:ce:53:c8:
         d7:4c:ff:f5:71:73:9b:22:4d:e1:df:89:43:66:6b:e8:c3:61:
         ac:6a:3d:cc:da:9f:e2:7d:f8:1a:ef:fa:93:19:14:b4:25:47:
         63:c1:ad:9f:d8:2b:6b:59:2c:fb:40:0f:5b:dc:92:e7:42:79:
         6a:f7:7d:85:5c:6b:6f:cc:5e:5f:14:39:25:e4:7d:81:4b:7c:
         97:b4:07:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:07:41 2025 by rpki-client