Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/a22afaec-8262-3533-802a-db93f359e78a.roa
File:                     a22afaec-8262-3533-802a-db93f359e78a.roa (raw, json)
Hash identifier:          zMpAA8PzLG3AEKfS7CXJPzv5u+UE9bQGhx6lwTk2nk0=
Subject key identifier:   0F:BC:64:A1:D6:75:58:93:4F:7F:F1:8A:82:1F:03:2C:8A:56:68:96
Certificate issuer:       /CN=5f6f7623-0788-410a-b9dd-8040879aa924
Certificate serial:       010D0C9F43285849CE9A40B988EFEA6551DA7C70
Authority key identifier: 6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/a22afaec-8262-3533-802a-db93f359e78a.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     19197
IP address blocks:        69.41.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:40:b9:88:ef:ea:65:51:da:7c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f6f7623-0788-410a-b9dd-8040879aa924
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=54ff1116-1eba-40fc-9a87-bc65a99b8c4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a9:fb:0b:2e:dd:e0:06:6f:95:45:d8:ce:dd:
                    ce:3a:79:d6:13:ca:d2:e9:0f:17:68:c4:c5:3d:58:
                    56:df:3c:a8:31:1d:47:b7:f3:9b:17:45:ab:64:84:
                    c8:4a:02:59:39:59:a0:c3:7e:c0:3f:12:57:72:be:
                    7c:9a:c0:1a:f7:82:67:f2:66:07:5a:6d:5b:47:85:
                    42:b9:92:c9:1e:a5:e2:9f:21:7a:1f:6e:49:8e:3f:
                    de:41:de:84:3d:8e:82:db:c2:a3:85:45:d0:e2:4f:
                    7a:89:c1:64:3d:08:80:04:c6:d6:45:a4:87:bf:02:
                    2c:bd:d7:56:b5:30:30:fb:30:db:20:1b:a0:55:33:
                    26:04:81:e8:ec:e6:a7:5e:5b:a0:54:d2:b1:9a:8d:
                    1d:e2:79:06:ec:5d:9b:4b:40:9b:2c:36:46:45:20:
                    81:94:61:ac:ed:1e:ff:99:ea:eb:1a:f9:ca:11:2b:
                    84:b4:53:f1:fc:ac:03:eb:83:c5:d5:2c:02:07:34:
                    a9:82:5c:f5:67:c8:a5:6c:ea:c7:ef:52:85:94:94:
                    73:4a:f2:67:65:e6:69:07:7e:4c:b6:77:55:ae:e9:
                    57:25:95:3b:47:bb:ed:4b:49:5d:60:ab:29:3e:7b:
                    de:58:72:2f:81:b7:a8:8c:b8:34:15:bb:44:56:f5:
                    42:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:BC:64:A1:D6:75:58:93:4F:7F:F1:8A:82:1F:03:2C:8A:56:68:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/a22afaec-8262-3533-802a-db93f359e78a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl

            X509v3 Authority Key Identifier:
                keyid:6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.41.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:cd:e6:48:97:75:2a:70:63:63:63:d7:91:17:0a:c6:be:53:
         1e:f2:bd:bd:09:a4:4e:3d:7f:7b:96:e0:5a:50:ac:07:5f:23:
         80:c7:6d:d6:38:ef:95:4f:cc:fd:cd:9b:d2:91:ae:e5:78:31:
         a9:5f:20:0f:9a:dd:12:0a:e1:6e:f2:e8:9e:b4:a5:77:7a:35:
         27:64:b6:95:40:20:8a:a1:b1:81:b0:2c:2f:6e:18:fc:9f:bc:
         2e:14:03:29:11:d1:38:f5:61:8b:d1:c4:2b:98:f3:d9:17:67:
         4e:0e:16:16:33:83:5f:92:47:36:2e:49:b0:ec:e5:46:aa:f3:
         f9:d5:34:f3:e5:e4:01:ec:83:01:83:0e:7b:02:fd:82:f2:4a:
         d1:2e:e9:83:48:7b:66:6a:67:0e:18:45:ef:31:d1:e8:0a:3c:
         af:e9:47:42:6b:de:66:6d:7d:cc:06:43:1e:4b:97:1f:3d:3c:
         3b:33:04:fc:7e:6b:d4:fd:a3:59:d2:4a:02:c7:37:e6:df:47:
         4a:ee:8c:c3:5c:17:0c:34:21:19:f5:3a:d9:40:e4:d3:63:43:
         5a:9d:9f:17:ab:11:e0:c8:ca:79:d0:0c:f6:f9:c7:47:fd:27:
         45:6f:f1:c2:55:0a:e7:b6:8a:44:be:fa:28:ab:83:4d:08:e8:
         02:d3:d2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:15:44 2025 by rpki-client