Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/96256949-7af4-3046-9e7e-84a6583c5064.roa
File:                     96256949-7af4-3046-9e7e-84a6583c5064.roa (raw, json)
Hash identifier:          PQ4DtxEUfSDWDp3CL9CYaW4fazhl1MsHVw0L1f7FlBY=
Subject key identifier:   B7:D7:DE:C9:75:A6:53:FA:08:23:01:B5:75:C9:D8:1E:16:95:45:52
Certificate issuer:       /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial:       010D0C9F4328584AC2E108CE56D7CC40F6A1F500
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/96256949-7af4-3046-9e7e-84a6583c5064.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     396982
IP address blocks:        69.48.232.0/24 maxlen: 24
                          69.48.233.0/24 maxlen: 24
                          69.48.234.0/24 maxlen: 24
                          69.48.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e1:08:ce:56:d7:cc:40:f6:a1:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=1a37cbb6-499c-46a3-891c-f5696ec9db2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d8:64:b6:5b:3e:33:47:6e:f3:9b:ea:92:6a:
                    c1:8e:27:ed:2f:c8:0b:32:de:da:19:b9:23:ab:44:
                    15:f2:c0:9e:b0:4d:4c:82:72:14:c8:ff:18:c9:29:
                    6e:1a:66:09:cf:e9:b9:53:ac:0f:0c:00:ac:a6:09:
                    ba:40:3b:92:2e:fb:b7:c9:8e:e2:3d:61:1c:b6:28:
                    8f:01:4d:88:fb:26:78:6d:05:43:06:ff:fe:00:6d:
                    25:64:aa:69:7c:59:0c:b5:3b:6f:47:ce:fc:3a:7e:
                    f9:a1:08:d1:97:10:ed:f6:2b:58:5d:cd:94:e7:63:
                    ff:4e:95:6b:64:a7:9e:42:d5:14:8f:c5:be:e9:11:
                    65:bd:bc:f4:de:ce:0f:44:85:bc:76:c6:81:42:5c:
                    1d:8d:ae:26:33:82:17:70:a3:ce:8b:bf:c4:8b:98:
                    17:c3:41:53:06:07:5f:93:e7:3b:37:15:87:02:91:
                    b5:01:bb:a0:99:03:11:6a:f2:73:cf:ec:be:f8:56:
                    f5:2b:c2:f7:0c:63:a4:5d:1f:6d:c8:21:9f:cc:73:
                    c8:1f:cc:f3:c5:ce:2f:d5:22:46:3a:a8:9d:00:a3:
                    99:41:39:9c:0c:a6:3b:ee:d8:b5:f7:c6:6f:54:bb:
                    45:94:b5:b7:61:45:13:89:49:0f:57:b1:87:44:79:
                    e2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D7:DE:C9:75:A6:53:FA:08:23:01:B5:75:C9:D8:1E:16:95:45:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/96256949-7af4-3046-9e7e-84a6583c5064.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl

            X509v3 Authority Key Identifier:
                keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.48.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:26:2c:e3:fe:ff:eb:bc:6b:7c:af:f4:d7:86:af:0b:b8:df:
         dd:05:c0:31:23:b0:f6:14:51:27:df:ac:08:ce:46:27:f4:60:
         79:d6:65:75:34:b2:8e:39:9b:16:1f:9f:af:ea:06:60:17:7d:
         f8:87:28:c0:ed:b0:a8:4f:75:9d:c4:e7:81:3c:fd:b4:ac:70:
         99:2e:5b:95:c4:1c:95:ea:bb:9f:c9:4b:ae:23:64:3e:19:c4:
         09:8c:31:cd:fa:04:3b:ea:7a:a4:05:36:08:46:d3:21:12:da:
         5f:19:f5:56:66:e9:b3:8b:7d:23:a5:45:99:38:ea:b7:4c:87:
         b2:e3:98:9e:48:f7:42:88:4b:74:d6:fe:01:3e:a2:c3:e8:57:
         9c:ff:ca:82:fa:ec:2c:e7:6e:41:4f:95:72:e3:ab:9d:03:ff:
         62:da:cd:99:d6:c1:c7:39:e6:fe:05:a2:94:5c:67:8c:2b:66:
         61:43:65:96:0b:2d:99:12:9b:4e:72:7b:42:f5:83:fe:b4:55:
         31:bf:5c:1e:61:5a:8d:9f:bc:91:5d:c7:43:85:d5:b5:10:46:
         e4:b0:e7:11:31:e5:ef:85:bf:21:27:a6:5a:5e:1d:64:6e:b7:
         ab:8f:18:53:ba:ec:cf:4b:4d:18:7b:3b:6b:b2:65:47:b7:0f:
         98:81:de:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:37:51 2025 by rpki-client