Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e2aa4bdb-c15c-3e4a-ad5c-fa548bd2e9ea.roa
File:                     e2aa4bdb-c15c-3e4a-ad5c-fa548bd2e9ea.roa (raw, json)
Hash identifier:          Hl6OLLQyCbpnWToSYOvmxbmAOF5KjybQ+Uj2/fN1U+s=
Subject key identifier:   F4:D4:56:20:4F:14:E3:09:F2:71:68:11:AC:4B:6C:FC:83:39:83:E0
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DA8E3930F394A1BB02D500
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e2aa4bdb-c15c-3e4a-ad5c-fa548bd2e9ea.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     577
IP address blocks:        69.157.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:8e:39:30:f3:94:a1:bb:02:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=ff5cca37-10ff-4c8b-95b2-f6a3ba76a41d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:40:0e:9d:e6:d6:3e:fe:a0:33:ce:78:02:77:
                    a3:f2:16:15:f8:f9:5f:65:33:0e:e5:3f:23:dc:d7:
                    57:2b:28:da:dc:e6:be:96:68:62:f2:55:0b:61:64:
                    e0:f1:c0:a1:ff:50:5a:1c:ca:72:8a:fe:e9:c0:72:
                    59:65:10:46:f6:6b:73:5e:4d:cd:de:3d:d5:b5:dd:
                    e8:f9:ba:14:9e:21:09:4c:a3:3f:6b:46:c3:bb:6f:
                    0e:0f:3f:c7:58:9a:ff:6d:2f:4d:e4:60:58:5a:0b:
                    92:87:45:9f:59:ba:50:37:8b:27:24:41:fa:3b:d8:
                    bc:4b:4d:14:f7:16:a3:e4:c5:1d:97:37:8b:c2:1c:
                    5a:7a:9f:68:2e:7e:0a:82:5e:cd:91:0d:78:62:73:
                    f2:d0:3d:69:dc:49:fd:ed:31:01:64:82:4e:58:a2:
                    dc:16:be:9e:ed:3d:f6:83:50:c3:b5:ba:fb:15:15:
                    a5:3b:4b:7d:b1:e8:1a:01:8a:6f:a1:50:f9:8a:5f:
                    cd:ac:d9:c2:9c:02:c9:30:d7:46:cf:7a:d3:be:16:
                    3a:ac:13:3f:d2:35:b3:92:30:03:67:61:04:38:14:
                    09:63:0a:99:8f:75:ca:9d:b7:a9:dc:e2:61:e2:2b:
                    b6:e6:43:65:e2:ce:3e:33:eb:c9:6f:17:5d:bd:30:
                    98:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D4:56:20:4F:14:E3:09:F2:71:68:11:AC:4B:6C:FC:83:39:83:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e2aa4bdb-c15c-3e4a-ad5c-fa548bd2e9ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.157.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:13:56:5f:a2:93:a0:27:9c:6a:ad:5b:47:6d:c5:f1:a8:38:
         5c:67:b5:87:a0:0a:05:e9:f6:4c:f9:50:27:33:b1:fa:e0:17:
         e1:76:91:4d:5c:c4:cf:d5:3f:d5:97:18:84:51:05:fa:ae:4b:
         bb:28:1b:06:af:7b:5d:3c:59:e7:9f:ff:94:58:1c:60:1c:02:
         78:7a:2a:06:7b:43:d3:a9:f4:65:0f:7e:4f:f5:4b:ca:89:10:
         70:07:3d:2d:3f:e7:e8:88:3e:62:68:87:d7:3a:3d:6f:3e:78:
         74:94:9d:ec:5e:dd:6b:61:2f:24:aa:e8:2f:5c:05:8c:1a:1b:
         0f:b0:bc:04:07:19:65:71:19:d9:03:17:2e:ad:0d:bc:de:5a:
         bc:a0:ad:03:f9:01:5a:a3:09:81:a6:ad:e0:85:2f:64:5e:d1:
         33:6f:4d:68:73:8f:02:b2:81:76:74:8d:7e:a1:38:7e:81:3b:
         eb:6f:ab:2d:7f:2f:37:28:a7:b5:d4:3f:18:6c:7c:4c:6f:c5:
         ef:25:66:b8:d3:bc:ac:8e:fe:fb:4c:fd:3f:eb:c5:77:bb:a9:
         81:eb:7f:39:a4:e9:32:93:4f:c1:a2:41:c5:99:c1:0c:27:15:
         f3:24:e3:e5:e0:e1:59:60:53:7f:e5:ad:84:69:7f:05:35:c1:
         f0:cd:6e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:23:27 2025 by rpki-client