Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/ac51639f-c8c3-3a86-b744-244b120994f7.roa
File:                     ac51639f-c8c3-3a86-b744-244b120994f7.roa (raw, json)
Hash identifier:          RdZ7Oy8u0CwTR/NZaZKmm6sFmXrzqnBgBcev/kmHfX8=
Subject key identifier:   EF:8C:CE:95:0B:3A:A3:F8:8A:CF:1E:7B:B2:16:C0:0D:2B:AA:7C:B7
Certificate issuer:       /CN=69e9bd0e-daed-4b94-96a5-e28b698e9d37
Certificate serial:       010D0C9F4328584AA42B81F1F976E47C1381B800
Authority key identifier: 06:EE:74:E1:3C:F4:AB:F9:07:8C:76:D9:29:2B:9A:E4:8D:73:AE:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/ac51639f-c8c3-3a86-b744-244b120994f7.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     11525
IP address blocks:        74.112.112.0/21 maxlen: 24
                          204.8.8.0/21 maxlen: 24
                          208.70.40.0/21 maxlen: 24
                          208.88.248.0/21 maxlen: 24
                          2606:5d00::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/69e9bd0e-daed-4b94-96a5-e28b698e9d37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/69e9bd0e-daed-4b94-96a5-e28b698e9d37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:81:f1:f9:76:e4:7c:13:81:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69e9bd0e-daed-4b94-96a5-e28b698e9d37
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=68c81b3c-cb9e-4243-a967-bb2d52f8d02b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c5:40:5a:b5:36:94:e9:66:c5:75:a9:f0:f4:
                    68:0c:f5:9f:c3:81:26:20:d7:f0:83:b4:f5:96:b9:
                    f3:b1:7b:41:e5:a2:ab:d2:dc:3c:8d:25:de:6f:9f:
                    66:cf:a4:33:1d:90:9a:73:da:70:fc:64:01:9c:2f:
                    a2:9b:52:0a:15:f5:ce:c3:ed:28:a1:05:ec:7c:74:
                    1e:c3:6c:80:b7:24:41:64:b7:34:5f:f6:49:ea:35:
                    2b:ff:7a:16:a0:e5:b6:17:6d:f9:1b:4f:9c:ee:81:
                    0b:36:e7:7b:05:9c:3a:9f:0e:de:0c:e2:68:28:2d:
                    fd:55:64:b5:46:72:f9:84:2d:76:76:59:bb:71:81:
                    3c:15:ea:ad:63:7a:5e:f5:e5:bb:69:1e:4d:cd:54:
                    9d:71:a0:f7:f9:94:e8:96:2c:2c:aa:0c:39:52:4d:
                    f1:7a:2b:c9:1c:67:06:b9:60:f7:8c:03:ca:c3:42:
                    e5:7e:7b:7c:ee:a6:de:a0:88:cf:92:8d:b6:a7:02:
                    3a:be:00:35:b6:ed:0a:48:66:87:8d:68:58:e4:44:
                    ab:54:f0:ae:06:6b:27:a5:d1:bd:b4:12:57:7a:40:
                    77:91:16:f2:33:7c:21:f0:91:11:63:6e:fe:16:a4:
                    e8:5c:b1:03:79:63:a9:2c:78:c2:1e:6f:03:83:ca:
                    a0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:8C:CE:95:0B:3A:A3:F8:8A:CF:1E:7B:B2:16:C0:0D:2B:AA:7C:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/ac51639f-c8c3-3a86-b744-244b120994f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/69e9bd0e-daed-4b94-96a5-e28b698e9d37.crl

            X509v3 Authority Key Identifier:
                keyid:06:EE:74:E1:3C:F4:AB:F9:07:8C:76:D9:29:2B:9A:E4:8D:73:AE:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.112.112.0/21
                  204.8.8.0/21
                  208.70.40.0/21
                  208.88.248.0/21
                IPv6:
                  2606:5d00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:56:80:c2:d9:79:25:20:82:c3:eb:d4:63:9b:11:bb:d2:72:
         8e:d7:51:4f:6c:8f:9c:73:25:e1:55:a3:a1:f8:66:62:d9:5f:
         84:04:4d:b1:3c:df:78:a2:ee:f3:3b:97:95:b7:bd:f6:be:41:
         1a:9c:ea:23:f4:b3:ea:e7:c8:e1:39:fc:92:bd:0f:d4:f2:4f:
         c5:22:d5:71:a1:3a:08:ec:71:b2:5e:b7:79:f7:5d:e8:fa:1d:
         89:72:9c:9a:d7:99:f1:53:41:32:2f:98:45:49:9c:01:0b:29:
         2d:bf:a6:f6:ac:47:40:7f:6c:53:9e:44:17:45:ae:18:8f:e6:
         65:19:07:7c:9c:e7:2a:bc:79:9b:0c:05:d5:63:e5:3e:51:17:
         4b:40:7a:78:c1:5f:79:37:e2:2d:c9:22:bd:3e:76:4b:63:2f:
         52:59:ef:15:a1:4b:74:ee:13:64:34:9a:33:64:ef:27:6c:24:
         c4:59:7a:d4:6c:19:52:1d:64:ed:1e:95:36:d5:2e:b1:e6:d6:
         b2:9f:c0:c0:f2:e1:4c:b7:f0:91:ac:79:82:6b:82:71:ba:45:
         59:23:68:bd:cf:a4:5e:d1:d8:b0:95:94:2e:5f:b8:e9:75:6c:
         58:89:fb:b7:39:fa:3c:9f:6e:10:8a:62:22:3f:bb:19:aa:6e:
         9e:00:36:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:11:31 2025 by rpki-client